Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/318382C61A2F11EE8B5E376D4AD9E6FC.roa
File: 318382C61A2F11EE8B5E376D4AD9E6FC.roa (raw, json)
Hash identifier: iTBjMqsz64m0vEKpbxYRcvpfytHywjHePW7BjiuTz6c=
Subject key identifier: DF:4D:64:1E:FC:63:95:B9:2E:95:01:F3:6B:96:D2:F5:B2:B0:27:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2E8D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/318382C61A2F11EE8B5E376D4AD9E6FC.roa
Signing time: Tue 04 Jul 2023 05:54:09 +0000
ROA not before: Mon 27 Nov 2023 05:54:06 +0000
ROA not after: Sat 29 Nov 2025 05:54:06 +0000
asID: 133012
IP address blocks: 156.248.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11917 (0x2e8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 27 05:54:06 2023 GMT
Not After : Nov 29 05:54:06 2025 GMT
Subject: CN=64a3b401-448e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:6b:c9:d7:11:21:43:2a:21:3c:5a:c5:62:
9b:37:89:ad:8a:46:b9:21:d0:9e:93:76:14:64:da:
0b:19:4a:f2:c8:8e:83:78:ba:13:a3:26:b7:01:4d:
2f:13:45:b6:2e:79:1d:89:4a:ce:94:85:84:34:24:
15:bb:eb:ff:63:ac:dc:a8:12:db:fa:fa:78:24:dd:
42:2f:ad:0d:53:46:20:06:43:7a:36:e6:58:c6:c1:
f7:9f:3a:ae:9d:87:73:a2:ed:aa:85:2e:2f:db:9b:
6a:c7:42:7e:a7:7a:f5:bc:b5:8e:ca:b4:9b:8c:0a:
d3:ea:37:dd:61:6a:68:1e:19:7e:16:7f:6b:6d:c2:
70:b5:4f:ca:7e:e7:55:ba:2a:b8:37:f4:87:20:7f:
87:de:cf:93:85:2a:88:33:99:8a:d1:1c:7c:8b:ad:
97:52:64:5e:5c:30:d7:4c:77:e6:1a:46:d1:32:fd:
10:11:e0:39:b1:d9:fa:7d:b9:19:5d:a6:54:c0:90:
45:29:1b:ca:d1:9f:9f:8b:5f:c9:b2:96:24:e1:55:
b8:46:e4:48:ca:a6:1e:a7:44:4e:2b:61:2b:6b:d0:
14:d3:fd:7e:13:72:1b:f1:50:85:f5:f8:4b:f7:6b:
e4:a1:58:d9:c8:40:bd:c2:23:94:a6:66:be:d3:c2:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4D:64:1E:FC:63:95:B9:2E:95:01:F3:6B:96:D2:F5:B2:B0:27:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/318382C61A2F11EE8B5E376D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f2:24:1d:7b:d8:ee:41:f7:56:e0:42:70:19:ec:7d:fd:08:
b8:67:14:0b:f2:3b:2a:32:5f:3f:ec:29:15:f5:35:5b:fe:31:
2f:46:91:88:7b:9d:0e:69:67:9a:64:4a:82:21:0d:06:c5:7e:
2a:0d:52:74:85:59:c9:e3:49:42:d3:8a:a8:09:da:39:44:88:
e9:15:50:60:7b:2b:6a:b0:5f:06:7c:32:d5:ea:30:92:5f:85:
4b:79:68:38:0a:de:92:09:aa:a8:d9:16:44:3c:54:ad:7e:91:
9c:5b:5d:ca:f0:d3:0b:b0:a9:5d:f1:3e:b6:88:f8:41:71:03:
cb:b8:e8:e0:71:51:fb:78:05:90:29:f9:b3:b2:90:04:4a:31:
4c:70:91:19:2a:51:34:56:70:73:78:6a:90:cf:3c:44:57:6f:
a5:d2:c5:d1:59:dd:0f:38:f5:ae:a3:be:dd:2d:a5:61:dc:ad:
ce:e3:ed:09:90:a1:8c:2c:6e:ab:2e:7a:fd:53:34:6c:d6:d8:
bd:dd:0f:c6:16:a6:8b:fe:0c:58:31:32:04:c3:40:c9:69:aa:
31:8b:f8:dc:13:94:53:22:71:e8:39:1b:ac:f5:3f:59:5b:1c:
7a:81:64:3c:71:2a:7a:61:1a:d8:c7:6f:ee:53:13:4a:89:82:
ee:38:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:06 2024 by rpki-client on console-fra.rpki-client.org