Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EABAF28544911EEB5BAE2834AD9E6FC.roa
File: 9EABAF28544911EEB5BAE2834AD9E6FC.roa (raw, json)
Hash identifier: AG0G7NqhnetC0tJYiZU5O36Aud5jpeN52IywzRKZ2y0=
Subject key identifier: 0A:BF:CD:7F:DF:C9:11:CA:DD:3D:0F:79:43:C7:B3:88:0F:D0:30:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3A4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EABAF28544911EEB5BAE2834AD9E6FC.roa
Signing time: Sat 16 Sep 2023 04:29:27 +0000
ROA not before: Sun 01 Oct 2023 04:29:23 +0000
ROA not after: Thu 08 Aug 2024 04:29:23 +0000
asID: 133199
IP address blocks: 156.245.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14923 (0x3a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 04:29:23 2023 GMT
Not After : Aug 8 04:29:23 2024 GMT
Subject: CN=65052f27-1815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:16:6a:dc:6c:23:d9:3e:44:12:0a:0f:e8:
75:60:50:ca:2e:c1:5e:09:c1:ca:82:1f:72:67:21:
63:7f:24:95:75:c7:09:85:27:e7:52:5b:5c:fe:e1:
d1:1b:7a:a2:e0:c8:dd:60:c9:28:1b:74:0a:7b:42:
ff:c7:7b:44:ba:a5:09:49:81:dd:3f:25:f1:fc:05:
ea:8a:79:0c:7a:fe:7f:4b:9d:e4:a0:45:d9:da:85:
81:08:04:dc:72:40:46:09:04:42:52:44:29:02:97:
03:3f:4a:bd:6f:2f:c3:a5:32:b4:15:2c:ef:e9:f6:
23:77:94:c1:15:bf:5f:9c:d9:db:e1:69:a3:49:aa:
bd:bb:35:05:42:ae:09:0c:25:d7:c3:02:86:97:42:
50:4b:c0:00:3a:5b:eb:34:da:71:2e:cb:b3:e3:66:
73:7e:04:6d:38:f5:bb:25:8f:0b:30:5c:67:c7:8b:
bc:12:ec:15:cc:48:cc:c2:84:62:c9:6b:c6:1c:06:
e7:74:54:af:30:4b:41:6e:a2:f7:3c:a8:3f:a3:a6:
51:29:f8:37:5c:d3:bf:64:72:9f:d8:91:71:40:d3:
53:c3:b3:85:33:89:07:2c:d9:ee:db:e0:e7:dc:8f:
2b:cf:c2:38:5c:0e:d3:c0:18:92:e4:d1:68:2b:1b:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BF:CD:7F:DF:C9:11:CA:DD:3D:0F:79:43:C7:B3:88:0F:D0:30:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EABAF28544911EEB5BAE2834AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.12.0/24
Signature Algorithm: sha256WithRSAEncryption
45:50:5b:79:09:8c:80:28:17:d2:08:71:bb:99:03:3f:8b:25:
04:bf:db:b7:2c:79:01:3e:5f:1d:35:5c:85:21:65:dd:6d:a6:
6c:08:88:ab:67:b4:dd:83:5c:16:38:5f:24:c9:6b:d6:e9:cc:
e3:56:45:c5:5e:4f:03:cf:72:24:0c:6e:74:85:97:16:93:17:
52:b7:ff:1f:a1:31:40:5f:bb:fe:88:c4:ff:da:ab:66:9e:e0:
23:c7:1f:8b:3a:17:93:c3:8e:19:06:80:22:2b:b1:88:13:83:
f5:56:46:b3:2f:c9:45:16:5f:8c:04:65:88:e7:6c:f2:79:5a:
09:47:3d:54:ed:6e:ae:4c:4b:ec:fd:f7:ce:1f:47:04:ac:ac:
e7:a4:0d:6b:35:17:3c:d9:a2:45:0b:d7:e0:47:f1:51:f0:09:
3a:ce:b1:4c:60:6a:2b:48:51:30:37:0d:d5:e1:98:b7:2b:9b:
3e:7d:4c:83:94:ea:f9:50:90:15:c6:4d:b5:fc:25:9a:2a:be:
15:e9:68:71:06:3b:f1:f2:e0:72:a0:e4:b9:22:27:d4:25:2c:
66:0f:b6:70:0d:a4:a4:af:80:bf:95:5f:77:e0:11:0b:f9:88:
36:90:e7:3d:3e:55:90:34:4f:24:80:cb:c5:0d:20:26:9c:f7:
80:4c:b5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:13 2024 by rpki-client on console-fra.rpki-client.org