Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45C7DF3A84F511EEA873CC4C4AD9E6FC.roa
File: 45C7DF3A84F511EEA873CC4C4AD9E6FC.roa (raw, json)
Hash identifier: grQfhkIXEIrlW4SrMw/55sVDD5lipGI4WHuEX9n2xn8=
Subject key identifier: F0:FA:D4:98:E9:21:CF:29:D4:BC:BC:77:61:7F:A4:CF:A3:A0:7F:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4969
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45C7DF3A84F511EEA873CC4C4AD9E6FC.roa
Signing time: Fri 17 Nov 2023 02:59:07 +0000
ROA not before: Fri 17 Nov 2023 02:59:04 +0000
ROA not after: Tue 12 Nov 2024 02:59:04 +0000
asID: 397630
IP address blocks: 156.225.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18793 (0x4969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 02:59:04 2023 GMT
Not After : Nov 12 02:59:04 2024 GMT
Subject: CN=6556d6fb-eb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:28:b5:7f:90:27:eb:ef:f5:9a:a4:a2:7b:00:
f0:68:b4:55:75:e1:77:37:de:ea:a8:a6:be:5d:0d:
65:e7:9e:7a:d9:6f:4c:70:1a:21:f1:ef:7d:f5:ad:
8d:60:70:7d:1b:03:53:2a:d5:7c:b5:f2:05:3b:58:
01:31:73:88:cb:c1:74:09:63:a5:96:14:94:ac:81:
01:44:2c:79:54:dd:c2:b1:82:ba:9e:d1:5c:25:f8:
59:4e:22:f0:ec:48:33:f0:b7:e1:f4:69:a5:2e:60:
eb:e2:96:1e:72:69:d1:07:36:c3:51:7b:73:bd:7a:
ee:a1:52:08:bf:96:a9:55:74:82:f1:6e:73:da:31:
42:4e:0f:c7:aa:7a:d0:b0:eb:76:66:43:1a:21:b7:
e8:dd:cb:f8:c5:f7:4f:60:95:14:c3:44:68:c0:4e:
d4:67:37:44:59:ab:86:d0:64:11:15:38:4e:e1:3d:
6b:fd:f2:8f:6b:21:80:82:b4:ba:3b:1d:0c:7e:e2:
5f:1d:45:54:17:40:b2:94:71:23:87:87:eb:a9:f3:
c6:76:bd:cb:06:9d:03:32:21:46:23:bf:64:ad:a8:
2e:7f:67:f5:16:88:2d:d9:85:75:26:33:b7:74:9d:
99:ab:f2:7e:d4:c2:c9:82:80:84:a6:81:e7:fd:2b:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FA:D4:98:E9:21:CF:29:D4:BC:BC:77:61:7F:A4:CF:A3:A0:7F:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45C7DF3A84F511EEA873CC4C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.10.0/24
Signature Algorithm: sha256WithRSAEncryption
57:92:37:2f:94:89:bb:25:c7:e9:0a:f4:51:cb:d6:c0:67:66:
94:b0:a7:78:a7:3d:db:cf:17:b8:27:36:d5:86:a4:55:44:7e:
db:30:5c:1a:92:f4:4b:21:06:89:21:e8:93:5c:4f:59:6c:38:
81:a9:91:86:10:f9:28:b5:3e:fc:6c:8b:7b:e7:a3:cc:dd:97:
de:7a:73:9c:d1:17:34:71:24:86:38:bc:69:f9:fa:80:cf:92:
04:d5:b2:06:22:f5:91:67:2b:e3:42:6b:89:e2:04:0f:22:36:
02:cb:b7:04:ab:78:2a:c8:56:75:51:92:8a:2a:12:92:62:ea:
01:19:c7:e4:30:a7:3e:79:21:42:e6:14:bd:da:87:de:08:69:
33:0f:09:80:bc:68:58:b9:95:f7:d2:a3:6c:58:17:52:67:80:
f6:1a:97:bb:5a:ea:2a:1f:c9:d4:a0:15:2d:c5:67:3c:2a:c9:
d6:34:fe:89:48:b7:28:a5:0e:b6:16:c3:2f:d7:94:69:d3:c3:
9e:2f:87:29:d0:ae:d9:a1:c0:0e:86:40:88:93:fa:e8:24:96:
6d:59:05:9c:ac:c9:b3:68:42:01:01:fc:d3:35:02:c4:59:05:
3b:8f:12:1f:b1:9f:80:7e:50:23:52:1c:0e:68:36:36:c5:b4:
09:45:a8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org