Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66DDEFE83B2111EE8B873C244AD9E6FC.roa
File: 66DDEFE83B2111EE8B873C244AD9E6FC.roa (raw, json)
Hash identifier: nbaB/ov6mHqG+nKDdXuGQGfzYIj80RL2QFpBLmTFsR0=
Subject key identifier: 13:04:F4:71:7F:B0:2D:FB:12:F9:DC:E2:56:A9:05:E7:7B:63:D1:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 354B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66DDEFE83B2111EE8B873C244AD9E6FC.roa
Signing time: Tue 15 Aug 2023 04:08:34 +0000
ROA not before: Tue 15 Aug 2023 04:08:31 +0000
ROA not after: Mon 27 May 2024 04:08:31 +0000
asID: 140627
IP address blocks: 156.247.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13643 (0x354b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 04:08:31 2023 GMT
Not After : May 27 04:08:31 2024 GMT
Subject: CN=64dafa42-fffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6f:92:eb:88:d6:ec:fa:d0:88:d9:9e:82:e1:
23:69:8d:da:2a:45:9a:42:9f:c5:24:6e:61:77:6d:
11:88:cd:06:78:d7:bc:e1:e4:09:cf:2b:6e:5a:0c:
d1:fe:f0:bc:29:42:09:9a:eb:f8:07:02:d9:e9:2e:
42:5d:16:92:90:75:ee:d9:d3:f1:a9:18:53:12:1a:
25:e2:a9:37:74:f3:a8:33:b9:7d:b3:6b:66:63:7b:
9c:f1:e4:9d:51:22:51:04:58:c8:2d:99:f6:f8:93:
c6:96:23:91:ee:42:3a:ae:eb:6b:c8:bb:3a:8e:2e:
ee:10:4e:84:3b:96:34:b6:49:93:c9:30:b1:0a:4c:
39:0e:ff:ea:46:65:af:e5:9d:97:f1:e1:ac:a1:dd:
45:d0:91:a8:4d:5b:12:3d:dc:4d:23:ff:7e:2a:c0:
f2:81:6a:93:3e:5d:9a:03:ed:d7:84:79:6d:3b:2c:
6d:c8:5c:fd:a1:8d:54:7f:d2:aa:60:33:63:03:81:
28:d8:b3:ec:59:7a:36:f4:ac:bd:ef:8c:ac:86:fe:
79:15:91:45:ee:7f:87:ff:b9:47:13:b3:0e:5c:78:
be:13:eb:f3:c0:ef:ad:eb:c3:e3:b2:9a:43:13:68:
9f:26:d9:45:9c:2c:32:d1:71:46:3d:dc:b2:71:81:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:F4:71:7F:B0:2D:FB:12:F9:DC:E2:56:A9:05:E7:7B:63:D1:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66DDEFE83B2111EE8B873C244AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.194.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6f:c0:42:44:e0:78:4d:69:da:11:62:85:66:3d:3e:35:9e:
33:42:e2:9f:35:99:64:1f:e5:d0:6f:00:60:24:fb:6f:b9:88:
d1:45:2a:2b:ab:57:31:e8:b5:cf:6e:cc:cd:89:4e:17:02:dc:
77:31:19:fd:f8:18:c4:32:95:c2:89:96:38:12:37:76:a5:ef:
08:52:25:54:07:82:1b:6e:fd:1b:56:e8:09:1d:08:98:6a:8f:
49:61:99:20:c2:1a:6b:c6:8c:59:fa:7a:ca:bd:97:65:32:ee:
49:d5:85:82:21:65:d3:e2:f7:9e:6d:36:1c:ae:f2:f8:44:b1:
9b:47:27:c3:ee:14:55:73:90:6d:98:31:74:83:13:85:ac:7f:
5d:c5:eb:1d:60:77:da:51:4c:47:30:b1:e3:05:ba:fe:72:91:
c6:80:68:a3:a4:46:b7:cb:94:e9:6a:0a:40:95:f0:43:0a:4f:
a6:6b:17:e3:ec:fa:3d:62:c5:1f:d7:f9:b5:da:10:ef:db:a7:
b7:1b:99:1d:26:7f:3c:f2:a3:e5:e4:cc:0f:e4:4b:42:72:9c:
36:c6:78:5b:7f:f2:cc:b2:e2:9f:06:39:c0:35:f8:e9:f1:26:
26:d2:35:61:a2:21:1e:7e:f0:72:69:66:2b:39:e9:25:90:00:
06:02:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:10 2024 by rpki-client on console-fra.rpki-client.org