Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F52693A007D11EF93777561017001B1.roa
File: 5F52693A007D11EF93777561017001B1.roa (raw, json)
Hash identifier: cknpvfzOfC5NujhymjXCMbzFwwDKnMWItUBLXiEoz3o=
Subject key identifier: BB:5D:3E:92:65:56:94:33:65:C4:94:BF:47:2B:BC:03:E1:CD:26:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 83A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F52693A007D11EF93777561017001B1.roa
Signing time: Mon 22 Apr 2024 07:53:14 +0000
ROA not before: Mon 22 Apr 2024 07:53:11 +0000
ROA not after: Mon 20 May 2024 07:53:11 +0000
asID: 140869
IP address blocks: 156.225.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33705 (0x83a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 07:53:11 2024 GMT
Not After : May 20 07:53:11 2024 GMT
Subject: CN=6626176a-4ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:c3:55:ef:38:ba:4c:76:98:46:ae:f6:4c:
02:bd:71:9c:2a:1a:2d:90:19:3e:72:9b:9e:91:21:
04:9e:79:a9:7e:65:97:fb:0b:21:8d:a7:ec:68:bb:
42:da:94:c3:10:8f:29:8e:c1:4b:31:6a:86:60:68:
a4:6c:10:1c:79:32:2e:a4:71:06:7b:6f:81:26:69:
30:b5:8d:2c:14:9b:35:a3:66:1b:ef:88:37:b4:b1:
f8:68:3f:18:aa:a0:b3:64:96:fa:a4:2c:fe:93:5c:
e6:6c:f9:fb:5b:a7:5b:c4:cc:1e:92:15:d6:84:73:
78:d4:31:7c:1f:25:3f:83:cd:fc:80:b8:d6:c3:15:
9b:34:32:fe:02:4a:6a:fa:36:1a:68:fc:91:30:51:
2c:ac:d2:96:bb:1a:66:e9:c6:c9:06:d8:ec:9f:f8:
df:33:cc:a7:eb:de:9f:51:e5:0a:2d:65:ee:ff:87:
5a:47:a9:f2:2b:2e:2e:de:c7:65:38:04:7e:bd:91:
00:cf:16:19:52:38:d1:49:16:a2:65:60:87:36:cf:
42:27:46:5b:b7:9f:6b:82:fc:2d:11:9f:34:44:e7:
15:32:93:c9:40:db:3f:47:3d:b8:b7:c1:e0:55:75:
2b:ee:46:9c:e7:20:e7:b4:bf:9c:f1:93:4e:8e:d4:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5D:3E:92:65:56:94:33:65:C4:94:BF:47:2B:BC:03:E1:CD:26:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F52693A007D11EF93777561017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.80.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e4:d7:9a:09:d5:4a:b4:31:64:f2:69:6c:4e:01:18:00:f1:
b3:90:03:34:a2:d8:e4:ce:a7:a5:bb:51:d8:7e:24:b3:df:8a:
96:fd:c8:48:14:1c:f1:cc:23:be:25:75:13:fb:d3:f9:e1:b6:
c3:bf:bd:25:a7:9d:b7:da:e1:ef:93:7f:49:00:9f:62:49:8c:
8c:ab:0b:1d:18:f7:c4:8a:16:0d:8f:78:b4:2d:2e:34:bd:f0:
f9:d9:bb:48:cd:db:9b:09:34:c5:99:9a:59:e0:86:96:ce:43:
7b:38:c5:e4:3a:fe:95:d9:1a:a2:a8:3f:d0:48:c7:db:44:73:
8e:58:a7:16:1b:72:e7:9b:fb:90:e3:c3:48:ae:76:bb:97:e9:
ff:3e:db:6a:93:2a:41:9a:57:8d:f1:71:34:fb:ed:77:7d:c1:
54:3c:80:4b:88:eb:b7:f0:88:ae:4b:7b:ff:6a:7a:54:8f:f9:
89:93:42:3e:0c:94:28:fd:b4:de:4e:3a:cd:c0:cf:1a:47:e8:
da:e7:92:a1:60:b1:09:ad:8f:6b:ce:58:60:cf:d8:51:10:22:
67:1c:d4:6b:fa:d9:70:de:62:95:59:e0:46:4b:7c:6a:b9:97:
73:1b:6c:5d:67:2a:60:66:47:aa:a5:c2:c8:03:1a:75:a3:14:
c6:65:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:53 2024 by rpki-client on console-ams.rpki-client.org