Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/313F1EE6ABB211EE9E81E4B8775412E6.roa
File: 313F1EE6ABB211EE9E81E4B8775412E6.roa (raw, json)
Hash identifier: xQCZVSu/xwzkCSh9pKdR1kJQLpndKdDV5eDeWrfDVzk=
Subject key identifier: 47:18:25:80:E0:76:17:7A:EE:81:EF:7D:47:8F:A8:41:C7:AE:E6:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5C93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/313F1EE6ABB211EE9E81E4B8775412E6.roa
Signing time: Fri 05 Jan 2024 10:07:11 +0000
ROA not before: Fri 05 Jan 2024 10:07:08 +0000
ROA not after: Thu 12 Dec 2024 10:07:08 +0000
asID: 23764
IP address blocks: 156.242.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23699 (0x5c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 5 10:07:08 2024 GMT
Not After : Dec 12 10:07:08 2024 GMT
Subject: CN=6597d4cf-df36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:8e:36:ee:97:06:59:bd:bb:8a:86:a0:f6:
61:96:18:fe:c9:7f:5a:9d:58:0c:24:a4:56:31:6f:
5c:61:2b:d6:81:44:d7:8e:c7:31:3b:5d:4f:6f:4d:
f5:81:35:90:ba:cd:56:ad:57:36:b9:75:1a:8f:57:
ea:8b:e9:5a:14:14:87:39:8a:ee:b2:57:72:cf:2b:
4a:40:79:25:89:e6:2c:a2:81:02:8e:5e:e1:66:f6:
47:9e:0f:71:54:e7:04:c6:f0:da:3b:f6:37:aa:29:
4f:6c:92:d1:1f:1a:93:03:60:ae:6a:62:04:4c:ee:
d6:8d:bb:e4:8c:e2:95:b2:5e:b9:22:41:19:83:1a:
ff:d6:42:14:a2:30:68:80:9b:66:96:9e:fd:79:d7:
9c:58:3f:03:5a:66:28:dc:44:86:eb:77:75:cc:a8:
0a:19:48:42:94:51:5b:1d:27:f3:df:e6:56:dc:03:
ee:43:50:64:b2:a8:fe:76:b4:77:d9:16:7d:97:f0:
49:1e:51:8c:24:bd:9b:95:14:bb:7b:f0:79:0a:cd:
f6:7c:ab:90:ff:c7:aa:a6:31:b9:fe:75:e9:9d:e5:
4a:35:0c:0e:d9:39:36:08:7b:72:ac:f8:c6:a4:b4:
fa:4f:2f:46:ac:72:d3:c7:11:33:a5:7d:ef:84:b1:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:18:25:80:E0:76:17:7A:EE:81:EF:7D:47:8F:A8:41:C7:AE:E6:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/313F1EE6ABB211EE9E81E4B8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.7.0/24
Signature Algorithm: sha256WithRSAEncryption
67:7f:67:08:10:c4:10:00:dc:d0:e8:c0:4b:e4:69:9f:a4:9a:
08:db:46:06:da:e7:0b:83:5e:e2:25:f7:2f:4c:cd:13:bd:7f:
45:a2:47:be:3c:da:7e:4b:0f:99:7e:08:53:90:fa:0f:48:98:
4e:86:ba:ff:4f:69:a0:ff:49:9d:4f:6f:de:9c:53:a3:6d:59:
87:02:ce:6d:5e:7e:36:8b:0d:fc:bf:36:a6:b7:fb:bb:fe:f4:
a1:ba:fe:aa:e6:cf:3e:55:e8:45:d4:a2:69:3d:16:4a:0e:1d:
95:da:26:5c:f8:c5:f1:f2:d7:2d:68:2c:21:a4:30:fc:6a:71:
91:d0:fb:db:d1:4b:f3:c6:de:55:53:c1:85:d4:da:a7:92:56:
9a:2e:44:32:29:83:f4:50:0d:1e:61:12:e5:74:aa:c5:62:2d:
c8:a5:bd:8f:3b:2e:62:b1:a6:26:72:84:ce:2f:cf:21:3f:13:
26:36:2a:dc:e2:e3:aa:03:10:08:45:9b:2f:46:09:94:9a:a0:
16:1a:01:fd:1e:89:19:15:1a:22:97:19:55:fb:99:9b:33:59:
8a:e0:fa:e3:b6:7c:c0:c9:0e:be:99:96:bc:35:07:43:9c:ee:
79:3f:6c:da:a0:f5:af:70:47:b6:34:d9:47:ff:22:26:f3:1b:
da:2e:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:50 2024 by rpki-client on console-ams.rpki-client.org