Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB3486D2F9FD11EDA686ED524AD9E6FC.roa
File: DB3486D2F9FD11EDA686ED524AD9E6FC.roa (raw, json)
Hash identifier: DW4YM0ToY4Ec6Fo44U1bEJVW40SHQzWaYLX4HPBxiVc=
Subject key identifier: 8C:53:D8:69:36:F3:ED:4F:A4:A5:56:58:95:20:1D:9B:D1:E0:12:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2729
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB3486D2F9FD11EDA686ED524AD9E6FC.roa
Signing time: Wed 24 May 2023 06:40:22 +0000
ROA not before: Wed 24 May 2023 06:40:18 +0000
ROA not after: Sun 02 Jun 2024 06:40:18 +0000
asID: 58879
IP address blocks: 156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10025 (0x2729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 06:40:18 2023 GMT
Not After : Jun 2 06:40:18 2024 GMT
Subject: CN=646db156-30fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:af:21:03:62:68:5f:dc:68:dc:fa:dd:57:22:
f5:64:82:4c:c7:2a:12:50:98:d0:c8:22:07:0b:8e:
0b:34:d7:16:11:c4:9d:a7:09:75:06:b8:1b:3e:af:
d9:b2:a7:a9:f9:b9:91:11:88:c6:07:81:65:e8:1c:
46:8a:a3:38:29:c9:25:ee:43:11:9b:93:4c:f7:f3:
fd:5c:12:1a:b3:93:81:07:0f:9b:06:b0:4f:fb:59:
6b:1d:07:a8:ed:01:36:3b:93:59:3c:4f:4c:be:09:
9a:6c:51:f4:4c:91:95:e7:51:db:8f:44:87:c1:2a:
52:b1:a8:7e:dd:74:65:3d:b3:8c:04:07:0a:94:a5:
91:56:a8:85:b8:90:7a:d4:3d:a1:51:f6:54:6b:f6:
3f:8a:f0:b5:69:06:7a:cf:a2:59:2a:de:4f:ff:d5:
c4:36:5b:87:7c:ca:58:61:7f:7e:c6:f0:bf:24:c9:
28:9e:8c:35:06:9a:f2:7d:1f:43:81:ba:98:36:2d:
c8:16:b5:33:62:d8:e5:71:f9:b5:5e:ff:24:04:06:
bc:78:eb:ec:fd:70:7d:49:c0:d6:3d:ae:d8:b7:b6:
53:bc:4b:1a:4c:13:40:10:3b:e0:f1:4d:1c:1c:31:
73:b0:db:9c:bb:2b:6a:eb:94:dd:aa:dc:bc:b6:2c:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:53:D8:69:36:F3:ED:4F:A4:A5:56:58:95:20:1D:9B:D1:E0:12:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB3486D2F9FD11EDA686ED524AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:24:ab:fe:78:1f:c5:d3:4a:de:20:18:02:53:36:f4:5a:a6:
72:77:d8:f9:70:ad:23:ee:1a:f7:56:af:03:00:1d:a1:c2:cd:
73:f3:da:7e:59:95:1d:ae:08:3f:ae:32:6d:3f:e1:aa:c3:cd:
23:21:ec:85:35:63:ca:f0:06:50:2f:2d:86:16:21:8d:d8:19:
fa:ae:b1:26:73:50:00:61:0f:c3:a6:32:73:a6:2e:1b:84:34:
42:da:68:80:bd:17:8b:c0:a2:38:68:63:27:42:b1:a0:93:72:
fb:6e:ac:2f:5c:7e:1b:37:85:b9:2d:29:3c:53:f2:6a:eb:e0:
d3:51:99:27:6c:96:99:c8:dc:c3:43:cd:26:ca:ac:84:68:84:
68:bf:e0:f8:fd:2a:a0:91:6c:ba:b7:ee:b1:a6:75:29:bb:11:
29:69:08:83:35:7d:36:5e:cd:d3:98:9d:c9:77:5f:12:30:1e:
cb:be:b7:92:0e:ce:60:fd:fe:b0:14:c6:f3:34:8c:72:97:7b:
1a:8a:87:a0:b7:9b:81:61:ba:0d:2f:9b:02:4b:d1:ae:94:c2:
4a:24:f0:ba:cf:c2:f2:91:79:04:c6:cb:15:0d:9e:ff:c0:c6:
36:f8:6d:da:24:e9:8f:40:08:ed:e6:e1:dd:06:0c:81:2c:9a:
79:08:ed:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:54 2024 by rpki-client on console-fra.rpki-client.org