Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3664AB30FD5011EE8F16FFFE007001B1.roa
File: 3664AB30FD5011EE8F16FFFE007001B1.roa (raw, json)
Hash identifier: uq7pG6vFULj9AyKEImg9A5Mkkoq9jEKz24f5NZaKC18=
Subject key identifier: 82:87:A3:46:44:86:AB:CA:E6:49:47:63:F4:E5:EA:A7:16:83:42:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 835B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3664AB30FD5011EE8F16FFFE007001B1.roa
Signing time: Thu 18 Apr 2024 06:52:25 +0000
ROA not before: Thu 18 Apr 2024 06:52:21 +0000
ROA not after: Fri 26 Apr 2024 06:52:21 +0000
asID: 39600
IP address blocks: 156.238.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 06:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33627 (0x835b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 06:52:21 2024 GMT
Not After : Apr 26 06:52:21 2024 GMT
Subject: CN=6620c329-fb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:1e:c8:5b:f5:53:f9:73:cc:3a:27:88:46:
63:f5:68:08:6e:b9:8f:2c:26:6d:c0:5d:01:31:1e:
71:5d:0e:a0:cd:01:e9:4d:91:67:7d:c0:72:2c:51:
e3:e5:90:d9:94:a7:73:cd:49:12:d7:aa:46:0f:84:
9c:6b:f2:56:5b:8a:f4:55:ab:5e:20:34:59:36:5c:
f3:9a:1a:3e:76:9c:8d:39:90:73:2a:ba:22:3f:42:
c9:29:d2:1c:1a:f1:09:88:b2:7d:e3:2a:3b:ef:03:
57:5b:fe:d8:ef:a4:0d:d0:88:ed:d1:10:0a:74:52:
8c:c1:7d:fe:83:ac:9c:20:df:79:5b:77:09:4e:85:
db:8b:5b:b0:9f:cd:71:37:90:20:e9:82:10:e0:b3:
b2:1b:a1:27:b3:73:a7:32:db:fe:89:f6:1c:a9:04:
a0:4d:68:7f:97:61:78:b0:f6:ad:3b:a7:cf:60:b3:
4a:76:7e:79:69:cc:d5:b6:70:38:91:35:3a:15:76:
5a:65:7c:6e:38:79:2f:7d:48:4b:34:07:18:88:f2:
34:98:02:0e:8b:ef:95:2a:f4:8a:cf:4e:15:6d:08:
8a:b8:f2:a7:e4:c2:b2:7f:41:2b:23:d5:bd:a4:f8:
b9:e4:d6:6a:5a:1e:0b:b2:b7:a5:55:66:c5:f1:9f:
bb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:87:A3:46:44:86:AB:CA:E6:49:47:63:F4:E5:EA:A7:16:83:42:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3664AB30FD5011EE8F16FFFE007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.184.0/21
Signature Algorithm: sha256WithRSAEncryption
15:4d:7f:e5:71:e6:44:7a:f3:cb:01:ab:60:51:04:2c:84:85:
ee:e6:f3:42:f5:45:c5:4c:8a:e8:dd:a4:fb:bc:2e:8c:a6:fd:
35:bc:71:6e:2c:cb:4e:93:40:ef:3a:9a:24:d8:8f:82:e4:5d:
53:65:91:41:b8:1f:56:ab:c8:16:b8:ae:8c:03:54:0e:1c:aa:
42:88:1b:82:bd:83:9b:1d:f9:cd:7a:dd:29:82:1d:84:dd:9f:
e2:a8:db:b1:c8:ce:82:85:d5:58:2b:eb:a9:3e:a2:60:db:74:
01:80:8c:db:9b:0a:69:7f:32:9d:a1:31:d4:74:fa:e3:97:91:
8e:bd:ba:78:99:26:22:83:ca:e3:a0:4b:be:29:e7:df:e6:f1:
d8:98:b2:b5:de:e9:29:0a:a6:bb:1c:01:b5:96:6e:23:bb:38:
10:9e:ca:a2:1f:f2:76:11:9c:8c:91:92:40:9e:3a:d0:7c:ba:
31:e8:e6:d9:f4:89:dc:9b:f8:28:8e:d8:e4:33:60:f9:82:47:
68:1e:88:f3:f6:1c:2b:4d:d4:7c:94:54:ef:3e:17:f3:e8:bd:
86:f9:cc:66:62:b3:7e:f2:33:6e:fa:d9:c6:7a:bb:19:0a:14:
14:3d:2c:83:cf:d8:3f:06:e7:ee:9d:69:0a:79:1f:38:36:4a:
d2:3d:24:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:43 2024 by rpki-client on console-fra.rpki-client.org