Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F647B34A2CC11EE8D55F238D25BE465.roa
File: 0F647B34A2CC11EE8D55F238D25BE465.roa (raw, json)
Hash identifier: oRC8n2sDAHJ6xtJYPUT1doOhsGZPoIgMvs7aQwbS0Ds=
Subject key identifier: 32:D1:48:12:D4:27:CC:67:81:28:02:9C:C9:E0:1B:1B:D8:8D:CE:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5904
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F647B34A2CC11EE8D55F238D25BE465.roa
Signing time: Mon 25 Dec 2023 02:19:41 +0000
ROA not before: Mon 25 Dec 2023 02:19:38 +0000
ROA not after: Mon 13 Jan 2025 02:19:38 +0000
asID: 139057
IP address blocks: 156.251.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22788 (0x5904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 25 02:19:38 2023 GMT
Not After : Jan 13 02:19:38 2025 GMT
Subject: CN=6588e6bd-db83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:7a:58:25:de:71:a5:b3:70:54:c7:e0:1f:
55:ea:b3:30:b3:71:09:b7:c3:d4:83:05:6b:fc:11:
0f:ce:00:a7:40:85:39:6c:c6:ab:f7:eb:ee:7a:84:
1e:3c:25:92:22:bc:b3:76:71:e8:71:04:b5:8d:7a:
b6:d8:fc:f1:10:74:40:9f:d8:d0:d5:17:fb:05:93:
ca:b1:3b:96:e2:cf:85:bd:aa:81:f6:7f:23:c2:24:
a7:69:f2:da:df:7b:0e:d2:d6:0c:24:48:e9:e5:29:
b3:ad:43:95:39:cb:0d:5b:ec:d2:82:d5:a1:48:f7:
5f:81:57:fb:85:75:76:7f:64:b3:c2:f1:42:76:c5:
1d:58:cf:3b:df:4b:e4:45:4e:6f:9e:3c:dc:82:69:
57:0c:33:46:24:3e:61:50:22:3c:83:6d:47:a1:34:
5c:40:1f:23:5a:90:8e:7f:14:67:f5:3b:7c:e7:f4:
3b:28:5b:69:09:cd:e5:da:5a:53:37:a7:d0:8a:d7:
9e:82:6c:48:bf:e0:36:72:b3:6b:41:e4:ce:b1:b7:
2d:26:35:63:21:68:5e:0b:37:ac:0e:22:35:96:a3:
b4:fb:82:f9:81:82:85:fc:60:82:74:e6:c2:7c:a5:
93:69:54:86:36:8f:e3:ab:3f:8e:c1:ae:32:d5:51:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D1:48:12:D4:27:CC:67:81:28:02:9C:C9:E0:1B:1B:D8:8D:CE:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F647B34A2CC11EE8D55F238D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.64.0/24
Signature Algorithm: sha256WithRSAEncryption
29:85:e1:48:bd:e4:c3:c4:3d:b4:3a:97:57:b5:bd:a2:43:d0:
67:a4:9f:fa:cb:5a:9e:00:4c:cd:cf:a0:f9:ea:cc:10:8a:fb:
d9:b6:c4:8e:5b:67:24:88:88:4a:60:df:77:a6:7b:9f:ae:58:
7c:16:b1:8d:07:27:e6:37:b2:a3:91:aa:87:9b:0f:4c:75:4a:
c0:59:ad:1a:8e:66:e0:9b:34:21:15:0f:9d:7d:7a:ac:74:c2:
a5:b7:c3:4c:40:98:5a:7c:73:32:cd:e9:30:4b:d2:41:cc:ec:
0a:68:2f:91:cd:75:f9:5c:84:a6:91:09:ff:2a:4a:d1:4d:7b:
93:26:9e:f6:a5:b5:42:5b:1a:58:a9:45:35:7f:a6:eb:ac:63:
b4:b4:8b:20:31:df:ee:c1:9a:ab:67:55:e4:c6:2d:24:6a:75:
4c:db:ab:e9:10:66:f8:86:a7:75:c3:d3:fb:68:a2:db:34:3a:
2f:2a:15:47:96:93:8f:c7:b8:c6:50:4a:5f:c6:18:95:85:20:
19:7f:15:ee:40:92:94:a4:a9:2e:98:a4:57:7e:ed:94:c9:c5:
f8:3a:83:3e:2e:db:88:2c:8b:78:28:b6:ea:73:df:03:82:89:
dc:5d:2d:0b:98:0a:6e:0b:3e:1d:4a:6e:b1:91:05:96:49:39:
0c:f3:af:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:18 2024 by rpki-client on console-fra.rpki-client.org