Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/406555B2544A11EE8C26EE854AD9E6FC.roa
File: 406555B2544A11EE8C26EE854AD9E6FC.roa (raw, json)
Hash identifier: C5rmH64Z7ThgGEPqbRyc1Ob6lxYFXFpaPMLbKrwLxCY=
Subject key identifier: 7F:D6:55:E6:1D:26:BE:8F:BF:A1:DF:F5:71:3F:45:F8:FF:8C:82:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3A55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/406555B2544A11EE8C26EE854AD9E6FC.roa
Signing time: Sat 16 Sep 2023 04:33:58 +0000
ROA not before: Sun 01 Oct 2023 04:33:55 +0000
ROA not after: Thu 08 Aug 2024 04:33:55 +0000
asID: 133199
IP address blocks: 156.245.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14933 (0x3a55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 04:33:55 2023 GMT
Not After : Aug 8 04:33:55 2024 GMT
Subject: CN=65053036-34d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:46:7e:ff:70:8a:4d:55:99:27:dc:fd:a4:
e0:af:86:09:c2:b3:84:20:91:9a:eb:1b:f7:8f:a9:
66:41:c2:a6:bf:fb:60:b6:3e:42:f6:11:00:b0:bc:
c7:53:b0:36:09:dd:87:9d:78:e1:61:5f:93:fa:e9:
8e:e9:87:da:5a:e2:39:31:e7:c9:31:2a:c3:49:06:
e7:b7:b5:ea:89:4f:90:e2:fd:1b:b4:f8:0a:fc:30:
1c:6b:57:00:47:1e:b2:a5:cc:fc:12:d2:4f:56:79:
ef:91:14:5f:e8:24:4f:c7:dd:f4:83:35:fe:99:a4:
a2:92:5f:81:a7:08:d6:3f:1b:d5:ae:36:fc:fb:93:
46:dc:5f:c6:70:a0:a5:08:58:e4:3d:af:74:e6:98:
2f:1d:a7:ea:da:26:ac:9b:f6:1c:7a:d3:f0:6d:3a:
64:8a:ec:b5:84:ad:d3:8e:ba:66:82:a9:0a:97:4d:
da:a6:30:b9:d9:30:b6:26:aa:8b:48:2c:c5:87:ed:
95:42:4c:c6:df:45:3d:fe:dc:fa:bd:6b:7d:4c:93:
a5:ab:3e:1c:e8:f9:a4:f8:f9:cf:1a:7e:92:5f:9c:
a9:c9:48:46:f0:19:14:f5:de:4b:7f:ff:02:32:61:
e9:f1:4a:83:58:2a:e1:84:6f:88:c6:1c:c9:13:f5:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D6:55:E6:1D:26:BE:8F:BF:A1:DF:F5:71:3F:45:F8:FF:8C:82:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/406555B2544A11EE8C26EE854AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.19.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:bb:3d:ba:26:fb:44:73:7a:29:8d:51:9d:7c:fb:7e:22:14:
cf:c4:a8:4d:60:db:ce:46:f1:ae:d9:e3:e3:9b:cd:fb:53:4e:
4b:9c:8e:bf:05:ae:af:e2:f8:da:c4:74:1d:72:1e:35:f0:07:
1f:dd:d5:40:10:16:71:6c:ed:d5:24:e0:54:e3:c2:a4:07:ef:
8c:82:d6:ce:dc:63:6c:10:69:eb:b0:c2:98:07:8d:17:2f:ef:
39:65:29:44:dd:94:8d:90:de:76:83:39:a5:3c:2f:9e:4c:74:
fb:8d:d7:ed:27:55:71:9f:d8:e4:f1:f4:fb:41:8d:76:06:9a:
69:d9:36:87:32:1b:64:99:ad:9a:6c:3a:ae:a2:44:72:18:23:
4b:64:58:2c:52:1d:e3:5c:c8:9d:75:27:4f:63:75:30:8c:d8:
9c:c2:1c:1f:81:82:8d:16:dd:b5:38:d2:50:c1:7f:93:7b:f3:
e2:ce:c4:6f:8f:28:6d:bb:87:1b:1b:25:74:c6:00:32:e6:3c:
dd:be:c2:c6:60:13:8c:8e:fe:4a:21:ce:b3:5d:25:29:3b:c4:
fb:b2:a4:4e:9b:ec:97:b1:e2:92:32:69:b8:7a:90:b8:5a:94:
d2:c6:f9:e0:0f:2e:1a:6f:e5:e9:32:48:f6:6c:f0:23:02:cc:
84:3a:4f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:07 2024 by rpki-client on console-fra.rpki-client.org