Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B123292C50711EE8D2DC8B6775412E6.roa
File: 2B123292C50711EE8D2DC8B6775412E6.roa (raw, json)
Hash identifier: YbHBpfuUPXkRy+o+JMgk4bk7CjYMzV6/2MNiuOHNVvM=
Subject key identifier: 22:65:88:A5:D1:87:DB:5B:94:6B:D1:17:A0:2C:79:9C:32:21:5C:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 6D30
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B123292C50711EE8D2DC8B6775412E6.roa
Signing time: Tue 06 Feb 2024 15:48:27 +0000
ROA not before: Tue 06 Feb 2024 15:48:24 +0000
ROA not after: Thu 13 Jun 2024 15:48:24 +0000
asID: 5065
IP address blocks: 156.239.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27952 (0x6d30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 6 15:48:24 2024 GMT
Not After : Jun 13 15:48:24 2024 GMT
Subject: CN=65c254cb-b7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:5a:a4:b9:fc:3a:15:29:5f:cf:cd:8f:06:
9a:88:5d:73:7c:e3:de:df:ec:3e:62:20:0b:67:49:
09:50:40:14:db:6b:36:bb:78:3b:86:6c:2b:23:42:
b9:08:01:51:81:87:22:aa:3b:67:62:b3:36:df:aa:
64:ce:62:a2:49:e9:5e:a7:53:c3:96:91:cb:37:ee:
87:2f:5a:b0:3a:71:ca:d9:d7:92:6d:cc:4a:9a:50:
ef:7f:6b:52:ed:31:76:64:76:99:62:00:e6:70:48:
69:44:79:56:d1:31:be:c3:32:ad:df:75:75:f3:3d:
f7:a0:a1:5b:4a:a3:c7:6b:52:13:9f:05:b3:28:84:
db:d3:e8:34:1b:71:29:4b:6f:19:21:d7:35:52:11:
9a:43:45:53:a7:d4:83:85:25:2f:63:5c:43:c8:78:
5d:1d:16:fb:15:13:0d:02:be:74:bb:34:c4:55:1c:
5b:ae:ca:3a:49:7c:14:27:94:d3:23:2c:d1:e6:00:
12:23:86:fc:a8:56:57:dd:20:59:32:ca:70:f4:38:
f7:fc:ac:76:cc:c5:c8:a9:2f:03:45:40:e4:08:ca:
7c:ca:c2:dd:c3:5d:a2:9a:02:e1:e5:f9:ce:09:00:
f6:a5:be:25:bc:31:24:4b:38:d7:7d:bc:80:78:f6:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:88:A5:D1:87:DB:5B:94:6B:D1:17:A0:2C:79:9C:32:21:5C:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B123292C50711EE8D2DC8B6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.143.0/24
Signature Algorithm: sha256WithRSAEncryption
13:33:b5:45:ac:fb:cd:51:12:8a:d2:f6:33:a4:d1:e1:29:cf:
00:45:51:fa:f4:26:d1:85:36:8f:9c:30:b0:59:56:bb:0d:54:
63:f3:cc:39:cc:a3:68:d2:50:6e:11:d6:a2:f9:19:54:1a:f9:
60:52:c4:68:43:68:67:fb:15:8d:c5:21:84:9a:66:50:c4:f9:
bb:19:d8:0a:46:29:f2:d9:2d:cb:37:f2:e7:d0:7d:d3:d1:76:
99:58:76:58:45:4c:ef:6c:c9:7b:61:07:eb:1f:79:b7:45:fe:
4c:65:62:0e:13:be:ad:e9:bf:c5:9e:f1:69:26:ae:2e:ed:70:
ca:c7:91:80:56:9e:0c:58:b8:5a:a4:ce:0a:b3:07:32:c3:88:
7b:4e:77:04:16:68:b6:7e:75:ec:a9:c6:2c:f7:b0:72:10:82:
54:8a:ab:a5:d0:07:eb:03:3c:2f:98:78:5c:bf:ff:0f:a9:2f:
82:41:3a:f5:92:0f:ea:85:ed:31:19:11:d0:ec:a3:b8:c6:54:
fa:c2:d5:08:4c:ef:ac:b3:eb:2a:31:6a:3d:60:83:4e:d0:3b:
b5:f9:06:ae:4a:26:dc:f6:55:c8:d4:c8:61:26:83:a2:0c:7d:
c4:ad:7e:75:87:fb:d1:92:94:14:15:b6:25:38:1d:e1:d9:fe:
8f:67:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:43 2024 by rpki-client on console-ams.rpki-client.org