Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85712424A2E711EE8761B56BD25BE465.roa
File: 85712424A2E711EE8761B56BD25BE465.roa (raw, json)
Hash identifier: CYWMvk2TP9s3f81ZLxHSArNa92eV7V85EvCxKcnwt8k=
Subject key identifier: DF:57:1D:D2:D8:6A:B4:12:EE:48:CD:72:F0:A1:2F:5D:D1:D7:69:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 590A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85712424A2E711EE8761B56BD25BE465.roa
Signing time: Mon 25 Dec 2023 05:36:15 +0000
ROA not before: Mon 25 Dec 2023 05:36:12 +0000
ROA not after: Mon 13 Jan 2025 05:36:12 +0000
asID: 18004
IP address blocks: 156.225.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22794 (0x590a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 25 05:36:12 2023 GMT
Not After : Jan 13 05:36:12 2025 GMT
Subject: CN=658914cf-7765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:b7:48:97:05:9c:25:a7:04:8d:d9:5e:76:
06:bc:26:6e:64:f0:fa:84:e0:1f:85:94:86:1a:00:
ed:69:24:c1:7d:f7:4c:b5:b3:30:87:66:e1:ff:a1:
c4:76:1f:0e:af:93:7f:6c:b0:13:ce:26:09:fd:b1:
80:88:6e:01:47:52:db:04:01:2b:05:96:be:c7:23:
02:ed:ba:a8:a1:64:de:6d:1d:6e:7a:db:f1:5f:44:
f8:9c:fc:00:61:f2:62:2c:92:0f:b3:2b:02:44:ce:
7c:52:80:59:d6:e1:1c:8e:07:7b:b0:42:88:89:b1:
f0:86:ac:12:1d:6f:e0:60:fe:a2:e5:56:07:06:19:
c3:77:82:ad:67:a7:ca:c9:45:1e:8f:8e:96:cd:3b:
43:52:e9:b4:db:a4:d1:51:db:e5:a0:9d:15:ad:91:
81:b9:58:c5:bf:8c:b0:51:be:76:e0:51:f0:af:f5:
77:fa:0e:02:d9:64:eb:7d:01:70:56:d9:70:0b:32:
f6:af:47:35:6f:9d:33:03:e2:ae:db:a1:8c:9a:80:
c5:a5:a3:bd:95:45:92:0f:74:c2:86:04:6b:21:b5:
f8:41:3e:f1:06:b4:12:c1:66:c6:4a:81:02:e3:34:
06:2e:76:02:48:08:8f:4c:9c:ea:aa:8d:9e:db:fc:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:57:1D:D2:D8:6A:B4:12:EE:48:CD:72:F0:A1:2F:5D:D1:D7:69:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85712424A2E711EE8761B56BD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.100.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f5:02:89:bc:a6:b9:7b:6f:93:22:18:19:53:ea:c2:f9:f8:
9f:ad:30:7c:f2:d7:b0:b5:f3:e6:7f:34:a8:3f:76:79:50:5d:
f2:6a:e9:c9:6a:af:82:0c:a0:de:17:74:4b:9b:e2:6d:73:58:
2b:46:12:64:7a:e7:9f:85:91:e6:f3:a7:52:db:a4:f5:c0:bb:
0f:c8:b8:5d:db:39:a6:69:ce:62:55:c8:88:54:2d:fd:d2:ec:
14:92:8b:58:c3:94:bb:de:56:f8:e2:0a:28:d4:8a:a3:03:f3:
09:87:25:a0:4b:6e:cb:7b:22:90:8e:77:4b:f2:ae:6e:47:4c:
5c:6b:e1:5b:1b:12:4c:f8:18:54:80:cd:cd:fc:96:b1:e6:9e:
18:bb:42:b1:70:29:cf:95:2a:70:c5:49:3b:2f:1b:e6:22:02:
b4:df:78:86:6b:58:14:ff:ec:9f:b3:ab:8b:25:7e:60:df:51:
9f:a1:a4:4f:66:3c:e9:65:0c:f5:7e:f5:76:83:eb:c6:ee:0a:
ff:f1:49:cb:01:7b:39:dc:ba:5c:11:d5:62:94:df:34:9b:4e:
0b:50:39:ed:83:65:07:93:e2:af:c4:e7:da:98:13:f9:74:df:
64:ce:17:73:95:fa:97:68:de:74:6c:49:1a:b7:c7:3e:d9:d4:
bc:b6:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:55 2024 by rpki-client on console-ams.rpki-client.org