Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3030892018411EF9D03593F017001B1.roa
File: C3030892018411EF9D03593F017001B1.roa (raw, json)
Hash identifier: qBKZvhUHTnITZZdhmEpYU4Kfsx2X83378TvC+J+yDOM=
Subject key identifier: E0:A4:37:29:69:D5:3F:31:A2:36:6A:FB:E8:ED:F9:70:48:4E:D7:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8463
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3030892018411EF9D03593F017001B1.roa
Signing time: Tue 23 Apr 2024 15:18:39 +0000
ROA not before: Tue 23 Apr 2024 15:18:36 +0000
ROA not after: Mon 03 Jun 2024 15:18:36 +0000
asID: 135097
IP address blocks: 156.254.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33891 (0x8463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:18:36 2024 GMT
Not After : Jun 3 15:18:36 2024 GMT
Subject: CN=6627d14f-8a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:56:2d:0e:53:70:83:b8:33:5d:14:0f:cb:
1f:38:f6:a3:b9:ca:18:e5:51:da:fe:94:94:8e:0e:
2f:20:46:c8:d8:8d:b3:4f:87:00:9d:ed:14:b4:b4:
a5:5c:8f:b4:4b:06:48:fa:52:fd:d5:37:86:ac:b4:
e3:a9:ff:92:7d:3d:23:71:c4:2f:7c:14:b8:08:f4:
ec:57:c3:dc:0f:e1:5b:8c:e9:0c:0c:7f:be:af:cd:
24:f5:dc:c4:f4:b7:77:4f:b7:39:6c:4a:60:80:2c:
93:57:d9:b1:bb:ec:7c:69:48:bb:02:09:dd:7c:14:
44:6c:26:c7:a9:e0:0d:d0:3d:7c:03:71:e1:ab:34:
8e:1f:a7:77:d4:44:7a:df:e2:fa:d1:7d:1a:8d:ad:
7e:ba:74:24:f9:ce:4a:66:8e:64:82:a2:01:f5:12:
12:a0:d9:74:6d:89:03:fa:04:f4:90:cc:03:45:99:
18:ba:ca:74:07:90:4c:6c:b3:47:e0:fd:ff:dc:5f:
89:57:62:a7:24:72:4e:3a:c3:a7:21:ba:c9:de:48:
df:23:b1:a8:c9:94:69:de:9e:46:9d:74:90:23:25:
12:6d:64:e3:2a:7a:fb:01:85:04:6a:96:95:c6:00:
88:6d:8c:b7:4a:44:7d:28:f3:81:f5:d2:74:49:a1:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A4:37:29:69:D5:3F:31:A2:36:6A:FB:E8:ED:F9:70:48:4E:D7:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3030892018411EF9D03593F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a8:c8:53:39:da:91:16:4f:45:52:65:5c:60:41:b1:a7:8b:94:
c8:69:70:ea:23:62:10:20:a1:a7:f8:8c:55:41:e2:7c:37:ce:
6d:a9:ee:d6:2e:9a:84:71:33:b1:0b:0a:ff:e6:e4:c3:d2:da:
5d:53:13:ee:ff:5a:ec:73:f6:5d:34:bb:7a:77:d9:39:5c:e3:
9d:b6:25:07:36:c6:d2:31:69:57:7e:e4:9b:7b:92:ce:2b:f1:
8f:bc:7f:42:51:43:cc:82:cf:14:0f:8d:f9:74:a2:54:e1:ea:
d0:10:aa:98:f5:7b:26:64:d4:6f:4f:b7:b1:a6:a4:05:00:13:
80:f1:d7:85:6e:c6:b0:70:3b:ad:72:6e:5f:6b:01:62:82:d1:
5b:8d:4e:17:ce:29:a4:62:9c:7b:7f:86:77:45:d0:cd:33:19:
8c:36:50:a3:99:1e:72:c1:58:8a:12:cb:84:20:67:5f:c9:56:
15:a4:4f:a9:fb:2d:44:47:02:d2:f1:dc:5a:f8:82:52:4e:dc:
b8:19:e4:63:ea:54:d0:78:87:c5:32:20:d6:10:5d:2e:24:66:
e2:32:33:bc:d5:69:63:06:dc:10:03:53:bc:54:ea:80:70:3d:
66:23:75:33:c6:5a:1e:dc:6e:23:5a:1e:4d:88:99:d6:be:58:
a1:a9:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:08:35 2024 by rpki-client on console-ams.rpki-client.org