Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FF88140539E11EE8E18615A4AD9E6FC.roa
File: 4FF88140539E11EE8E18615A4AD9E6FC.roa (raw, json)
Hash identifier: ksp7edjIrm6cxWu8N3gSh5GDkDPAiIIHM2VXyBeSAp8=
Subject key identifier: 46:CB:84:CC:69:B2:B5:63:51:C5:EB:A4:1C:B2:D0:FC:1F:76:16:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3966
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FF88140539E11EE8E18615A4AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:03:11 +0000
ROA not before: Fri 15 Sep 2023 08:03:07 +0000
ROA not after: Sat 08 Jun 2024 08:03:07 +0000
asID: 142403
IP address blocks: 156.236.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14694 (0x3966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 08:03:07 2023 GMT
Not After : Jun 8 08:03:07 2024 GMT
Subject: CN=65040fbf-0474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:3e:5c:eb:6e:45:d6:d9:7c:aa:40:35:01:
22:90:15:aa:c2:21:8c:d5:14:27:67:72:2d:9a:bf:
59:9d:47:6a:69:02:f1:17:96:f7:b4:25:f0:51:d7:
f4:38:ec:1d:b0:a1:9e:d2:5c:ee:9f:67:8c:47:a2:
af:0c:57:66:ba:08:63:47:cd:f1:6a:8b:44:60:1a:
be:3c:7c:dd:cf:92:78:b9:5c:a7:51:7b:4a:c4:c9:
2c:ea:a7:91:84:b9:3e:49:42:86:df:dc:45:fb:7e:
f4:1b:c7:9b:2e:40:5a:75:ad:f6:31:e3:cd:da:10:
09:76:a2:4b:34:09:9b:c1:b1:f2:3b:c7:e7:ca:41:
4e:94:d9:63:9f:69:99:e4:d2:32:1c:f8:0e:25:50:
f1:bb:8e:ee:1a:f8:7b:3d:ee:f2:04:15:ac:94:1b:
ef:ea:9e:b8:25:68:53:7b:f1:48:b7:24:00:b8:b5:
69:5e:b4:c6:d3:53:8b:ee:a3:1d:80:e4:10:83:72:
2f:dc:bb:ff:23:a4:f4:e2:32:65:ae:6e:46:30:0d:
22:2f:7e:03:28:77:30:49:33:fe:a4:01:fc:8f:cc:
eb:1b:7c:bf:97:e3:ad:40:e0:e5:aa:0a:27:8f:51:
95:c2:5e:70:af:08:48:9c:b7:2f:dd:d7:e9:47:64:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CB:84:CC:69:B2:B5:63:51:C5:EB:A4:1C:B2:D0:FC:1F:76:16:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FF88140539E11EE8E18615A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:85:74:23:a0:27:b9:f2:ea:c8:f3:0c:09:df:6b:ef:7c:5e:
01:ce:92:2e:9f:a9:15:67:51:a9:9c:0f:33:64:67:9d:6d:28:
39:31:1b:2a:a6:12:9e:44:7f:0c:b9:d4:5e:4d:32:63:56:f8:
c3:d2:1d:ff:b5:db:01:64:79:94:e0:26:20:f4:b6:21:90:b8:
8b:22:4b:6e:f4:7a:71:b1:6a:a5:4e:29:77:cd:51:2b:3f:e9:
c2:48:e6:7b:1e:4e:29:40:ce:9f:6f:d8:86:9a:70:40:ac:2b:
64:cc:d5:9e:2a:15:41:cd:4f:5f:1f:d6:c8:8b:13:e6:82:3a:
60:fa:ec:60:ea:84:41:3c:11:75:fe:a9:e1:21:b8:68:16:8c:
0f:a8:05:d3:e3:27:b7:bf:79:65:54:02:f0:97:48:05:33:80:
40:95:c7:e8:2d:5d:20:a7:48:e8:cd:b8:83:8a:8f:48:bb:d0:
3a:ac:79:02:cc:5b:d1:d5:17:2c:e3:f4:b8:c3:f1:bb:0f:88:
81:1f:9e:14:14:a3:4f:95:cb:f0:88:fb:36:62:a0:31:ca:92:
2c:ab:9b:42:dc:1f:82:b3:9b:7d:14:42:d1:bb:8e:bf:52:c4:
c3:04:29:38:21:2b:0d:35:f4:26:7a:9b:d8:91:49:85:c0:07:
63:16:6a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org