Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C528760AF47A11EEA1D11E94775412E6.roa
File: C528760AF47A11EEA1D11E94775412E6.roa (raw, json)
Hash identifier: YuBi334aKPcZ2xwYQ+01hbYb5q1dQVWiTCgJG76guj4=
Subject key identifier: DF:F7:15:0E:4C:0D:97:2D:75:B0:93:FA:90:4C:A7:6B:29:0B:A9:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8199
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C528760AF47A11EEA1D11E94775412E6.roa
Signing time: Sun 07 Apr 2024 01:04:23 +0000
ROA not before: Sun 07 Apr 2024 01:04:19 +0000
ROA not after: Fri 10 May 2024 01:04:19 +0000
asID: 49981
IP address blocks: 156.225.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33177 (0x8199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 01:04:19 2024 GMT
Not After : May 10 01:04:19 2024 GMT
Subject: CN=6611f117-d018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:4c:d8:5b:ee:f7:07:7c:b4:2c:79:71:f8:
24:b9:3b:4d:88:11:35:ef:18:0b:fa:72:85:c2:fd:
32:93:09:c2:d4:25:53:94:fd:72:4a:f7:c7:ac:37:
a0:95:a9:8a:79:97:42:f3:a9:02:e0:2a:8d:90:17:
63:1b:6b:f5:31:5b:b4:dd:fe:4d:99:1d:48:14:1e:
d8:ef:88:d5:06:2e:b6:92:ed:49:fa:ff:5e:7d:93:
9b:17:a2:0e:a9:0d:e4:f1:8c:23:fb:1f:e1:a7:84:
b5:88:f0:6b:a0:9c:a0:26:75:0f:a3:bf:3d:ac:fe:
05:c8:ec:71:d5:ca:60:dc:fd:70:60:bc:9c:06:5d:
3e:7c:38:95:a0:08:64:72:71:28:83:27:38:bc:9b:
16:9f:67:33:19:8a:f1:be:79:c6:4c:61:0e:6a:90:
48:b6:ad:f5:1f:3a:c4:03:6e:87:50:de:65:fb:47:
2a:15:71:e5:16:22:60:a7:c6:ee:25:3c:ec:ea:93:
5b:3f:6f:76:4f:24:07:a7:cf:67:84:9c:64:68:21:
e7:24:14:61:ed:45:22:71:ac:be:72:90:6a:4c:78:
c2:ef:ce:1c:41:3a:ad:a9:35:94:d2:e9:7c:6f:be:
25:1f:cf:44:a3:2c:ea:a9:60:66:9b:96:b6:59:c6:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F7:15:0E:4C:0D:97:2D:75:B0:93:FA:90:4C:A7:6B:29:0B:A9:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C528760AF47A11EEA1D11E94775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.73.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:6f:1c:e1:1b:95:00:fe:cc:a3:6e:db:7d:49:b9:19:83:af:
da:3f:15:78:d5:f0:6d:79:7c:23:25:1a:f9:65:57:dc:a1:7b:
68:70:9d:4a:cb:88:92:e3:0b:3b:59:0b:af:35:8c:0d:ea:3a:
6c:1e:db:55:29:54:72:e3:97:43:de:b6:ce:23:37:87:90:27:
50:e3:30:30:9c:d1:7c:12:16:72:76:99:a4:61:10:e3:8b:89:
75:e9:80:8f:2c:b0:88:cc:9c:bf:9b:bf:92:24:d1:15:e4:a7:
f5:2c:da:73:3a:da:32:da:80:6c:49:fc:d0:73:30:34:53:71:
88:75:ec:e7:eb:81:b3:2c:a2:aa:09:cb:d0:1a:3b:d3:ad:a8:
b3:55:7b:57:f6:de:44:50:f9:44:3a:07:2f:b2:63:30:a1:7f:
8e:c7:ac:84:51:f1:ba:b3:e2:58:a3:55:7b:be:f2:c7:da:f3:
16:d9:8b:5e:94:7d:ce:79:02:a7:33:ad:47:b2:f7:ed:03:2b:
57:f1:cb:fc:71:6c:6a:6b:b9:30:fb:f7:ac:c6:ff:45:5e:54:
c9:8e:f5:7a:35:33:ff:e8:f0:cd:aa:ec:1c:25:a6:a3:84:29:
29:c4:6c:84:70:9e:3c:5b:bd:d4:5e:87:04:a3:19:ea:b5:2e:
57:3b:c5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org