Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6E63FC277C11EE8C17708A4AD9E6FC.roa
File: 1B6E63FC277C11EE8C17708A4AD9E6FC.roa (raw, json)
Hash identifier: nbSUnJYHdTgGBvgCCtO4Y4myf8bkdDAd8lk+yi4P8Kk=
Subject key identifier: EA:2D:C9:FA:F1:00:4A:C3:9F:9F:5B:B0:3C:11:60:B3:EC:7D:45:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3189
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6E63FC277C11EE8C17708A4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:07:28 +0000
ROA not before: Fri 21 Jul 2023 04:07:25 +0000
ROA not after: Thu 13 Jun 2024 04:07:25 +0000
asID: 22773
IP address blocks: 156.247.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12681 (0x3189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 04:07:25 2023 GMT
Not After : Jun 13 04:07:25 2024 GMT
Subject: CN=64ba0480-41d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:a4:5b:5f:ec:51:f8:b8:37:0a:8c:5d:2c:
b6:c3:0a:58:fc:b2:34:c4:5a:c2:59:86:c8:64:73:
84:f5:fc:c3:f7:b3:89:ef:66:49:ed:62:70:ad:8a:
ab:32:2d:94:87:3a:8b:fc:a4:45:af:e9:62:06:b6:
e7:14:66:f5:22:12:7b:8d:43:fc:c4:9c:47:f1:09:
00:35:51:4c:f8:92:f2:19:a4:84:7d:d9:77:ae:f9:
57:11:ae:3d:d7:7b:63:e2:1f:b0:fe:bd:3e:8e:2f:
d0:30:67:54:c6:85:6b:8d:2f:c1:e8:bd:41:cb:ab:
99:e9:19:b4:4c:f7:19:fa:3d:03:e3:59:59:58:f5:
e9:42:f3:ea:e4:5d:d0:ec:9d:50:7f:58:c2:28:f7:
05:19:64:a3:17:d0:d6:4c:8c:3c:35:ab:e7:32:db:
73:d8:c8:a0:85:1b:52:25:19:c0:19:b7:d8:e8:10:
4a:84:c0:6b:9e:a1:b9:c9:13:17:fe:1d:96:a5:c7:
12:80:c4:e2:b8:ca:79:56:e5:0f:d1:ee:2c:12:af:
f6:e3:dc:ef:73:4c:80:3e:02:b4:34:06:ad:f3:8f:
ee:4f:3b:94:28:d2:9b:8e:55:00:43:e2:b8:92:d4:
ae:c8:96:d2:17:3c:e1:21:29:0a:cd:96:37:78:36:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2D:C9:FA:F1:00:4A:C3:9F:9F:5B:B0:3C:11:60:B3:EC:7D:45:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B6E63FC277C11EE8C17708A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.4.0/22
Signature Algorithm: sha256WithRSAEncryption
14:e4:b0:19:a5:e0:2b:a7:9a:7b:d6:a5:99:18:ea:1a:c8:36:
4f:63:48:94:f0:9c:15:03:75:5a:8b:24:9b:81:99:80:17:56:
b5:b2:22:03:37:b8:e6:0d:a2:01:b1:b5:e7:72:45:59:6c:9f:
0e:7b:3b:71:68:83:51:88:15:d4:9c:c4:2f:91:5d:85:b3:8f:
d5:51:4c:1f:6a:27:ec:e5:0b:03:dc:9c:93:8e:d0:87:a8:26:
e0:81:6b:a7:c9:f5:9c:05:f9:78:15:35:7f:81:a1:3d:83:be:
c1:a3:b3:87:f3:9a:20:2a:58:1e:00:30:16:6b:3a:ba:9f:f0:
4e:73:60:f3:b1:3b:ac:21:35:ad:04:1e:51:a5:f8:4c:c1:a8:
f1:bf:3c:cf:f4:f0:d3:dc:b8:2f:65:6a:48:c7:e2:73:7d:a7:
41:6c:ff:72:4d:3a:e5:d3:b2:22:c8:30:1d:e4:99:fc:bf:52:
45:4e:0e:67:a9:42:b5:2a:b3:d7:6f:79:7b:05:11:36:82:f9:
bd:c6:ab:97:4e:d0:4e:57:bf:c1:05:bb:76:89:42:78:61:cd:
f5:bd:69:f6:29:22:4e:d8:c8:29:2b:84:27:e6:c0:3a:c3:dc:
79:c8:53:66:d6:33:7c:7d:2f:66:ac:f8:40:18:5d:67:4d:da:
7f:7e:29:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:49 2024 by rpki-client on console-fra.rpki-client.org