Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99E1352284F911EE929EB55C4AD9E6FC.roa
File: 99E1352284F911EE929EB55C4AD9E6FC.roa (raw, json)
Hash identifier: cOr+EmsE2PjPkZUxUHikev5ymvjfl5aj8dqE9lTqJ60=
Subject key identifier: AA:F2:3D:03:DC:0B:E0:32:F7:77:C2:28:63:A0:04:72:B6:89:F1:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4977
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99E1352284F911EE929EB55C4AD9E6FC.roa
Signing time: Fri 17 Nov 2023 03:30:06 +0000
ROA not before: Fri 17 Nov 2023 03:30:03 +0000
ROA not after: Tue 12 Nov 2024 03:30:03 +0000
asID: 64267
IP address blocks: 156.227.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18807 (0x4977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 03:30:03 2023 GMT
Not After : Nov 12 03:30:03 2024 GMT
Subject: CN=6556de3e-5807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:93:50:60:8b:0e:5a:16:9a:bb:29:34:45:
67:5e:9d:6c:8d:3a:7f:92:78:64:24:ba:b8:37:1e:
86:1f:dc:89:4f:01:03:7f:3a:46:42:4a:c8:a0:e4:
ba:0e:e1:d2:b7:12:a4:53:ab:14:73:b5:c5:1a:50:
94:2b:35:52:f1:7f:db:84:52:e9:69:58:a9:a3:3d:
fb:7e:43:9f:ae:da:56:8a:22:1a:6c:7a:5a:29:d4:
58:c3:f1:7e:94:b9:e4:68:0e:6a:76:77:8c:8a:5d:
74:5c:55:c9:4a:7f:10:cb:19:21:9e:a1:a9:e4:1c:
15:22:75:85:06:84:84:e4:e8:d4:bb:f3:2d:47:f9:
17:d5:42:e1:e5:38:08:dc:ca:f6:ea:58:77:dd:59:
c0:43:45:42:08:8e:66:6b:3f:53:71:ec:8f:20:1d:
38:1e:69:15:7a:d6:8a:dd:06:e5:09:50:99:be:5f:
26:77:e9:a1:52:01:ea:8a:43:bf:67:4a:81:a9:8f:
e3:a9:30:1a:1d:48:61:2b:4d:ce:0d:76:a9:49:2a:
4e:8a:f6:57:55:ca:92:6e:1e:36:48:99:e1:8b:15:
51:e1:de:0f:c2:79:23:b9:24:16:c0:8c:51:fa:89:
c9:58:49:52:a1:a9:ee:fd:c1:cf:b5:c6:f3:e4:1b:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F2:3D:03:DC:0B:E0:32:F7:77:C2:28:63:A0:04:72:B6:89:F1:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99E1352284F911EE929EB55C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.12.0/24
Signature Algorithm: sha256WithRSAEncryption
94:dd:ca:21:7f:41:03:6a:49:0e:07:2f:dd:5c:84:f5:99:d3:
da:02:6d:ec:4e:85:8e:95:a9:17:48:51:38:cf:94:f1:3b:54:
74:e5:c7:46:4d:bf:ae:03:6e:aa:32:6d:96:4e:69:b1:ae:fd:
5d:53:80:e8:20:b9:61:a0:cf:4b:95:77:5c:8f:26:01:aa:e7:
9e:03:84:ae:fc:79:9e:07:7a:04:58:e2:67:0e:a3:ac:28:3e:
d7:f6:f1:64:9d:ea:15:5b:48:75:8f:6a:55:f6:a6:02:24:e3:
41:70:1f:1e:8a:f5:44:1f:1c:43:40:6a:7a:33:1a:44:29:75:
3c:11:e5:01:71:f4:da:85:bc:5e:83:ff:b7:4d:ef:44:33:65:
7c:24:68:0d:75:67:88:62:fb:2c:0d:a0:11:9e:25:c5:da:e7:
7f:8d:69:4a:52:22:c8:9a:a1:fe:a2:f2:b5:b6:99:cc:07:14:
55:0e:2f:f0:dd:67:a1:5d:bd:d5:7e:c8:85:89:e8:dc:e9:20:
30:e1:09:f7:f5:3a:be:36:35:6e:a6:a8:55:31:37:6f:b8:1d:
04:d1:6b:6a:7f:93:5a:d1:29:ee:64:1f:e2:da:52:aa:45:a0:
cb:47:9d:7d:8f:0f:89:dd:fd:3b:52:31:76:d1:ce:78:f3:bb:
11:2f:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org