Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A2AB996039011EFA57AE570017001B1.roa
File: 6A2AB996039011EFA57AE570017001B1.roa (raw, json)
Hash identifier: cswt0mLw0WjRaVHgh1Px2r7ckWFe/ZGBCedQPHuZbdw=
Subject key identifier: 8D:00:DB:43:9B:CB:4D:1D:78:43:CD:17:82:1F:D6:05:34:06:1F:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8608
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A2AB996039011EFA57AE570017001B1.roa
Signing time: Fri 26 Apr 2024 05:47:07 +0000
ROA not before: Fri 26 Apr 2024 05:47:03 +0000
ROA not after: Wed 22 May 2024 05:47:03 +0000
asID: 138195
IP address blocks: 156.255.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34312 (0x8608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 05:47:03 2024 GMT
Not After : May 22 05:47:03 2024 GMT
Subject: CN=662b3fda-aa46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:8a:1e:0a:56:b8:c6:e5:a3:62:df:5e:eb:
a8:83:5d:3f:92:0d:f9:55:83:51:9b:cb:8a:99:05:
c7:47:f6:3d:11:c1:7f:a3:08:1d:cd:26:a8:c9:88:
08:45:96:1b:8c:35:6a:25:5e:43:5b:d6:ac:05:72:
63:85:8d:00:1e:4c:ff:23:fe:88:55:31:c3:42:d5:
61:3a:39:eb:11:e3:b2:88:88:1b:48:ad:6b:5c:08:
b0:be:f5:c6:64:d7:6a:33:a3:73:05:a4:29:10:ab:
55:b6:bc:62:d3:8c:68:ab:e5:61:6a:ae:cf:96:1b:
e5:bc:ea:79:ee:70:9a:9d:40:f3:67:2c:81:c3:88:
aa:c2:7a:72:52:e8:4d:e3:14:92:a9:da:4f:64:73:
55:42:65:af:c1:fe:f3:f8:41:3e:ce:51:6d:c5:1e:
7d:49:49:ce:e8:37:41:d9:28:c2:0a:14:d4:39:d0:
11:4b:3e:a4:f2:84:d8:cd:c6:29:f3:26:a4:a2:38:
19:19:39:7b:54:00:6d:ee:0d:f4:4d:65:ca:a4:c7:
ef:e7:d4:b5:e5:bb:b7:dd:4d:3b:b1:2b:80:f1:5a:
f0:98:97:74:29:5f:d0:a9:d4:f0:c6:23:dd:b3:c2:
a8:a9:25:b2:2b:b3:e8:fc:93:cd:57:78:c3:66:e7:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:00:DB:43:9B:CB:4D:1D:78:43:CD:17:82:1F:D6:05:34:06:1F:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A2AB996039011EFA57AE570017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9f:cb:2d:7b:fe:f8:71:6e:72:7c:59:d8:22:c4:4a:51:d9:76:
ca:65:e7:23:91:58:5e:06:8f:05:5f:7a:ca:00:95:4a:27:ad:
c4:ea:dc:ae:34:23:e1:62:02:b9:8d:32:0d:13:75:17:16:a8:
b0:d5:53:37:9b:4e:d3:42:62:53:a5:85:ac:b3:02:11:51:b7:
ac:32:38:21:bf:6b:3f:2d:78:68:5c:ef:40:85:8f:7a:fa:ce:
81:a3:bd:c2:0f:e5:07:cf:42:56:4b:b5:73:9f:4b:7d:d8:97:
a2:e4:5a:f6:58:7b:30:1b:39:d0:87:e5:9f:a0:67:69:99:e8:
10:1e:d3:46:2b:d3:81:f9:02:52:59:bb:d6:f1:2a:d3:78:25:
6c:99:df:b0:96:48:f0:3b:11:f0:29:3c:1a:8b:21:a2:22:96:
bb:4a:1e:f5:15:71:60:4a:f6:ea:08:71:c4:ab:1c:2c:6e:b0:
b3:10:5c:da:ca:73:95:72:e8:12:c2:a2:9e:f0:7b:a9:4a:07:
2f:c7:44:06:8d:e2:83:b7:6f:fb:af:bc:36:72:33:f7:4a:52:
4e:80:c4:0f:1a:20:94:d8:85:9a:40:48:88:1b:e3:a5:60:70:
6c:0f:6b:cf:cb:b1:4c:e6:f1:2b:f1:29:1a:4e:1e:5b:29:22:
a7:59:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:06 2024 by rpki-client on console-fra.rpki-client.org