Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E89E000F65211EEA9BDE48B775412E6.roa
File: 3E89E000F65211EEA9BDE48B775412E6.roa (raw, json)
Hash identifier: 50cynHb5Ose15mLrKH6S/RpnqxoXbR1hdJzA+Gkw7vU=
Subject key identifier: F9:2F:06:35:8B:61:4A:73:33:67:54:C1:F3:CB:25:6D:B2:E5:89:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 81BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E89E000F65211EEA9BDE48B775412E6.roa
Signing time: Tue 09 Apr 2024 09:19:19 +0000
ROA not before: Tue 09 Apr 2024 09:19:16 +0000
ROA not after: Fri 10 May 2024 09:19:16 +0000
asID: 64267
IP address blocks: 156.248.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33210 (0x81ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 09:19:16 2024 GMT
Not After : May 10 09:19:16 2024 GMT
Subject: CN=66150817-8549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:52:91:15:4a:b8:ae:a7:70:b0:ca:e7:b9:
d4:33:20:1a:40:33:73:70:f6:dc:44:b4:69:21:f1:
25:54:22:69:5e:05:e7:5f:f0:ae:23:c0:02:43:9d:
7a:97:39:8b:66:ab:e9:08:e1:22:08:d7:e1:a1:41:
21:83:fe:c6:7f:48:9d:e5:28:18:d2:1e:03:e5:5e:
d5:10:86:6d:dc:7f:c9:cd:05:22:65:c9:a9:fc:b4:
50:28:03:c2:bc:65:b5:81:07:e6:5a:79:1f:12:99:
5b:70:3e:77:a7:3d:9b:be:61:50:94:2c:88:ed:7b:
07:d3:a7:d8:40:7d:03:e4:1a:1e:30:bc:82:45:57:
b5:dc:8f:5c:d1:fc:38:bb:23:c8:d9:80:80:34:db:
26:fb:ac:36:c8:52:29:74:a6:90:56:ce:5f:0d:1c:
3c:78:dc:14:5c:f6:90:88:80:4b:7a:a7:f0:ac:e8:
ec:e6:13:33:bb:57:cc:97:ee:79:1c:43:57:06:ee:
3c:60:13:3e:83:23:80:02:8d:2c:fa:66:ac:ca:93:
6b:4f:10:d3:74:21:1e:ff:eb:20:12:e1:50:0b:4d:
0f:fe:c9:f1:9c:16:3f:3e:03:ea:1a:07:3e:c2:01:
41:36:c0:14:fb:2c:7e:8b:35:8e:2c:4b:0f:8d:b4:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2F:06:35:8B:61:4A:73:33:67:54:C1:F3:CB:25:6D:B2:E5:89:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E89E000F65211EEA9BDE48B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.64.0/24
Signature Algorithm: sha256WithRSAEncryption
34:9a:c9:ec:be:e5:10:61:12:af:b6:27:f4:fa:18:6e:bd:0c:
75:c9:a6:12:5f:5b:e0:03:3a:ea:cc:60:41:b9:ff:3d:46:14:
71:ef:b1:65:87:0b:0f:5a:61:d2:48:87:f5:30:dc:53:49:4b:
bf:a8:07:0c:37:dd:a8:46:59:c0:16:75:4e:42:f3:c6:7f:f4:
c8:59:39:79:8a:9e:1f:cc:0a:74:77:fa:c3:14:6b:ae:e9:82:
8f:2a:df:c5:21:05:a6:e8:d8:c5:21:1a:12:ba:72:dc:75:ce:
a8:9a:11:6b:bc:39:46:32:fc:39:49:ba:04:3f:74:fb:00:7a:
82:be:8d:65:a4:54:df:af:92:a6:aa:a7:fa:ac:3c:83:8f:80:
8e:f0:85:9c:00:23:3f:33:f3:eb:db:c2:ae:04:57:bc:02:45:
bd:21:7c:88:2e:39:aa:ac:48:7e:68:29:b1:05:72:8a:9d:b4:
32:54:e4:56:f9:90:84:a8:44:1d:55:c2:50:28:55:45:c2:51:
c5:1b:aa:6e:fd:be:20:b3:34:2c:66:37:b7:6f:15:fe:7e:6e:
71:c5:6d:4f:96:ca:c9:5c:cb:cd:7f:3b:9a:40:72:48:1e:7b:
03:16:98:e4:c5:c4:0d:a3:8a:43:34:6d:55:9b:de:8c:01:06:
f8:22:c1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:51 2024 by rpki-client on console-ams.rpki-client.org