Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A64F863B2B11EEBE63A4424AD9E6FC.roa
File: 64A64F863B2B11EEBE63A4424AD9E6FC.roa (raw, json)
Hash identifier: LmFBqzRRMzN3twrZCi+KKbLI7974OtGsCAzUpJfYZbE=
Subject key identifier: 26:A1:3B:9D:6E:75:30:8B:14:09:3C:D1:B8:04:7F:66:43:47:F6:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A64F863B2B11EEBE63A4424AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:20:05 +0000
ROA not before: Tue 15 Aug 2023 05:20:02 +0000
ROA not after: Mon 27 May 2024 05:20:02 +0000
asID: 140627
IP address blocks: 156.247.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13799 (0x35e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:20:02 2023 GMT
Not After : May 27 05:20:02 2024 GMT
Subject: CN=64db0b05-bd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:4d:0e:03:c7:d9:07:9c:f6:f3:f9:da:a7:
39:4a:ec:80:5e:07:30:b3:77:f5:ee:ac:57:51:59:
97:9c:17:69:f0:38:54:67:22:ac:59:cb:46:d4:b3:
cd:02:fb:ec:fa:3a:cd:c7:2f:56:86:73:41:53:45:
af:63:50:20:27:dc:6f:60:23:15:d6:8c:91:e5:db:
b6:d0:59:15:b6:e4:54:9a:77:40:ba:98:83:d7:ff:
5f:42:fd:92:29:2a:71:a7:b0:0f:91:9d:44:68:f2:
24:79:54:60:90:47:20:c9:6e:fb:30:d0:58:7e:7a:
2a:1d:24:fc:bf:e4:5b:dd:e2:ca:d6:f5:f0:f6:01:
3c:1b:7a:d8:37:08:40:91:48:06:45:be:2c:bd:d4:
db:5c:6b:88:66:10:20:8a:88:d2:3a:99:43:59:ef:
45:95:a0:bb:e2:f7:f0:7d:0d:49:68:ae:d8:d5:a6:
01:5e:1e:f4:91:b3:e3:19:e4:fc:93:e0:97:d5:06:
97:07:3f:09:e2:b6:ad:98:0b:4e:38:d9:33:d3:b0:
ef:85:7e:f3:9b:f2:97:99:d9:b1:81:d8:5e:7b:99:
eb:b4:bc:73:76:81:36:d3:23:3a:47:a6:fe:8a:4a:
cb:3f:b6:f1:2b:44:84:5f:f0:23:8b:49:f7:cb:4e:
2e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A1:3B:9D:6E:75:30:8B:14:09:3C:D1:B8:04:7F:66:43:47:F6:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64A64F863B2B11EEBE63A4424AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.146.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ca:0a:8e:b7:c7:8f:d6:09:aa:9b:b0:6c:0a:6e:01:32:46:
01:10:7e:ca:b4:06:d7:5c:2a:8b:62:eb:99:57:5e:4c:2d:33:
af:cb:dc:82:ff:0b:1d:23:8c:0a:03:19:0c:a4:ff:11:27:1d:
7a:46:de:6d:0b:84:a6:49:a7:94:32:f9:4d:a2:32:34:7e:81:
fc:0b:fd:f0:e5:e0:77:73:06:6a:e8:86:73:c6:46:21:f9:b3:
d6:c2:c1:bc:86:c8:eb:45:20:00:03:f4:78:7c:59:12:2e:7e:
95:63:74:74:80:a2:fb:4e:da:6b:57:47:e6:71:ff:cd:3c:15:
f2:ef:5b:0a:62:5d:cb:60:16:ad:ed:29:ba:59:50:63:b5:4f:
69:5c:6b:23:e0:f1:53:17:dd:f7:f2:f6:18:ee:5c:e1:1e:58:
3f:b1:c6:28:10:6c:2d:67:58:77:36:a6:f5:5e:cb:1c:47:bf:
33:65:7b:59:4f:35:f3:3c:15:02:a3:56:42:4a:76:99:ff:ee:
99:ca:48:5f:80:0b:9c:cc:4b:c4:80:89:51:e7:f4:64:71:86:
55:3b:be:59:67:25:ad:69:df:62:4a:84:20:07:5d:81:29:4a:
91:d7:7f:79:de:74:c7:53:e8:fa:70:8d:ad:72:28:b9:ae:64:
33:07:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:10 2024 by rpki-client on console-fra.rpki-client.org