Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D5627F81A3311EE85470F7A4AD9E6FC.roa
File: 3D5627F81A3311EE85470F7A4AD9E6FC.roa (raw, json)
Hash identifier: vhIc9T1Sbtv5pumJNmm9JwE12vY0QSXt9uojjYxY0pY=
Subject key identifier: D5:30:53:00:75:06:3D:B8:82:62:5E:D5:72:C3:F1:6A:6B:F1:DC:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2E93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D5627F81A3311EE85470F7A4AD9E6FC.roa
Signing time: Tue 04 Jul 2023 06:23:07 +0000
ROA not before: Mon 27 Nov 2023 06:23:03 +0000
ROA not after: Sat 29 Nov 2025 06:23:03 +0000
asID: 133012
IP address blocks: 156.248.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11923 (0x2e93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 27 06:23:03 2023 GMT
Not After : Nov 29 06:23:03 2025 GMT
Subject: CN=64a3bacb-7ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:8e:67:77:a4:b9:b4:bf:51:56:5b:aa:ae:
ed:7c:67:1f:5c:39:1a:5b:7a:30:77:b1:e0:67:ba:
0d:3f:0b:9e:cf:0d:ea:1b:41:2b:cb:a4:d0:02:39:
ea:66:68:e6:a0:6e:a0:22:ee:69:1a:99:31:87:d5:
2c:72:6a:8b:8b:3a:57:03:a5:98:da:bd:a6:c1:0e:
f0:e8:6d:84:d4:ab:32:df:2e:b5:ff:a4:2f:03:11:
1a:63:77:03:4d:f1:f7:61:79:c8:0b:06:1d:74:0e:
e8:24:25:cb:8b:3f:b1:a7:0b:08:cd:b2:1c:2a:c0:
a0:78:52:d0:0a:ba:fe:18:d4:5c:de:bf:da:75:45:
98:1d:29:ba:4b:1a:a4:05:e5:ca:4c:35:8b:64:0e:
67:03:b3:3e:9e:ad:41:5a:c3:e0:96:3a:83:5e:99:
4b:65:05:ed:bd:fd:b8:ff:9a:84:10:0b:2e:cf:67:
52:b8:31:20:8c:8b:44:e4:d9:bc:d0:b6:8f:01:8d:
b2:02:ca:06:23:63:d9:aa:4b:f2:3e:55:1d:94:11:
8b:40:ef:15:2f:e9:dc:e2:70:86:19:5b:c5:5f:29:
e7:a5:8c:ea:3d:1b:f6:e0:f9:09:d4:86:23:99:a0:
8a:e1:aa:d5:ba:d1:e1:3d:79:fb:74:03:c4:41:1c:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:30:53:00:75:06:3D:B8:82:62:5E:D5:72:C3:F1:6A:6B:F1:DC:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D5627F81A3311EE85470F7A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4c:b1:2e:9e:a9:de:f0:33:03:8e:58:6b:17:40:5b:8b:1f:
df:38:21:37:9a:0a:cf:a0:7e:f8:da:80:32:af:b1:0f:1d:49:
a2:61:ba:d3:6c:54:28:5c:e7:5b:c3:09:69:94:1b:82:26:20:
b6:ce:dd:02:10:6d:79:be:87:6a:08:54:9c:87:1e:c9:63:44:
6f:55:9f:ed:68:a2:1c:88:e5:30:b8:c0:ed:b6:73:7d:49:b7:
5d:c0:9f:37:4f:1a:62:4a:9b:22:c7:58:c5:2d:85:a7:f8:29:
5f:3a:31:50:f4:7f:39:ec:56:b0:80:5f:e7:b0:d5:3e:8c:e7:
1d:4c:14:e4:f8:c8:fc:44:7c:89:d4:56:9b:74:f9:a1:4a:98:
71:84:af:20:12:df:87:ab:8f:af:7f:27:b7:3f:4c:94:22:bc:
2d:8e:e2:50:9a:b2:4d:27:9a:b3:15:b5:94:d6:86:59:86:5a:
be:bf:d7:d9:24:f4:5d:47:f3:c9:27:69:b9:32:af:9d:30:1c:
7e:72:91:6d:55:16:8d:98:07:bd:97:8d:d5:7d:17:e3:9a:d7:
1e:c5:bd:88:04:d6:69:59:64:06:87:59:90:bd:79:53:5e:a6:
47:99:2c:99:fc:33:99:80:0e:7b:51:65:72:1e:bc:76:8f:e5:
db:ef:de:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:07 2024 by rpki-client on console-fra.rpki-client.org