Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4139B7E8038711EFA3F71F27017001B1.roa
File: 4139B7E8038711EFA3F71F27017001B1.roa (raw, json)
Hash identifier: qonkmKw1UABrd/Hfs4cJBxBppgK5DKbdXYKrCVVG0Oc=
Subject key identifier: 53:58:63:3D:60:56:0D:A1:2F:F4:CD:DA:B2:E0:D1:79:1C:0A:5F:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4139B7E8038711EFA3F71F27017001B1.roa
Signing time: Fri 26 Apr 2024 04:41:32 +0000
ROA not before: Fri 26 Apr 2024 04:41:29 +0000
ROA not after: Tue 03 Sep 2024 04:41:29 +0000
asID: 138195
IP address blocks: 156.234.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34224 (0x85b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 04:41:29 2024 GMT
Not After : Sep 3 04:41:29 2024 GMT
Subject: CN=662b307c-bde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5b:45:8d:34:84:61:44:21:1e:70:18:21:bf:
cc:f2:92:b7:4f:10:01:24:57:e7:44:66:c1:33:f5:
30:a8:99:9b:df:b3:8e:b7:4c:36:6e:c5:e5:dd:f1:
c8:7a:f2:1a:1b:4c:2f:b9:f9:c4:c8:8b:f0:b6:d4:
4d:b1:66:11:cd:48:46:4d:15:a9:a8:74:c6:a0:00:
f0:33:24:8f:89:05:11:d3:51:b2:42:69:38:fb:06:
4e:92:b7:21:6b:af:01:db:61:c3:32:6f:d0:2d:ec:
26:43:28:7c:b9:80:c5:46:a8:c9:17:8a:c9:be:93:
a5:17:1c:c0:11:51:bf:21:4d:de:00:98:51:7e:98:
46:f6:07:49:66:64:bd:48:58:49:1b:49:f3:8d:bc:
c8:21:53:8e:7f:1a:6c:9c:02:57:77:12:2d:cd:20:
60:22:c5:da:56:3f:75:c8:a4:7b:6e:38:e3:45:da:
65:22:e3:d1:b7:6d:dd:5e:47:a4:c8:81:fc:df:d2:
3c:af:c3:7a:ba:89:9d:f5:8c:98:b3:14:88:ab:63:
02:52:05:d3:93:1e:4f:df:e6:f3:31:b1:3c:9c:7e:
1c:bc:da:27:f1:af:d1:f8:a8:cf:bd:59:a2:91:30:
07:8e:92:c1:c5:b4:89:46:7d:bc:76:04:a3:40:17:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:58:63:3D:60:56:0D:A1:2F:F4:CD:DA:B2:E0:D1:79:1C:0A:5F:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4139B7E8038711EFA3F71F27017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.75.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d7:3b:6d:74:94:7f:6c:c4:75:3d:48:b4:49:8a:bd:66:d3:
b7:8b:bc:78:6c:10:87:4f:bb:97:52:e9:a2:08:69:3a:22:ea:
62:bc:cd:eb:3b:64:e3:53:2f:05:2f:14:03:b2:09:79:a0:f3:
0b:16:2f:9f:68:e7:4e:c0:9c:ee:10:98:04:67:4c:79:fc:13:
93:97:26:8b:fa:c6:3c:d4:5e:45:2f:ff:41:b0:8c:e5:e8:32:
39:4c:98:3a:d5:64:42:7e:4a:62:e1:76:82:90:ea:9f:18:9d:
ef:25:cd:c8:35:11:5e:5e:71:4e:d2:2a:51:48:07:a8:03:7e:
40:20:b9:b1:c7:89:bd:51:79:18:a8:6f:fe:48:e2:5c:6b:cd:
11:53:e8:cb:7e:9d:06:e7:82:8d:52:37:1a:52:f6:17:fa:43:
8e:04:ee:59:c0:28:4a:e8:9f:78:1e:35:e4:e0:8f:75:30:58:
7f:7a:5d:46:f3:32:be:2d:7a:80:dd:80:a9:35:6a:50:96:9e:
e8:68:52:aa:94:2c:56:50:bf:5c:c8:3b:4a:6f:3d:92:66:db:
f7:a2:7b:ce:6a:59:1c:47:b2:bd:37:d4:c6:ca:0d:b5:e0:1b:
4b:f7:15:e7:f9:76:ae:36:fb:02:ab:9b:ce:56:99:9b:29:37:
1c:57:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:07 2024 by rpki-client on console-fra.rpki-client.org