Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/802CF0628BA611EFB3D695B5762E951A.roa
File: 802CF0628BA611EFB3D695B5762E951A.roa (raw, json)
Hash identifier: LUSyYC3VbNk3EejWFAS+N0H8uQ4CIbQrASQX9Qdo6zU=
Subject key identifier: 35:B7:9B:1E:2C:C7:97:98:A3:8A:80:B2:A5:F5:D2:27:39:61:F7:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C586
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/802CF0628BA611EFB3D695B5762E951A.roa
Signing time: Wed 16 Oct 2024 10:07:50 +0000
ROA not before: Wed 16 Oct 2024 10:07:47 +0000
ROA not after: Fri 25 Oct 2024 10:07:47 +0000
asID: 147302
IP address blocks: 156.238.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Oct 2024 10:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50566 (0xc586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 10:07:47 2024 GMT
Not After : Oct 25 10:07:47 2024 GMT
Subject: CN=670f9076-1f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:a2:32:fe:55:a5:e0:10:56:d2:12:cc:92:
06:e0:8e:f7:e8:79:9e:61:bb:de:2c:56:5b:c7:d4:
99:00:7f:1e:86:04:af:f4:94:ba:43:12:3f:70:ad:
00:a6:1e:db:21:39:ed:75:ce:17:6e:d7:03:1d:8c:
48:1d:5a:9d:4f:04:cd:23:ee:3b:56:2c:58:dc:3e:
63:44:6c:a8:d8:bf:d6:29:55:63:3c:ea:94:cc:52:
0f:f5:f5:14:64:28:0e:6b:f1:4a:10:cc:49:0e:a5:
71:0b:70:4b:f4:3a:35:f1:18:a8:d5:3d:e5:2d:18:
0f:5d:c8:63:c4:2b:7a:09:8d:50:7e:15:41:2e:16:
16:87:27:9d:14:ec:47:ed:32:3f:77:09:30:f6:c4:
78:c7:8c:64:f1:a9:39:7b:dd:4e:ef:b1:c4:9d:86:
38:69:31:8f:d8:9f:6d:79:2b:81:ff:4b:d9:72:16:
b4:34:f5:8e:18:2a:e8:3a:a2:52:28:17:ab:02:54:
30:3f:e9:19:2f:3a:ce:89:20:ec:33:14:04:42:e0:
65:27:46:aa:2e:a7:7c:1b:8a:38:1c:4a:f9:88:31:
1a:b6:56:8a:7d:64:d4:45:47:9f:a6:f2:be:63:82:
75:8e:3d:25:fc:2a:4e:a4:50:95:36:72:63:b7:12:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B7:9B:1E:2C:C7:97:98:A3:8A:80:B2:A5:F5:D2:27:39:61:F7:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/802CF0628BA611EFB3D695B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.70.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:fb:cd:19:6c:f2:f0:4f:bb:88:72:e9:ce:a2:50:56:19:e6:
53:b1:8b:be:aa:5d:9d:b4:ef:65:94:7c:45:1d:a3:75:fa:d7:
65:96:7a:33:5c:c6:32:80:04:f9:6e:29:24:ea:1f:1a:9c:28:
d5:6c:e7:ec:af:3f:a2:13:a8:38:94:e1:d6:58:96:d5:bd:a1:
29:b7:5f:4f:18:e1:5d:49:48:10:d2:fe:b2:dd:a1:ea:42:de:
dc:4f:21:c4:1b:89:db:8b:5e:76:11:58:82:94:f6:36:b8:19:
9f:3c:37:3f:ed:a4:cc:f8:d3:33:9f:1b:da:0d:6d:db:2f:44:
d5:85:36:c2:1f:e9:26:bf:bf:fc:b0:65:3a:3e:db:16:a1:0e:
7c:ea:7d:2c:30:b8:ac:aa:c2:bc:60:02:31:95:b4:3f:37:36:
64:15:93:b5:5e:a9:91:65:1b:2f:97:88:de:18:f0:5e:bb:1e:
0b:e4:e1:29:ef:4b:3a:8d:d9:0d:f0:18:99:ca:44:e4:4a:da:
dd:65:a1:75:22:2b:70:b0:82:55:1d:60:e5:16:82:28:13:49:
d0:5c:f2:3f:74:7e:4b:25:3c:a3:39:29:fa:98:b6:6a:27:f0:
68:5c:bf:f7:53:01:f8:05:96:c7:d4:36:0b:27:23:40:24:c1:
9c:6a:5b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 11:45:48 2024 by rpki-client on console-fra.rpki-client.org