Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/612AA180544A11EEBBC34B864AD9E6FC.roa
File: 612AA180544A11EEBBC34B864AD9E6FC.roa (raw, json)
Hash identifier: qEcegMKKODzmKv7A1k0ZWs4XjH1RyZGKQAMgGIgJTLE=
Subject key identifier: EB:86:5A:AA:B1:9A:53:79:D7:5D:3F:9D:D8:51:41:5D:BC:24:5C:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3A57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/612AA180544A11EEBBC34B864AD9E6FC.roa
Signing time: Sat 16 Sep 2023 04:34:53 +0000
ROA not before: Sun 01 Oct 2023 04:34:50 +0000
ROA not after: Thu 08 Aug 2024 04:34:50 +0000
asID: 133199
IP address blocks: 156.245.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14935 (0x3a57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 04:34:50 2023 GMT
Not After : Aug 8 04:34:50 2024 GMT
Subject: CN=6505306d-b106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:2e:d7:9f:b9:76:07:0e:4c:fa:64:52:e9:
43:1c:f3:73:ba:60:be:fa:c3:0c:56:11:ab:a2:7e:
ed:ac:52:7d:36:47:8c:f3:68:ab:e1:ab:b6:88:b1:
ff:8e:54:a0:5e:c7:00:0f:fb:f4:4f:8f:3e:3e:19:
97:3f:d3:4c:e9:4f:29:ea:96:3d:c3:93:ae:9c:97:
ee:fa:3c:61:a1:52:3c:39:ad:91:ee:f2:b3:de:17:
aa:6e:99:03:cc:9d:bc:31:8b:f0:04:e5:39:f5:40:
9b:38:a7:c2:c0:b2:05:43:83:70:d1:79:be:d7:ee:
17:cd:72:a1:7f:b1:f5:f4:8e:be:d3:cf:4b:ea:fb:
6b:db:23:7b:f8:e3:3c:00:d9:91:fd:e5:35:c2:5b:
86:00:9d:a1:6c:67:c5:cb:c6:90:f5:62:b2:bb:7b:
38:f4:18:3d:40:f1:2a:c7:ea:54:af:5a:21:bb:f0:
5f:1b:dc:df:51:87:d7:f6:d7:92:dc:d0:97:72:20:
fe:e6:bf:10:9b:a2:30:16:ed:bd:ca:e7:df:4d:30:
04:b2:d4:33:ce:31:fb:c6:a7:6b:cb:27:eb:3e:69:
45:cf:17:a2:05:65:d5:75:0b:c7:78:8c:9e:ef:86:
ea:fa:a9:e2:b4:15:2d:d1:23:d5:4e:37:a1:4b:67:
3e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:86:5A:AA:B1:9A:53:79:D7:5D:3F:9D:D8:51:41:5D:BC:24:5C:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/612AA180544A11EEBBC34B864AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.20.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c9:ee:6e:21:cd:41:bb:c8:c4:0e:af:fa:e1:7b:5a:f9:fd:
6d:e6:9f:22:51:79:3d:52:40:1c:0e:f3:d0:e7:04:74:57:9c:
15:18:1a:4c:62:84:2c:9c:49:80:d1:5e:d7:2a:43:34:71:f2:
86:0b:5e:87:dd:06:92:b0:ed:c8:d7:98:f1:0c:22:27:21:22:
2d:71:34:34:ff:ab:5b:dc:4c:8f:c7:4f:73:dc:21:29:ec:87:
1d:29:a9:5a:49:c4:d9:2a:ab:d3:70:31:ae:e9:b4:56:95:e0:
2d:00:a3:b8:69:cf:bc:ea:3a:a5:83:c0:8a:63:89:2d:c8:bb:
a1:cc:ff:8a:91:10:b4:b6:0f:28:8e:ca:d0:b7:5c:bb:d8:3b:
c8:ed:80:ae:47:e5:90:36:75:d5:96:4f:c4:7c:d5:1a:28:77:
54:75:4f:ea:39:29:24:aa:66:54:64:32:54:24:1e:5e:04:c7:
24:60:42:5c:25:2b:22:ee:47:13:5f:49:09:36:74:de:e2:79:
0a:4f:7d:6e:dd:29:55:e1:7b:22:a6:82:a8:c0:3d:e2:74:b0:
95:b5:f4:30:67:8a:60:39:04:e5:4b:ee:e2:ca:3a:ac:86:95:
8c:85:ec:c2:4c:e5:cd:c2:a1:78:4d:6f:e7:b1:da:e4:d6:50:
85:e4:81:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:10 2024 by rpki-client on console-fra.rpki-client.org