Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D71510C3B2C11EE9C9345454AD9E6FC.roa
File: 4D71510C3B2C11EE9C9345454AD9E6FC.roa (raw, json)
Hash identifier: lqks5hTOPNZZgJK1pWuCA0k8IJBiL77iAMdq+Ws7+go=
Subject key identifier: F4:33:10:E3:02:DF:71:3A:0F:18:28:B5:FA:28:84:28:97:E3:77:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D71510C3B2C11EE9C9345454AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:26:36 +0000
ROA not before: Tue 15 Aug 2023 05:26:33 +0000
ROA not after: Mon 27 May 2024 05:26:33 +0000
asID: 140627
IP address blocks: 156.247.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13813 (0x35f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:26:33 2023 GMT
Not After : May 27 05:26:33 2024 GMT
Subject: CN=64db0c8c-9749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:f6:ef:be:16:75:92:ae:fb:dd:b1:c8:3e:
ff:9b:43:cb:d4:1f:95:d0:60:94:30:fd:87:53:5a:
09:ed:88:d8:25:b6:82:81:b6:31:06:2e:e3:6b:b4:
27:04:7a:c9:d7:76:f6:a9:cc:f0:4b:f2:12:c7:03:
8f:38:2f:3a:99:ee:83:5f:86:87:74:0d:6b:1e:3f:
91:7a:22:51:07:c6:f9:8f:3b:e3:9b:e7:23:a6:14:
cd:72:9c:f3:6a:7f:be:bd:37:dc:e2:ce:30:94:65:
65:f3:8c:47:d7:48:22:eb:b4:13:61:c1:cd:98:60:
3f:71:56:f9:22:41:2c:a4:07:14:2d:6f:67:03:a4:
4d:ed:43:f1:5a:da:64:9c:2c:d1:72:8d:a8:8d:d0:
f0:ba:9a:a4:9c:3f:9e:d9:37:4c:fa:dd:3b:50:d1:
5c:ac:1c:66:e7:90:9e:86:e0:bd:e8:5d:45:b3:74:
93:97:d0:99:1c:91:a6:2f:d3:54:6b:e4:ec:9b:31:
fa:af:75:dc:73:a6:a3:ec:cc:32:37:b8:3c:80:29:
e6:2e:4e:38:7f:c6:63:65:aa:01:85:c5:80:69:5a:
92:56:b5:93:a3:a2:c2:78:eb:2f:04:60:05:2b:0d:
6b:6a:03:dd:a0:19:72:f6:dd:d3:5f:f7:21:7c:0c:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:33:10:E3:02:DF:71:3A:0F:18:28:B5:FA:28:84:28:97:E3:77:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D71510C3B2C11EE9C9345454AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.153.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d3:0f:f9:f1:ef:66:da:4a:c3:6c:f5:0b:7e:c0:81:7f:fc:
c3:0a:2a:59:dd:1f:82:0a:5d:c0:d8:46:02:81:6e:a8:3c:a6:
50:c6:6a:47:51:a7:46:7c:ad:9a:2b:2c:2e:f9:ed:9e:0a:b2:
25:8a:bc:39:4a:ea:98:9e:7e:c3:d7:9d:d1:bc:5f:92:e4:3a:
07:6d:e7:7c:8b:de:bc:73:75:0a:04:75:80:04:77:46:7b:49:
91:c1:49:3c:9f:93:b7:b9:13:c1:64:9d:79:de:a7:70:2b:e7:
cb:b3:1e:5e:0d:71:23:ed:93:9a:85:ca:b4:2d:e3:53:14:1f:
8c:4e:2d:86:cf:fc:e8:2b:eb:19:f2:0f:ef:1f:23:4f:b7:32:
17:0c:c5:9c:f5:10:23:91:5e:34:4f:94:30:cb:4a:52:82:fa:
3d:58:e2:bb:29:93:5c:11:06:bd:29:e6:be:1b:e7:12:70:de:
84:0e:59:0f:46:b7:2a:63:ba:18:a8:93:5f:f0:ea:13:92:a9:
39:d4:c9:15:9a:f6:26:85:fd:ff:8c:cf:6f:51:8e:24:e6:95:
1d:f8:b7:b6:74:cb:d0:79:2d:6e:b5:07:d5:24:8e:5e:3d:27:
31:a0:31:1b:f7:56:4e:0b:cb:6e:8b:d6:21:9b:c7:59:58:7b:
8c:bb:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:08 2024 by rpki-client on console-fra.rpki-client.org