Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/965F17A0278111EEAA15901C4AD9E6FC.roa
File: 965F17A0278111EEAA15901C4AD9E6FC.roa (raw, json)
Hash identifier: yow2/d4PHE9rNdyn0UsTaik6dZHZVR2h1YQtlK+ExlI=
Subject key identifier: 5A:3A:E4:AD:A1:54:24:D0:44:00:38:87:25:2C:C9:A5:A7:69:C6:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 31CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/965F17A0278111EEAA15901C4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:46:42 +0000
ROA not before: Fri 21 Jul 2023 04:46:38 +0000
ROA not after: Thu 13 Jun 2024 04:46:38 +0000
asID: 22773
IP address blocks: 156.233.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12747 (0x31cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 04:46:38 2023 GMT
Not After : Jun 13 04:46:38 2024 GMT
Subject: CN=64ba0db2-1314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e1:bb:24:aa:9e:ba:3a:fa:8b:dc:be:54:d8:
66:e5:cf:6e:5e:9f:ce:fb:c2:90:6c:79:03:da:2c:
0b:be:50:52:9d:36:e6:62:d6:76:ef:a4:16:f1:b0:
e8:87:17:ce:fc:f9:c2:0e:61:29:fc:71:a0:39:58:
8b:57:a6:d4:06:cc:4e:bb:92:69:a3:66:1d:f4:b7:
6b:8c:63:9e:20:a1:27:ee:97:b4:94:3c:8b:8a:1f:
db:bc:79:3b:49:87:df:f6:b9:41:1d:87:77:9b:6f:
f1:17:f1:ce:6c:a9:1a:b1:3c:fd:7c:07:80:13:d4:
14:66:14:03:23:3b:5c:07:9a:a2:c2:99:6c:64:c2:
7d:e1:05:e1:ac:80:73:b4:b8:de:5b:bf:82:49:b4:
92:b7:1f:8e:3f:12:37:a7:76:c3:bf:aa:3d:4d:64:
6b:48:12:e9:7e:33:80:04:cf:43:8d:f5:a5:ce:db:
34:ac:2f:bc:65:72:3f:16:a6:57:13:65:98:ce:e1:
fd:e8:8d:9c:46:17:65:6e:95:61:f6:15:32:fd:7a:
d5:d3:42:3e:7d:4e:26:82:cc:4e:65:aa:d2:39:0b:
9e:f3:63:51:d1:b2:9b:88:2c:39:83:49:87:7b:cd:
c0:48:bc:8b:cb:07:9b:ed:34:98:7e:95:19:3d:7a:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:E4:AD:A1:54:24:D0:44:00:38:87:25:2C:C9:A5:A7:69:C6:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/965F17A0278111EEAA15901C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.16.0/22
Signature Algorithm: sha256WithRSAEncryption
85:bc:d1:c6:b7:55:37:72:7d:1a:2b:65:ec:17:81:75:bb:9a:
2e:ce:4c:cd:d6:66:d4:fa:df:a0:a7:66:7e:49:7d:77:88:e2:
4d:4c:32:ed:e3:bb:0c:fb:a7:bf:71:86:9b:4c:f4:e1:ba:0d:
98:1b:62:fe:2a:b9:6e:ef:d3:9c:d7:06:8b:a4:b1:1a:ef:f6:
ea:60:ec:55:b6:5a:be:d6:fe:c8:1a:9b:21:e4:2d:aa:f4:27:
74:80:04:fe:35:d5:ab:f9:0d:57:f4:78:4f:5f:54:a5:a5:e6:
2e:9c:d5:d5:47:5c:f1:00:95:06:09:0f:19:73:1d:e5:d9:a9:
8b:9a:c3:36:95:64:fe:d8:24:17:1b:9d:c3:76:4a:f6:bc:3f:
7a:8c:0f:7e:d1:19:46:fe:87:b1:d6:2f:2c:2c:e0:73:d1:a2:
65:2f:05:d6:89:a2:e9:f6:3c:14:4d:85:fd:f4:79:ca:53:55:
52:c5:0e:e9:a9:8a:cd:0f:04:9e:28:31:d1:5a:4f:76:f7:38:
c7:50:a8:86:3f:03:bb:22:2d:c3:59:20:ee:64:cf:be:82:bf:
c0:9c:dd:0a:a8:58:c0:2b:d9:d3:95:e1:22:7a:db:8d:61:55:
11:c7:76:a0:55:38:1a:5c:cd:f5:43:f7:44:27:f9:3e:35:9d:
89:4c:ff:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:52 2024 by rpki-client on console-fra.rpki-client.org