Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7EA7FEA27DF11EF9BB12DEF7CDC24C2.roa
File: B7EA7FEA27DF11EF9BB12DEF7CDC24C2.roa (raw, json)
Hash identifier: hosjzFqCkPFqMyPafJ5XLvDnQQHd4FPLVXssZHGSmrg=
Subject key identifier: C8:CF:1B:D9:46:BC:AA:48:85:A6:80:E0:E6:25:DD:6F:70:B4:74:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 90A6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7EA7FEA27DF11EF9BB12DEF7CDC24C2.roa
Signing time: Tue 11 Jun 2024 10:45:29 +0000
ROA not before: Tue 11 Jun 2024 10:45:26 +0000
ROA not after: Mon 12 May 2025 10:45:26 +0000
asID: 51601
IP address blocks: 156.253.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37030 (0x90a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 10:45:26 2024 GMT
Not After : May 12 10:45:26 2025 GMT
Subject: CN=66682ac9-228a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:df:80:2f:fc:11:9c:50:7e:fd:59:26:fb:
0e:2e:ae:d6:26:44:6c:24:0f:ec:f3:00:1d:97:fe:
7c:e5:03:5c:f3:22:72:49:3a:f9:53:27:ca:30:a6:
6d:35:83:60:01:6f:a3:0c:16:c4:ba:c1:6f:e3:94:
50:07:4b:b6:4e:d0:cf:e5:03:3d:ce:97:67:43:ae:
e5:b5:87:32:d0:03:f4:1f:ca:ec:6d:2c:8d:a4:95:
b3:fd:22:35:2c:13:81:fb:d9:50:4b:9f:63:e6:7e:
86:db:f1:27:a4:0e:91:92:e4:62:01:16:88:a0:a8:
03:cc:9c:c7:b4:8b:69:d1:39:7f:72:80:60:67:55:
4c:e6:85:32:0b:85:46:6b:12:a1:b6:b5:64:57:1f:
25:8f:ae:16:ab:5d:dd:77:d0:3e:94:bc:18:eb:73:
4f:b0:35:55:c7:64:96:45:15:47:0f:9c:b8:8a:92:
92:fc:ff:83:1d:d8:68:aa:a5:53:17:bd:a8:1c:a2:
fd:3c:99:81:c4:93:fb:10:c0:01:f3:9d:5a:fb:2b:
b9:bb:cd:16:ce:41:ef:bb:aa:65:26:4c:dd:1f:a1:
ba:75:a1:1e:55:26:e1:c4:d8:78:6b:ee:2e:bf:ca:
fb:fe:c4:bb:07:ef:4b:43:8b:da:a9:61:28:39:8d:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CF:1B:D9:46:BC:AA:48:85:A6:80:E0:E6:25:DD:6F:70:B4:74:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7EA7FEA27DF11EF9BB12DEF7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.184.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:31:8a:81:64:e3:17:33:2e:48:57:af:2c:df:a4:6e:61:4d:
3d:5a:7d:2e:63:bd:0e:90:3e:0d:b6:de:96:79:74:f7:58:68:
b7:4d:3a:39:dd:46:53:54:0d:06:14:ad:d0:39:18:b5:70:33:
d5:1d:b4:2d:d8:2c:cf:64:0d:54:c4:a7:d7:01:b0:8f:5d:8d:
9f:2d:91:a4:2f:40:84:fc:24:da:2d:26:00:69:66:4a:ba:a0:
99:16:f9:f7:05:90:a4:e5:fa:37:f5:8a:b2:13:e2:de:44:7c:
fd:7c:a1:69:34:cc:db:46:99:d6:25:04:78:00:10:f1:b5:ea:
44:1a:6d:3c:22:fb:00:d4:93:24:5e:0a:cf:9d:e5:b6:29:7f:
41:a7:aa:50:d6:92:9b:84:45:18:7c:2b:8a:85:3b:2f:70:33:
9f:46:3a:d6:29:7f:25:9d:56:6f:d2:2a:ed:05:40:3b:22:1e:
a2:0c:34:75:09:df:f2:fe:1a:fa:fb:9e:b4:43:ca:71:eb:85:
7a:50:3c:58:f7:53:8e:40:f8:f2:16:c7:a6:b0:87:16:d1:27:
d5:a3:c1:22:94:01:e0:41:9d:ac:32:f8:a0:55:07:c6:14:b3:
03:2a:ea:64:55:8f:f3:ab:e3:12:ea:ba:ff:9c:a4:e5:0f:16:
f1:8c:5c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:41 2024 by rpki-client on console-fra.rpki-client.org