Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/484D1BE41D1111EF97D5B6387DDC24C2.roa
File: 484D1BE41D1111EF97D5B6387DDC24C2.roa (raw, json)
Hash identifier: CsbmSHeJjLxpyCVgFOrf4TeNZOYO+3lrnZyh8VswmvM=
Subject key identifier: 2C:57:BB:D2:8E:7E:4C:A3:FD:DF:10:4A:84:4D:74:EE:71:C4:C5:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/484D1BE41D1111EF97D5B6387DDC24C2.roa
Signing time: Tue 28 May 2024 16:42:34 +0000
ROA not before: Tue 28 May 2024 16:42:30 +0000
ROA not after: Sat 14 Sep 2024 16:42:30 +0000
asID: 138195
IP address blocks: 156.237.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36028 (0x8cbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 16:42:30 2024 GMT
Not After : Sep 14 16:42:30 2024 GMT
Subject: CN=6656097a-89e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:09:ae:fd:b0:0c:42:c8:e0:54:59:34:a3:01:
47:68:4c:9d:2a:60:86:70:69:d6:70:6b:11:50:76:
61:25:dc:05:6e:73:d1:e1:c7:c3:ff:fe:cc:9d:f7:
c6:e2:5d:3d:24:0e:f2:f6:7d:31:5b:37:6f:09:4a:
99:72:9f:d0:3b:e8:07:53:f3:37:83:d6:95:24:b7:
57:cf:b5:91:bb:67:7e:c3:62:22:15:54:f4:65:fa:
fe:44:a2:bc:39:40:bd:a3:7a:9a:f1:e3:72:e3:f1:
9f:57:e5:9e:6e:7b:75:07:47:1e:e4:22:25:32:9a:
78:c4:09:8b:9e:9b:05:b3:13:f2:52:de:8f:a9:41:
c5:cd:23:3c:5c:76:6e:67:bf:93:a8:0e:d6:ca:1d:
12:86:e6:4e:6d:5b:85:3e:e9:55:b2:72:09:1e:15:
b7:7b:16:c0:30:fb:c9:91:77:df:51:06:4f:f5:03:
a8:a5:46:9b:cc:22:93:70:90:e4:8c:4b:0c:8b:f3:
bc:35:e6:26:cd:b5:47:14:16:23:d2:69:11:d5:c3:
49:6e:9c:a8:2a:30:c6:aa:1c:94:b1:f5:be:80:d5:
9b:85:62:78:f7:cb:fa:c1:90:73:29:83:73:33:52:
77:77:d9:c1:48:89:42:a2:0d:19:59:3b:f5:1e:5b:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:57:BB:D2:8E:7E:4C:A3:FD:DF:10:4A:84:4D:74:EE:71:C4:C5:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/484D1BE41D1111EF97D5B6387DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.32.0/19
Signature Algorithm: sha256WithRSAEncryption
73:2f:6a:fb:a2:05:54:36:46:c7:9c:9a:d9:f9:08:37:99:b0:
27:26:61:be:f3:0b:a5:43:75:bc:e4:c2:30:80:69:73:84:e9:
68:b1:a4:e1:2d:a3:36:e5:8e:e2:85:50:e1:c9:1e:87:ef:d2:
f7:78:ea:08:d1:8b:d1:00:6e:a1:d4:41:32:b8:09:5d:89:41:
b0:bb:21:29:fa:88:07:48:ec:6b:79:f0:2d:01:ed:f3:e1:8d:
07:3b:01:e3:36:83:cc:ce:70:d0:54:78:0e:76:75:db:82:e7:
fb:8d:59:98:a6:22:0c:37:90:b6:08:68:8d:ed:20:98:03:4a:
57:0f:68:52:17:dc:72:32:b2:97:b3:e7:b8:91:2e:82:f9:71:
b7:d3:be:f4:8c:a2:7c:8b:d0:a6:74:a9:c4:14:11:29:f6:b1:
ca:3c:79:b5:30:b3:13:71:47:e8:a9:cb:d3:0f:9c:ef:8f:3b:
ab:79:fa:1f:72:0f:ff:76:89:00:4e:dc:49:f1:b5:5e:9d:b9:
05:eb:b1:39:b5:f5:82:9b:cf:5e:d9:e9:66:98:03:e7:f7:59:
22:bb:a6:20:ce:e8:3e:ee:74:ca:c5:ab:7d:03:15:f2:49:d5:
75:29:25:24:d5:0b:d2:23:9e:d8:11:07:48:ce:7b:72:85:0f:
3d:18:3f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:32 2024 by rpki-client on console-fra.rpki-client.org