Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6055596E038411EF9DC18E10017001B1.roa
File: 6055596E038411EF9DC18E10017001B1.roa (raw, json)
Hash identifier: E1LaXvEfpOjngYua3ZwwJGnMdMsNyIBx05Ky6P5lUbI=
Subject key identifier: CB:D8:75:2E:18:20:CC:D1:9F:18:3C:65:43:69:3E:62:8F:85:09:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 858E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6055596E038411EF9DC18E10017001B1.roa
Signing time: Fri 26 Apr 2024 04:20:56 +0000
ROA not before: Fri 26 Apr 2024 04:20:52 +0000
ROA not after: Tue 03 Sep 2024 04:20:52 +0000
asID: 131685
IP address blocks: 156.234.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34190 (0x858e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 04:20:52 2024 GMT
Not After : Sep 3 04:20:52 2024 GMT
Subject: CN=662b2ba8-1b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:4d:07:a8:c9:0c:af:a2:01:7e:cf:6c:e6:
d7:1b:61:a8:be:29:9e:83:65:c6:1a:ff:1a:21:43:
27:d8:4b:b4:00:50:4b:b7:61:7d:dd:28:49:a9:e8:
d7:ba:06:d7:9f:21:27:ab:32:85:c2:7b:90:40:c9:
c1:33:e1:7a:5d:4a:54:bf:5f:49:49:7f:1d:f5:ca:
5e:15:b5:da:27:3e:d8:62:c5:58:d0:e3:93:f6:88:
e8:71:a2:c6:e4:e2:ad:9c:46:7b:d8:3e:a7:80:88:
dc:b9:db:f8:15:6d:46:95:2e:96:26:cc:c4:5b:93:
22:c4:6c:ad:88:61:d7:4a:c8:29:90:6c:e3:45:3e:
78:48:6d:64:14:1f:58:1a:7d:14:75:45:78:9a:79:
39:13:8e:e2:07:be:c2:a3:02:c3:9e:72:ed:03:ab:
f5:5f:19:75:3f:cf:35:3d:a6:d7:26:02:b3:79:7d:
6f:17:d5:6c:d7:ae:c4:6c:3b:4f:77:da:6c:59:e5:
e8:aa:ab:e7:ef:b7:eb:5e:ba:e8:c9:a5:87:55:99:
54:d8:5c:38:65:0b:f1:6e:5f:48:5c:32:4f:e7:e2:
f7:13:2f:21:f8:34:49:00:5b:56:95:d6:e9:6a:61:
ed:2d:e0:b6:64:3f:93:23:bb:c7:9f:b1:8b:1c:ce:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D8:75:2E:18:20:CC:D1:9F:18:3C:65:43:69:3E:62:8F:85:09:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6055596E038411EF9DC18E10017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.27.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a8:33:a6:84:88:77:12:cd:85:0b:6d:9c:b5:2a:4a:7d:a8:
3f:9f:cd:98:a6:63:11:9d:cb:03:69:df:74:5e:a1:92:6b:83:
96:25:a9:bf:2f:d9:dc:ce:77:15:4f:ec:af:cc:da:9f:3c:4a:
24:bf:ec:2c:12:e5:94:df:9d:5d:b8:46:e6:d3:21:7a:30:0b:
3f:06:58:d1:db:86:85:6a:cc:a7:27:6d:f2:6a:bf:0b:f9:da:
2a:7b:44:27:66:ac:22:97:d5:67:3a:ea:a2:8e:3b:48:a2:b0:
56:a2:64:81:16:52:4f:c3:ee:5b:62:0f:1c:f2:0b:59:0d:b3:
f2:e4:c6:92:a9:c1:21:43:0a:10:76:b7:27:eb:e1:49:84:62:
ec:b4:a3:c3:d9:55:dc:69:0b:cc:e1:60:e3:29:25:5d:dd:2a:
90:a7:21:e0:84:be:78:1f:c5:1c:3f:de:ab:7c:00:4f:ca:9a:
57:54:a5:ef:4b:5f:8e:77:57:f3:f2:7d:7c:45:16:54:f8:5f:
de:b7:f0:ba:e0:95:44:b7:22:6c:5a:ee:92:e1:08:32:36:fd:
67:42:c6:10:aa:9c:65:fe:c9:c4:dd:97:a5:89:f2:ee:ac:82:
85:c1:a1:ef:e1:1a:a1:4a:65:6f:05:c6:0c:a7:b1:59:64:5a:
ba:9a:16:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:10 2024 by rpki-client on console-fra.rpki-client.org