Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E1072BAFDCB11EDA7A6B35E4AD9E6FC.roa
File: 1E1072BAFDCB11EDA7A6B35E4AD9E6FC.roa (raw, json)
Hash identifier: e7QXPrqOWw9S5vtWmsrTt39h1Ku4sdt2eehOjCfCjag=
Subject key identifier: 9B:31:AE:66:8D:53:90:08:79:30:74:37:5F:77:E9:14:5C:4D:F5:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2800
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E1072BAFDCB11EDA7A6B35E4AD9E6FC.roa
Signing time: Mon 29 May 2023 02:47:14 +0000
ROA not before: Mon 29 May 2023 02:47:11 +0000
ROA not after: Wed 15 May 2024 02:47:11 +0000
asID: 63888
IP address blocks: 156.255.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10240 (0x2800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 29 02:47:11 2023 GMT
Not After : May 15 02:47:11 2024 GMT
Subject: CN=64741232-7fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:a2:aa:12:b6:e6:c7:8d:04:6b:5e:54:6c:
88:30:3b:63:5d:0e:b1:13:75:68:ad:dd:39:10:94:
85:29:80:16:7b:f4:22:cb:e9:9c:08:7d:6c:0f:ae:
20:b6:28:09:94:80:06:8e:10:6a:2c:23:87:eb:c5:
f4:0e:14:a7:99:0b:14:21:84:47:3f:56:a3:42:f5:
59:6c:52:8e:de:28:7a:b2:b9:1f:da:4e:49:af:0d:
04:5c:a2:f2:46:44:56:a5:f0:49:d4:41:61:03:c1:
d6:8f:b7:87:62:97:99:3e:43:cb:62:a6:54:ed:91:
56:8a:dc:cc:16:12:dd:0b:61:26:e1:19:c9:14:ed:
af:cd:31:db:74:39:c2:d0:c8:b6:cb:9c:2f:df:88:
d4:25:55:a3:39:b6:c7:0c:52:44:c6:e0:3b:dd:f4:
92:94:47:a5:7c:fc:f4:a0:fb:b4:d4:bf:cf:ca:a6:
e7:d1:fd:62:24:08:a9:95:86:4c:a8:36:dd:df:07:
4a:4d:88:10:c1:05:5a:03:4e:d6:71:e5:1e:dc:b5:
cd:34:5a:d2:61:29:31:13:16:ea:5a:56:9d:eb:b4:
0f:0c:59:4f:9a:84:83:09:cd:db:66:0a:49:d6:7c:
d6:5d:c5:5e:6b:0c:00:b2:85:30:eb:13:60:5b:9e:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:31:AE:66:8D:53:90:08:79:30:74:37:5F:77:E9:14:5C:4D:F5:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E1072BAFDCB11EDA7A6B35E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:dd:8c:9f:43:4b:5f:1b:67:46:f6:20:55:65:da:9e:7f:d4:
d3:ef:ca:c1:ba:5e:65:1d:51:0e:39:32:a8:29:b0:8a:c7:21:
a2:e4:45:67:53:fc:b0:34:89:5f:ac:c7:1a:df:d8:f7:33:a0:
50:c9:31:2f:a1:c5:57:d8:59:bb:25:77:33:54:b5:35:cc:a2:
a7:c8:da:2e:65:06:7b:8d:eb:f9:f0:0f:a0:67:c6:37:60:76:
22:93:f7:1b:09:9f:a0:a5:26:bc:b2:e1:8b:6d:9f:ff:a8:ce:
a9:1c:bc:e9:66:76:e7:ed:60:07:98:17:e0:5b:97:e8:44:3b:
95:ae:78:c5:49:71:fb:34:4c:91:cf:98:75:d3:70:52:59:bf:
d9:e0:2c:50:d0:fd:6c:d7:e0:76:94:1c:c5:05:1f:93:85:b1:
c9:ed:a4:b0:26:73:75:95:1f:12:5d:22:33:2d:62:32:f4:c3:
1d:6c:7d:42:49:6a:d9:62:4f:87:65:72:46:26:15:59:62:7f:
ad:64:b5:b9:e9:fe:a8:47:ad:a8:8a:e0:53:50:c8:db:55:8c:
2a:02:aa:19:5d:27:60:d4:b2:da:4d:3b:1a:ac:b8:a6:f2:35:
ad:2a:c4:f5:21:7a:6e:8c:f7:d8:40:67:18:09:fa:f7:b7:a4:
fe:75:b6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:05 2024 by rpki-client on console-fra.rpki-client.org