Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6863EA7A33A011EFADC5D074762E951A.roa
File: 6863EA7A33A011EFADC5D074762E951A.roa (raw, json)
Hash identifier: kko1jZXxmY6yQdbBDRFjyk4/FfuEse0qbv6zorenLDE=
Subject key identifier: E1:4F:06:7D:F8:48:AA:38:FD:7C:E5:B4:F8:4D:77:F4:07:4E:68:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 957F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6863EA7A33A011EFADC5D074762E951A.roa
Signing time: Wed 26 Jun 2024 09:42:31 +0000
ROA not before: Wed 26 Jun 2024 09:42:28 +0000
ROA not after: Mon 30 Dec 2024 09:42:28 +0000
asID: 984
IP address blocks: 156.253.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38271 (0x957f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 09:42:28 2024 GMT
Not After : Dec 30 09:42:28 2024 GMT
Subject: CN=667be287-9ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:61:64:cf:36:87:a1:50:4c:38:6b:26:2d:37:
3c:fc:9a:7b:63:86:45:fd:1d:5a:39:df:99:db:80:
38:a7:fe:40:ef:45:b1:a9:91:93:11:6c:89:0a:e4:
37:25:68:4d:69:c6:4c:fa:27:11:d9:1c:a3:a2:8e:
b5:4b:48:67:e6:e5:95:99:bb:f1:ff:d7:e9:10:ca:
fc:a4:46:c3:b4:bf:7f:7e:f9:1b:80:f7:0b:58:a7:
33:7a:4b:25:da:c7:e0:aa:a9:fe:26:8e:77:4c:1a:
f2:e2:52:6f:94:9d:c5:aa:4c:60:be:53:2e:c3:6d:
0f:ca:9d:90:39:4a:77:29:57:e0:31:cc:b4:6e:0e:
4e:70:b0:e0:3e:e7:36:b5:05:1c:ec:a3:5f:21:7e:
13:27:a6:a2:66:11:b2:f0:44:41:e9:7c:ca:7c:40:
16:14:2e:50:d2:d6:0c:fb:a5:91:cb:4d:55:70:e8:
05:48:ca:2e:d1:f3:8a:c0:e9:87:4d:a6:d6:1b:02:
c9:af:66:04:84:37:af:72:0b:5d:98:87:13:e2:c3:
ab:a1:06:2f:17:04:46:40:a0:dc:e0:a8:34:f6:98:
4f:9e:45:04:d0:46:95:8c:9d:88:26:a9:2c:3b:50:
73:f1:10:6a:54:84:23:9a:f7:2e:48:51:73:38:85:
a2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4F:06:7D:F8:48:AA:38:FD:7C:E5:B4:F8:4D:77:F4:07:4E:68:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6863EA7A33A011EFADC5D074762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0a:ae:67:ae:99:39:9f:6e:ec:7e:57:76:55:b7:f8:58:56:fc:
c5:24:e1:3e:1e:df:a1:9e:68:ca:5f:87:73:3d:f3:bf:c4:f8:
8e:7b:a9:fe:37:73:99:12:b2:41:00:4c:8f:60:a5:90:de:89:
a1:2b:a9:a1:4b:2e:03:82:a3:a0:4d:7c:06:b8:2c:f0:6e:95:
be:9f:eb:c4:fd:e8:7c:b1:c2:c4:71:58:59:0c:a4:c2:01:7a:
fa:17:66:aa:e8:cf:17:ec:0a:35:ae:e4:ce:ec:bc:ff:39:55:
c0:5d:e8:eb:a2:14:97:c5:fe:b3:d4:30:61:47:41:b9:62:83:
dd:fb:67:3a:b5:a2:34:5a:5e:a0:4e:e7:a9:02:74:f5:a4:7d:
16:fe:3a:a3:f8:9e:63:3a:f7:03:e1:d0:33:02:cb:27:5c:ed:
ca:1a:8d:30:1e:19:68:e6:db:a9:01:ae:9e:8a:9c:e2:e3:da:
d5:14:75:93:eb:a5:cd:31:80:94:e7:af:96:be:ba:d3:3b:25:
e6:e6:7c:c2:71:49:ad:69:2b:32:02:19:84:69:84:61:c4:b5:
3c:9b:76:27:31:0a:8d:74:dc:10:c4:49:21:8a:95:b0:55:aa:
be:60:73:b7:a5:58:68:05:cc:1b:03:67:e6:66:7b:bb:c6:fc:
36:f1:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:35 2024 by rpki-client on console-fra.rpki-client.org