Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A58500C809B811EEAA3B857B4AD9E6FC.roa
File: A58500C809B811EEAA3B857B4AD9E6FC.roa (raw, json)
Hash identifier: fIi/HuVfue0+X4cH32BRGAQAiGRj5UR6uMY5smT7WAI=
Subject key identifier: 7A:38:04:06:85:3F:A4:7C:7A:0E:AD:F2:31:4B:B4:47:84:D4:B0:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2C0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A58500C809B811EEAA3B857B4AD9E6FC.roa
Signing time: Tue 13 Jun 2023 07:05:15 +0000
ROA not before: Tue 13 Jun 2023 07:05:12 +0000
ROA not after: Sat 15 Jun 2024 07:05:12 +0000
asID: 138995
IP address blocks: 156.227.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11276 (0x2c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 07:05:12 2023 GMT
Not After : Jun 15 07:05:12 2024 GMT
Subject: CN=6488152b-f813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:23:27:4e:95:d2:69:ac:09:91:ae:af:60:
23:8e:43:d1:5c:e7:bd:ec:8b:6b:39:21:62:5c:e3:
08:ca:2f:f0:bc:73:bd:fe:b9:11:0b:78:af:a6:b7:
1b:e9:b9:e6:57:5b:89:c3:4c:4f:0d:ca:5a:ed:0d:
1e:98:80:ad:e3:61:2c:27:82:af:3b:23:88:13:7c:
b9:b2:07:5f:30:32:08:a6:96:00:db:58:a5:8e:b0:
61:78:57:f0:37:06:4a:84:f0:75:3c:c2:f3:7c:cd:
6d:07:3a:8b:0f:0a:33:5b:ab:f9:cd:c0:4a:84:d1:
70:43:ae:96:18:a0:da:be:3e:25:57:19:c6:d2:03:
1c:55:eb:3c:e3:0c:56:27:aa:6c:7e:6e:af:e2:13:
0a:ae:d3:f0:53:16:4e:01:d4:9d:2e:27:9c:3a:dc:
74:08:19:5f:9d:62:10:36:10:a1:ab:97:c0:83:ed:
fd:9b:34:6e:7c:21:9b:d8:a9:8a:4d:cc:39:5f:c0:
a2:1e:c8:bd:f3:b6:96:80:f6:bc:87:17:f9:c2:25:
f9:8f:dd:52:cd:31:ff:bc:a4:43:fb:93:96:73:db:
50:58:5f:c5:0d:85:b7:73:b0:d5:ae:91:96:92:e9:
24:93:30:52:b8:c8:38:0f:db:b4:65:83:54:f1:8a:
0e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:38:04:06:85:3F:A4:7C:7A:0E:AD:F2:31:4B:B4:47:84:D4:B0:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A58500C809B811EEAA3B857B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.31.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d2:e9:e3:4c:26:9b:fa:bc:27:64:91:fc:4c:1b:52:93:d0:
bf:8d:f7:2b:e3:2d:f1:b0:88:f1:25:c0:50:ea:c4:87:a4:5f:
1d:0f:ab:5f:72:96:a2:bb:b7:af:a3:55:c7:15:7f:0a:f0:0c:
c1:da:ce:df:f2:0b:b5:ad:47:d1:22:2e:d7:67:f4:1d:b3:8f:
cb:00:e2:aa:bb:47:e2:82:a8:02:de:35:83:e2:41:e2:17:4e:
7e:2c:b7:a9:82:b2:04:f6:ae:00:28:3f:b9:7f:46:41:1a:b9:
31:fc:d4:0d:4a:ea:81:bf:bb:fd:0e:e8:a8:ca:af:b8:4b:39:
3e:7e:11:e4:af:9d:08:22:85:3e:1a:f7:c6:26:55:aa:6b:01:
cb:55:f9:87:df:ca:1e:92:11:c8:7f:8c:01:84:d9:63:d8:66:
78:b1:ef:af:d9:09:90:5a:ac:66:a8:35:46:a8:e7:95:a5:a2:
c9:ed:f5:da:08:a6:ce:3b:83:98:2a:48:d5:a2:d8:07:2e:69:
5d:95:b8:fc:e2:16:3d:a8:52:78:eb:3b:14:ab:84:5b:24:ed:
13:dd:a6:df:2c:98:df:03:a9:bb:19:4a:52:0b:ff:24:e9:f4:
b7:d8:2c:e4:5c:51:49:62:f6:93:3d:fd:55:6b:10:f8:dd:55:
a3:c2:ca:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:21 2024 by rpki-client on console-fra.rpki-client.org