Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/769820B6007E11EF82FF7068017001B1.roa
File: 769820B6007E11EF82FF7068017001B1.roa (raw, json)
Hash identifier: HSPYjplKssadmhd93ocLiPuQlP7LkY2xHBiCJuRrxPI=
Subject key identifier: 92:C2:DB:4C:AC:D5:40:37:48:A5:2E:95:1A:22:F4:F9:EE:A5:7A:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 83BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/769820B6007E11EF82FF7068017001B1.roa
Signing time: Mon 22 Apr 2024 08:01:03 +0000
ROA not before: Mon 22 Apr 2024 08:00:59 +0000
ROA not after: Mon 20 May 2024 08:00:59 +0000
asID: 140869
IP address blocks: 156.225.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33723 (0x83bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:00:59 2024 GMT
Not After : May 20 08:00:59 2024 GMT
Subject: CN=6626193f-2c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:eb:30:21:69:b1:89:cc:09:07:d2:84:8e:18:
dd:c4:69:e6:c8:d8:82:e3:e3:43:de:65:ab:4d:ed:
2d:7d:70:aa:3d:45:f9:ef:ed:69:45:f5:83:40:e3:
9e:cf:b6:90:ea:f2:d9:3d:2c:ba:4b:3b:08:3a:52:
e2:49:61:f6:59:95:e0:7b:4f:c6:d6:10:6d:b1:88:
6e:29:e6:ba:d0:54:cb:6e:06:63:64:b5:fd:da:c4:
87:42:3d:50:2f:da:49:20:ca:be:c5:f4:2a:9c:98:
bd:f4:1c:3d:e9:88:63:bc:62:f8:a5:8c:58:1c:00:
4b:62:d2:5d:5b:db:5e:da:03:97:dd:f9:06:b0:a7:
62:ef:5b:96:20:14:77:52:9c:ee:c4:97:5a:3e:f6:
be:98:f8:cc:0d:ba:93:7f:22:32:4d:0c:1a:bb:d3:
99:20:4f:71:1a:b6:cb:b6:ee:0b:33:42:be:4a:9a:
6c:ad:98:d7:42:e4:66:66:76:2b:b4:fb:62:95:68:
df:5b:94:c0:53:f7:58:19:3d:b8:12:72:82:25:be:
ad:03:30:7d:c4:d3:67:0d:5c:49:7d:16:bd:1a:70:
31:46:b3:cf:cb:83:8c:3e:8f:ee:1a:57:92:3c:2f:
73:fa:6c:18:b1:9f:a2:e4:ff:4a:9f:43:d0:d7:3a:
ea:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C2:DB:4C:AC:D5:40:37:48:A5:2E:95:1A:22:F4:F9:EE:A5:7A:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/769820B6007E11EF82FF7068017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.89.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ba:5a:b4:dd:1a:16:74:43:ea:8a:23:fc:2c:c9:b8:40:a1:
82:52:86:28:9c:77:1f:f2:bd:37:ae:b6:3f:fc:7c:6a:99:9f:
f3:23:94:81:5f:8e:e1:99:9b:2f:f2:93:fd:d6:5d:49:99:00:
74:31:d4:19:96:b8:99:6e:12:c5:41:d2:59:08:59:89:88:cd:
5b:e9:1c:5c:ea:be:dc:9d:82:a6:dd:49:df:f9:f4:0f:27:b1:
06:c7:59:ea:4f:7c:5f:c2:be:a7:d5:5f:ec:9b:cf:d8:7f:91:
06:d9:ff:5a:0b:2e:31:8b:7d:0c:00:eb:c0:77:24:be:df:43:
6c:01:90:53:20:c0:32:56:0c:71:b5:20:10:db:35:ac:9c:a1:
91:01:3f:71:02:c0:9b:7b:64:5f:1a:42:0a:6e:ac:c7:fc:ae:
39:2c:f5:94:37:ff:18:fe:fb:d0:7c:1b:19:29:84:79:87:f0:
93:ec:af:65:6b:5c:ee:8a:26:be:22:13:9d:02:a3:08:cd:4c:
ad:1f:ed:de:f5:9c:18:7e:5a:42:92:5e:97:7c:ea:69:37:b3:
69:2b:95:e5:bd:bd:85:2a:a6:4b:20:db:ba:63:1e:31:78:42:
5f:8a:3b:e8:61:b7:40:b2:8b:43:b4:4c:03:1c:fa:ad:bf:1a:
0b:35:5c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:54 2024 by rpki-client on console-ams.rpki-client.org