Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7457A072544B11EE9882EF894AD9E6FC.roa
File: 7457A072544B11EE9882EF894AD9E6FC.roa (raw, json)
Hash identifier: ps1rayU8ZkVJfEUHeOv8sKg+y77nlpR8sZZEKswqSLs=
Subject key identifier: 0E:1B:8D:4D:B8:39:76:43:B1:F7:43:94:8C:CD:F9:BB:25:0E:1D:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3A67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7457A072544B11EE9882EF894AD9E6FC.roa
Signing time: Sat 16 Sep 2023 04:42:35 +0000
ROA not before: Sun 01 Oct 2023 04:42:31 +0000
ROA not after: Thu 08 Aug 2024 04:42:31 +0000
asID: 133199
IP address blocks: 156.245.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14951 (0x3a67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 04:42:31 2023 GMT
Not After : Aug 8 04:42:31 2024 GMT
Subject: CN=6505323b-ea74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:a6:85:40:50:f0:71:7d:97:20:64:14:a0:
b7:e7:84:ff:11:bc:75:27:38:15:c9:1d:fb:b1:83:
c6:7a:3e:05:c5:a0:7b:d1:d4:fc:bd:1d:9d:6a:f8:
99:dc:2b:7e:83:f6:54:f1:10:fb:23:9a:67:12:04:
f6:52:13:3a:7d:c9:4d:76:b1:3b:a2:10:02:a4:b2:
bd:86:dc:ca:00:d7:76:1d:4f:73:0b:9d:a6:d6:2d:
b3:6e:1e:d0:57:96:5c:25:7b:bc:93:98:89:41:ef:
71:c3:6a:1d:5d:16:f2:11:0f:73:ad:d4:7a:5c:9a:
1b:22:31:2c:02:85:14:d7:39:f7:f9:ce:d3:af:be:
41:77:a4:de:b0:e2:fa:67:9a:31:22:d5:e6:29:02:
af:12:c1:05:38:02:f5:4d:1c:df:a0:9c:51:e4:84:
6b:a9:0a:83:9a:b7:19:45:ac:bd:11:2d:0d:13:81:
e3:40:8b:bb:78:cc:f5:98:fb:37:63:78:b8:d4:d0:
5d:be:1b:e7:89:00:21:53:24:22:05:a8:f1:e4:d3:
93:e4:65:dd:ed:b9:1b:6b:bd:f9:19:dc:bd:7a:3b:
82:27:d8:6b:87:b6:4f:97:00:51:92:d8:d5:2f:8d:
3b:03:da:28:e3:e0:b2:6c:56:63:d7:91:42:0f:d6:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1B:8D:4D:B8:39:76:43:B1:F7:43:94:8C:CD:F9:BB:25:0E:1D:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7457A072544B11EE9882EF894AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:71:84:0a:00:ae:64:4c:10:c7:29:b1:e4:a9:cf:ec:66:75:
83:20:09:85:2a:64:13:94:9e:f6:08:a0:5f:27:39:39:e1:78:
b4:2a:97:5f:13:7a:2d:d1:92:0c:b2:81:b6:ea:8a:6b:9d:e7:
68:cf:d4:25:33:a3:4d:9b:8b:90:ec:7f:a5:7e:f1:68:82:68:
27:e6:bb:2c:fc:b3:f1:c2:35:9d:94:ae:7e:05:8f:88:52:98:
63:ce:50:86:fa:8d:af:f6:0d:f6:e6:23:1f:8c:c7:59:49:d0:
44:e3:45:26:d0:54:43:75:ee:bf:0a:ca:17:8f:c6:75:12:e4:
27:85:cd:4d:53:12:fc:d2:2e:13:3a:5b:b9:59:6d:fa:56:9a:
69:cc:9b:91:61:37:18:17:99:3a:d1:a1:83:03:81:b8:97:b2:
6a:5e:e0:d2:f2:0c:81:95:53:9e:28:99:8f:e9:bd:fd:35:93:
50:e4:82:37:4d:65:5c:7f:31:ef:03:d3:d9:49:2d:0f:16:35:
db:8b:6a:c2:9b:e7:bd:7c:5f:35:fd:dc:18:07:73:35:08:dc:
10:1e:cc:2f:f8:64:88:28:22:0a:e5:24:94:71:86:32:65:55:
76:ec:96:4c:04:04:b0:5c:f2:a5:38:06:6b:b6:69:0c:28:e4:
d0:5b:08:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:11 2024 by rpki-client on console-fra.rpki-client.org