Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/909C725C577B11EEA7C8DC314AD9E6FC.roa
File: 909C725C577B11EEA7C8DC314AD9E6FC.roa (raw, json)
Hash identifier: RWgZN6KhpPq5KGhdEz4E6J4IYQ0+NNtDaWdYMUAvG7k=
Subject key identifier: C6:1C:A1:E5:DB:51:10:29:79:DB:E2:73:6A:DA:3A:22:7F:0D:6E:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3AAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/909C725C577B11EEA7C8DC314AD9E6FC.roa
Signing time: Wed 20 Sep 2023 06:04:31 +0000
ROA not before: Wed 20 Sep 2023 06:04:28 +0000
ROA not after: Fri 13 Sep 2024 06:04:28 +0000
asID: 24875
IP address blocks: 156.225.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15023 (0x3aaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 20 06:04:28 2023 GMT
Not After : Sep 13 06:04:28 2024 GMT
Subject: CN=650a8b6f-2ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:df:07:fa:f3:86:67:31:36:ad:9e:40:30:
11:c6:3a:92:c2:43:69:62:3f:0d:13:e9:ee:4a:a2:
05:c0:5c:94:7a:81:18:5a:b2:dd:f4:e5:61:99:a3:
46:b6:62:fa:81:ff:65:ac:00:f8:c8:3e:a9:4b:4b:
83:03:ad:73:79:cb:74:7f:66:3b:0e:09:54:52:73:
e4:08:5c:68:5a:d4:70:fd:6e:c7:bf:22:a2:93:f5:
33:1a:cb:82:90:b6:58:41:ab:ac:b7:5b:b7:6f:56:
b7:41:1e:f1:b7:eb:03:53:6b:61:9b:19:bb:57:5e:
07:bd:5b:33:39:3a:52:82:71:89:1a:75:26:d2:76:
5b:87:e0:dd:64:9a:0b:67:f6:0e:3e:7c:19:a7:7e:
eb:a1:4f:9b:72:df:55:12:c5:bf:11:6a:04:76:92:
bb:8b:2e:87:b1:36:6b:4a:59:94:23:81:60:50:a6:
0d:78:6e:de:c4:cc:06:75:c3:38:cd:88:f9:ac:a3:
02:ce:4b:9e:4e:65:e2:75:b0:9c:da:20:4b:22:72:
45:c2:54:63:5f:aa:9c:c1:8b:a6:9d:ae:bd:02:76:
ff:fd:0b:a8:73:ad:18:13:85:43:33:d2:f8:66:f3:
a6:39:7f:21:8b:77:09:4a:f9:7e:d5:6f:ee:81:1e:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1C:A1:E5:DB:51:10:29:79:DB:E2:73:6A:DA:3A:22:7F:0D:6E:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/909C725C577B11EEA7C8DC314AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.67.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a7:e3:1f:3f:f2:e8:8a:dc:da:d3:30:b8:96:44:12:42:be:
cb:50:9b:4f:7b:86:88:10:db:f0:70:74:95:57:c4:ad:1c:04:
00:55:63:a1:fc:be:99:c3:ea:2a:9b:95:a0:93:0c:5a:d3:53:
63:f3:37:5d:a4:d8:fa:e8:ed:ed:5d:5a:99:13:1c:19:6a:80:
35:bb:a0:c7:95:3d:14:ca:bc:e5:4c:37:c3:b4:98:cf:33:7e:
3a:7c:de:1a:35:da:05:79:4b:9c:60:88:8e:e9:0e:59:94:ec:
4a:90:bf:08:a0:c5:5e:61:d6:79:8e:e3:87:b0:f2:0a:af:53:
79:e9:84:b5:87:48:db:68:bd:62:7b:15:06:52:27:f5:e2:df:
36:18:f3:80:63:ad:81:4c:3d:1b:22:5d:b7:ee:e1:47:ad:f5:
2a:8e:ef:40:39:2a:c0:de:da:d9:6b:f6:4c:59:06:11:10:8c:
e9:68:0b:f1:b3:0f:1c:fa:94:1e:83:81:28:9a:36:8d:f4:d6:
94:8a:fc:01:e3:5f:f1:84:01:43:52:57:14:7e:73:fd:da:88:
6a:ac:0b:fa:3a:27:3a:a3:2e:f6:33:08:1a:cf:86:a3:b3:0d:
e5:27:d4:b3:21:15:e8:50:a2:f1:6b:a0:54:3e:af:da:7d:73:
62:81:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:00:49 2024 by rpki-client on console-ams.rpki-client.org