Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5323B103B2811EE95F9A43A4AD9E6FC.roa
File: C5323B103B2811EE95F9A43A4AD9E6FC.roa (raw, json)
Hash identifier: oJ2f9kePZO4amKyiB7FIoJi/e7o87/MpTMWR87S+r44=
Subject key identifier: F7:E1:25:02:86:48:FF:45:20:FB:B4:6C:CF:A8:13:7E:06:B4:F0:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5323B103B2811EE95F9A43A4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:01:19 +0000
ROA not before: Tue 15 Aug 2023 05:01:16 +0000
ROA not after: Mon 27 May 2024 05:01:16 +0000
asID: 140627
IP address blocks: 156.247.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13759 (0x35bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:01:16 2023 GMT
Not After : May 27 05:01:16 2024 GMT
Subject: CN=64db069f-f287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:18:11:63:ec:b0:a0:b7:20:82:a7:48:56:
13:aa:dd:d1:4d:17:5a:06:60:d6:8b:90:6b:fd:e1:
1c:38:fa:f5:7f:1f:33:a1:19:65:fd:97:1c:ef:cc:
f4:7d:37:41:58:f9:d5:fa:68:7b:e9:f3:c7:49:d7:
cf:59:1d:2e:b0:73:4b:c0:1e:f9:6e:fd:f0:be:34:
24:28:3d:ef:5c:28:60:6a:52:8c:53:59:7e:f2:55:
d5:c7:23:df:c5:fd:cd:4d:b9:a0:5e:34:cf:02:e1:
04:3c:1a:ad:ae:b2:4c:c6:93:15:61:e4:89:a2:2f:
49:ec:fd:cc:96:ba:98:52:e2:0d:49:e8:42:0a:77:
10:5e:42:24:bc:7e:f5:bc:95:34:04:cf:bc:c6:0e:
f4:0e:54:6b:8b:11:03:84:77:40:44:4e:af:30:8d:
0c:57:fc:b2:4c:ee:bb:72:93:12:8c:de:eb:3c:f7:
65:4e:dc:ea:a7:c3:e2:54:22:50:3e:a5:86:5b:20:
74:7b:85:eb:c5:89:3b:bd:ed:7f:c0:54:ae:dc:7e:
e3:14:1e:97:09:0e:2c:36:73:41:02:36:66:17:16:
dc:ec:57:d6:e5:6c:f0:7e:51:55:f6:d8:1c:17:92:
0d:85:8f:a1:2e:b6:5c:f7:7d:6e:9d:c2:22:16:e9:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E1:25:02:86:48:FF:45:20:FB:B4:6C:CF:A8:13:7E:06:B4:F0:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5323B103B2811EE95F9A43A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.254.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0e:db:01:0e:20:9f:44:44:8f:89:96:32:52:e2:d1:9a:98:
01:5d:ed:70:ae:7f:5e:15:3e:f2:32:0a:fa:9e:e6:50:f6:0d:
7d:d5:17:89:82:9f:2d:7f:1f:fa:d2:f6:35:92:f5:80:e5:6a:
9c:80:86:e5:51:9f:f8:80:a0:35:08:53:40:87:30:81:96:24:
06:fd:c3:a1:58:85:8c:3e:3d:9c:8c:c4:89:95:65:9d:66:ad:
a4:48:cb:3e:eb:98:17:1e:e8:6e:32:35:e1:8f:9f:55:3d:f8:
ab:d6:e0:8c:8a:29:db:c4:b6:0b:b0:dc:f5:d3:1e:3b:5f:18:
4c:a3:34:6e:dd:c2:82:b3:49:65:b7:a8:dc:a7:92:7a:50:3e:
f5:7d:a3:e7:28:9e:a8:69:90:fe:b9:d3:ae:fd:2c:10:3c:13:
be:d2:fe:22:ef:11:68:79:1a:e4:34:c6:8e:bf:27:b1:b4:ce:
e3:dd:8d:5d:2e:5f:8c:59:af:a3:06:d1:7c:51:b0:bc:db:a4:
4b:3e:4b:02:3e:27:dd:1d:89:6f:2f:8e:f2:06:3d:3b:8c:bc:
12:f0:0a:cc:07:74:8a:43:b7:4c:a6:59:37:a5:2f:a1:75:50:
02:a9:d6:ab:45:81:8d:63:ea:a4:b8:f0:30:1d:f8:4f:1a:00:
42:b4:6c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org