Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C95430C2544B11EEA72FB78A4AD9E6FC.roa
File: C95430C2544B11EEA72FB78A4AD9E6FC.roa (raw, json)
Hash identifier: NW1jY8iKKOe1ZecCrKY+9TpwVyj4tbjSS58sgHCbto4=
Subject key identifier: D8:F1:6C:A9:60:17:07:16:E1:E3:EF:CD:6F:C7:D4:C5:00:0B:2C:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3A6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C95430C2544B11EEA72FB78A4AD9E6FC.roa
Signing time: Sat 16 Sep 2023 04:44:57 +0000
ROA not before: Sun 01 Oct 2023 04:44:54 +0000
ROA not after: Thu 08 Aug 2024 04:44:54 +0000
asID: 133199
IP address blocks: 156.247.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14955 (0x3a6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 04:44:54 2023 GMT
Not After : Aug 8 04:44:54 2024 GMT
Subject: CN=650532c9-5a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:e6:4b:42:54:fc:bb:d0:c3:db:2a:fe:d5:
aa:00:61:f1:22:05:dd:29:e9:0d:9e:d2:c3:d9:e6:
c8:4b:06:40:00:94:f5:64:2d:08:e3:c9:cf:b6:7a:
08:d0:aa:f6:ac:80:6c:cb:7d:5f:ae:49:5e:71:91:
4e:57:3b:c9:21:69:5d:e4:0c:8c:06:6d:74:07:10:
99:04:c3:cd:a8:0e:b3:4c:a5:1a:28:d1:d4:23:6a:
9f:75:d8:73:44:f6:5f:de:30:7d:9f:22:07:2d:11:
b6:16:e7:05:c7:c0:e7:ee:84:69:99:2f:6e:da:23:
f9:f0:4c:e9:c4:d7:1c:35:d0:0b:f4:90:89:94:16:
0b:5e:4b:9b:11:60:6e:81:b4:78:4c:2c:2f:c9:7c:
12:7d:cc:f4:2b:75:e3:23:c2:44:30:bb:0d:b2:61:
18:c9:f7:7f:5d:90:e7:86:6c:2d:66:79:ad:48:68:
57:c7:0e:13:56:bd:c4:90:ec:1d:6c:08:ca:28:84:
ba:08:d3:08:1a:89:01:57:20:0c:5d:bb:a6:82:74:
cc:82:5c:9f:c5:52:85:b0:b3:8b:e8:c0:5d:49:47:
42:2e:e5:de:50:1c:c0:96:8f:18:2c:33:5b:31:64:
30:b3:49:f8:e0:07:1c:d7:3a:f7:64:24:44:9d:56:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F1:6C:A9:60:17:07:16:E1:E3:EF:CD:6F:C7:D4:C5:00:0B:2C:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C95430C2544B11EEA72FB78A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:18:98:27:5b:6a:7c:ae:7d:63:bf:e3:b4:f9:64:3d:39:ee:
8c:d1:0d:c2:c7:98:2b:e8:86:f5:7a:2f:e0:05:48:22:0d:1f:
f7:3a:ac:fb:08:88:2d:e2:08:14:dd:24:00:ed:f6:79:0b:6b:
e0:df:57:88:11:85:3e:b5:6d:d8:8e:5b:64:19:00:9b:04:d5:
65:53:2f:17:6c:29:bf:50:8f:da:f6:ec:da:9c:ee:78:ff:aa:
35:3f:86:f0:09:60:8e:cc:9f:b9:01:26:69:a1:c0:90:b1:db:
e2:b0:35:a1:3a:7c:29:48:1b:30:d2:63:8b:84:ee:49:66:56:
64:80:2f:96:e7:0b:4b:dc:47:ec:7d:fe:ff:4f:fa:c9:ec:98:
47:43:ff:6b:54:40:d2:81:92:fe:a9:b9:79:1d:c2:c5:f2:a0:
5a:70:e6:d1:d6:9a:48:bc:a7:31:fc:b2:61:93:d0:cf:e8:fe:
b3:17:0f:63:db:11:18:dc:b5:3e:ae:02:b8:77:70:01:48:1a:
a7:1f:d0:95:64:e3:92:b8:31:95:1e:bd:7b:a7:9e:04:96:94:
27:f7:97:ee:0f:6b:ee:c1:4e:a5:84:97:c4:28:60:55:23:b4:
9d:52:f0:e4:a5:b4:c5:62:83:6d:be:e1:2f:58:fd:d3:b1:94:
13:40:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org