Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A365644F65311EEAADE5792775412E6.roa
File: 4A365644F65311EEAADE5792775412E6.roa (raw, json)
Hash identifier: /yzA79kZX72TnMA4jDFu8UZzZUum+LooAq6lb/tvWPU=
Subject key identifier: 70:31:D9:DC:65:0A:03:85:40:7A:B5:F0:D8:85:FE:61:D7:C7:6E:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 81C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A365644F65311EEAADE5792775412E6.roa
Signing time: Tue 09 Apr 2024 09:26:48 +0000
ROA not before: Tue 09 Apr 2024 09:26:45 +0000
ROA not after: Sun 13 Apr 2025 09:26:45 +0000
asID: 46071
IP address blocks: 156.238.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33224 (0x81c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 09:26:45 2024 GMT
Not After : Apr 13 09:26:45 2025 GMT
Subject: CN=661509d8-5938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:9d:95:8b:5c:47:1e:33:73:33:5d:81:7e:
75:7d:ec:5d:d8:16:76:d2:99:93:79:a0:80:54:82:
c1:ba:7a:06:04:15:50:22:e0:1f:00:41:3f:e5:11:
1f:e3:56:7d:77:cf:86:84:bc:96:a7:81:e6:dc:0c:
4d:b5:f6:29:63:a2:49:c0:45:72:ac:4f:83:31:02:
cd:26:88:d4:c6:dd:dc:1a:c5:4b:6e:63:8a:5c:14:
f9:d5:f8:f7:b6:7d:97:1b:03:ab:ac:d0:05:af:0d:
4c:90:58:c2:4d:00:ba:f0:28:33:06:94:53:42:25:
aa:35:fe:1c:c1:3e:39:5b:14:11:4c:40:cf:04:8c:
a1:84:47:57:ab:0c:3d:cc:f4:8a:c0:57:d7:c3:4c:
a1:ef:74:af:3a:98:d9:58:8c:28:fc:dd:de:45:0c:
49:0a:27:51:9c:ac:52:cd:d6:74:f7:86:b6:d4:4f:
79:34:38:42:eb:eb:89:06:0b:13:41:9b:3e:e6:cf:
20:a0:eb:09:d4:50:f8:27:df:1d:2e:2f:f4:ee:f3:
d6:e2:af:56:ae:a7:a4:2a:f9:4e:99:f5:11:98:54:
f7:be:9e:02:05:fd:e3:10:f9:7d:cf:c7:c8:a7:51:
79:c8:6f:aa:7f:be:27:ec:a1:a8:1f:ce:a9:a9:22:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:31:D9:DC:65:0A:03:85:40:7A:B5:F0:D8:85:FE:61:D7:C7:6E:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A365644F65311EEAADE5792775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.17.0/24
Signature Algorithm: sha256WithRSAEncryption
21:bc:e8:92:e5:90:bf:63:6c:bd:e5:b0:b5:b5:ae:41:d4:92:
29:4a:19:dd:a3:b7:34:46:92:65:13:cd:35:de:0f:f3:37:43:
a3:fb:39:e9:e1:7b:03:32:30:8e:79:cd:53:b5:9c:68:62:ad:
57:15:98:08:b2:63:08:a3:3c:c5:3b:2e:eb:64:aa:c9:57:25:
c2:06:ff:2f:b5:cd:79:89:e4:b8:ee:96:60:79:dd:f7:6b:be:
b6:0d:c3:6d:be:2e:28:28:13:66:96:1a:37:d9:7d:78:9a:86:
8b:1f:40:25:bd:13:97:1c:d4:69:7e:93:32:99:ee:53:f1:40:
e3:9e:70:04:cb:28:2a:a3:06:0d:0c:4d:93:af:bc:56:87:cc:
d1:4f:c1:34:01:4c:0b:72:a9:74:69:d7:32:b3:6b:4f:8b:8e:
48:c1:a6:4e:50:e1:36:97:ff:89:89:8b:fe:72:24:8b:c5:95:
e0:64:4a:bb:7d:97:62:b4:66:fc:bc:dc:7f:60:49:da:77:7f:
3f:51:51:28:63:9e:8c:63:cd:38:0c:51:03:6a:b1:c0:db:bb:
02:b0:38:93:2d:be:31:f2:14:cb:5f:ca:6c:38:4b:b2:fd:a0:
d0:d0:01:9d:2a:1c:1b:8d:23:d5:50:75:be:80:73:0f:cc:c9:
c6:0a:69:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org