Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E0BA5DE3B2C11EEA43D99454AD9E6FC.roa
File: 6E0BA5DE3B2C11EEA43D99454AD9E6FC.roa (raw, json)
Hash identifier: +nKzRR9hCDyqru/qdu5bV1Kk7vM7hk0M07LiuhLQJ2A=
Subject key identifier: 72:FD:12:EC:E7:67:CB:B9:3B:2E:E7:12:A5:E5:EA:24:BA:85:66:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E0BA5DE3B2C11EEA43D99454AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:27:31 +0000
ROA not before: Tue 15 Aug 2023 05:27:27 +0000
ROA not after: Mon 27 May 2024 05:27:27 +0000
asID: 140627
IP address blocks: 156.247.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13815 (0x35f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:27:27 2023 GMT
Not After : May 27 05:27:27 2024 GMT
Subject: CN=64db0cc2-a20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:e8:20:91:e0:6f:ab:bf:66:25:45:10:7e:
9b:85:1b:4d:95:6a:83:b5:c9:56:43:0f:9d:fc:64:
bc:64:bb:cf:56:11:f1:07:01:20:e9:12:d0:5e:1b:
38:b3:ab:31:9d:ee:6f:5d:ef:87:c5:04:26:ab:b8:
66:f3:fd:30:c5:01:ab:6f:1d:3a:3e:ab:ec:a0:47:
06:c6:76:f0:6f:05:43:1f:f5:0e:32:5e:fe:5e:36:
2d:2b:63:cd:d3:23:aa:ef:b4:0d:43:9a:e1:83:a4:
38:60:17:ee:b3:b7:65:f1:66:df:9c:a9:8c:2f:56:
91:02:a1:08:89:fa:27:c0:38:83:a7:a5:d7:c9:ae:
b0:62:10:dc:7f:ab:d5:74:f6:df:40:23:21:ed:13:
e5:5e:71:a8:1b:07:30:10:87:61:69:1f:62:c1:c9:
bd:f6:bf:1f:54:83:45:92:7f:d3:42:56:26:84:ef:
2d:82:81:14:bd:3b:5d:72:64:91:99:2d:df:35:96:
de:42:d6:fa:7d:67:06:03:77:a3:49:63:80:c0:90:
53:a2:1d:0b:c4:31:aa:44:94:c4:e5:70:89:54:25:
66:9a:dc:37:45:28:76:39:90:0b:3d:f9:21:68:43:
9f:85:bc:f2:04:f5:e4:5d:38:85:24:25:eb:b7:a0:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FD:12:EC:E7:67:CB:B9:3B:2E:E7:12:A5:E5:EA:24:BA:85:66:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E0BA5DE3B2C11EEA43D99454AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.154.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b4:99:2e:08:7e:9e:5c:53:48:92:f1:9d:36:d1:02:86:49:
0e:11:47:14:6c:84:c6:96:73:ca:4e:78:39:0e:5e:e4:26:ca:
81:a2:dd:ee:53:76:85:9b:b6:35:c9:ef:f4:52:9b:1b:23:37:
54:5c:57:63:01:a8:ae:a3:5c:4b:32:44:97:01:ed:7a:2f:b3:
a9:ce:e1:4b:8d:f4:1c:64:42:db:b8:18:99:f2:e1:cc:18:cf:
be:9a:10:7f:28:c2:0f:b1:93:0f:a8:29:5a:9e:a9:d9:1a:60:
ce:56:4c:00:ad:43:95:48:77:2d:86:3b:8e:65:4c:7c:a7:bb:
c4:d1:f2:16:cb:a3:d8:e3:75:cf:7d:70:76:14:74:a5:8c:43:
07:73:dc:87:b0:d1:cc:ac:2a:52:d1:28:68:da:77:46:bc:71:
e4:fa:9b:c1:b7:ce:dd:02:d2:a0:6c:3c:d8:93:10:a0:14:70:
c9:0d:69:17:2d:04:18:c4:c4:ab:53:e7:40:53:2d:81:1f:db:
ad:a4:11:b4:ad:f9:42:ce:77:e4:88:54:91:ea:80:07:b9:8f:
bb:58:f0:38:2f:25:6e:5d:94:ce:44:c6:c6:0b:e1:0b:7f:c8:
2e:09:43:6b:c1:48:85:34:2b:03:70:e8:94:c5:05:b5:44:fb:
10:9e:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:11 2024 by rpki-client on console-fra.rpki-client.org