Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/258E3406F65311EE9735FC91775412E6.roa
File: 258E3406F65311EE9735FC91775412E6.roa (raw, json)
Hash identifier: La9lvtaf22zCm36TgnhcrYOsZX358WTkIy+OPU7zWKE=
Subject key identifier: 67:0A:A8:DA:69:64:80:36:21:23:EA:51:4C:3D:3F:B8:87:D2:60:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 81C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/258E3406F65311EE9735FC91775412E6.roa
Signing time: Tue 09 Apr 2024 09:25:47 +0000
ROA not before: Tue 09 Apr 2024 09:25:43 +0000
ROA not after: Fri 10 May 2024 09:25:43 +0000
asID: 64267
IP address blocks: 156.248.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33222 (0x81c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 09:25:43 2024 GMT
Not After : May 10 09:25:43 2024 GMT
Subject: CN=6615099b-afa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:a8:b6:c4:0c:0e:f5:c5:e6:1b:cc:79:f5:
26:67:f2:7e:28:7d:da:e4:e7:53:4d:a7:fb:db:76:
b5:19:df:6f:a1:48:e2:ff:67:df:2d:23:51:82:6b:
aa:0e:bc:6c:19:a8:da:57:30:95:2a:fb:bc:4a:f2:
7e:d8:6f:76:c6:bd:6c:d4:4f:7c:c3:33:bd:2e:ac:
3e:4b:aa:92:ec:9f:f8:9f:02:79:50:e6:51:a0:f1:
24:30:d3:2f:12:40:26:a8:1c:69:7b:87:4e:4a:be:
af:c6:03:10:30:51:89:95:44:78:d3:67:d4:ef:12:
00:31:92:48:62:3f:e6:f8:c7:68:a0:d8:fd:51:2a:
51:c4:76:49:5d:9d:22:20:f5:49:3b:63:0d:72:8a:
c5:ce:61:1b:32:b2:87:2d:ed:61:be:5d:87:e3:2e:
0d:b6:99:0d:b9:50:9a:87:70:4a:12:e0:d7:0e:1a:
d7:8c:aa:56:f3:4a:9a:69:04:de:81:e2:45:40:c4:
0b:46:f6:50:2f:fd:55:06:3d:d8:5a:f1:e5:e3:fb:
0e:de:7c:5a:ab:3a:d4:90:5a:af:ad:c0:79:60:59:
b0:67:39:70:e5:78:88:89:ce:0b:ef:04:d5:ca:a5:
57:2a:bb:60:8c:86:95:72:ae:06:47:d5:4c:d6:72:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0A:A8:DA:69:64:80:36:21:23:EA:51:4C:3D:3F:B8:87:D2:60:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/258E3406F65311EE9735FC91775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.71.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3e:ba:a7:01:7a:60:60:85:32:32:5a:4f:a1:ed:fc:2f:0a:
0e:50:46:4c:bf:c0:85:b5:78:04:72:fe:60:09:6e:51:0d:64:
fa:91:e7:8b:06:4b:7a:a2:a0:62:99:e9:93:ec:d4:58:72:b0:
d4:de:db:6b:19:53:71:36:00:97:19:07:05:00:a0:da:a5:82:
17:6d:58:05:24:c7:f0:86:47:46:7d:5b:53:fb:8d:00:63:cd:
11:17:2e:87:a8:ff:84:b5:38:29:69:6d:30:06:6a:28:99:c0:
a5:eb:5f:57:b3:42:43:83:4a:6e:b9:32:f8:35:38:8d:40:91:
0c:65:00:40:cb:2f:dd:4e:5b:a3:72:94:bf:b6:f3:f0:b3:22:
2c:ef:79:67:6c:19:e6:eb:c2:b2:5e:5e:9e:4a:dc:48:9a:d6:
4c:a4:88:64:d7:24:94:67:90:9a:04:83:13:14:b9:8c:8a:17:
bb:09:09:e3:2d:b5:ce:91:c8:c9:1f:d5:ba:0c:b9:47:5a:b5:
e7:a4:94:e8:6c:18:63:7d:cc:98:16:81:b5:e6:ff:67:2b:6d:
f5:43:50:dd:af:ab:0e:ad:bc:be:b8:f7:e8:2b:ba:38:41:4e:
25:72:29:b5:33:e3:f4:28:8a:98:67:e1:af:0b:40:8f:44:68:
e0:23:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:50 2024 by rpki-client on console-ams.rpki-client.org