Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC3AAA907EBC11EE9E5252674AD9E6FC.roa
File: DC3AAA907EBC11EE9E5252674AD9E6FC.roa (raw, json)
Hash identifier: hJzMwpVJ/ql2qOBzQrUaX825v6LwidlDXvXmd8AdoVE=
Subject key identifier: 60:10:3C:B9:7A:C7:C2:E9:A8:2D:87:CB:C7:CF:A8:DC:EB:88:0A:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 44EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC3AAA907EBC11EE9E5252674AD9E6FC.roa
Signing time: Thu 09 Nov 2023 05:00:11 +0000
ROA not before: Thu 09 Nov 2023 05:00:08 +0000
ROA not after: Wed 06 Nov 2024 05:00:08 +0000
asID: 139057
IP address blocks: 156.238.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17643 (0x44eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 05:00:08 2023 GMT
Not After : Nov 6 05:00:08 2024 GMT
Subject: CN=654c675b-d246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:d3:22:d5:e5:da:70:b2:45:44:69:bc:7e:
5b:11:a3:af:09:14:99:a7:98:c9:8b:4b:7d:c0:aa:
3d:eb:35:78:30:8b:74:a9:7f:ef:b1:f3:a2:c2:3c:
a6:d8:e7:14:2c:b5:0d:bd:2d:a5:70:f1:52:5d:7e:
e9:c5:5b:3f:98:b7:72:7d:16:e0:c1:1d:96:3c:0d:
19:4a:6f:31:19:a4:a3:30:d0:0f:fb:22:5c:4f:f4:
a6:e8:18:59:ec:61:e2:da:d0:b3:fc:15:a2:43:a9:
71:ea:2f:4d:83:b2:08:02:20:30:b3:45:94:85:81:
6c:f2:80:ac:ff:1d:7a:94:c8:1f:a7:1a:9c:af:c9:
7a:71:56:a4:ff:c0:69:a7:b8:50:b0:64:d4:26:72:
fd:db:5f:9f:5f:54:34:3d:11:91:1a:8a:5e:58:d8:
34:ce:f6:20:8f:c4:f0:e7:1c:d3:e6:d5:cf:be:9e:
05:81:34:24:8f:fd:37:51:66:80:97:6f:be:72:1d:
00:27:d5:4c:f7:1f:de:0e:a2:40:b5:d1:fd:21:ab:
cd:2c:8d:08:2b:83:00:7d:5a:e8:fe:d6:1e:50:47:
96:b2:7e:12:64:b4:3b:f3:08:01:50:e3:eb:c5:50:
03:ce:9f:e4:d5:c4:21:03:12:57:ba:b9:6c:80:35:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:10:3C:B9:7A:C7:C2:E9:A8:2D:87:CB:C7:CF:A8:DC:EB:88:0A:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC3AAA907EBC11EE9E5252674AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.130.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d5:0b:28:01:67:9f:82:f1:5f:cb:71:2a:3a:1b:c4:26:f5:
40:1e:27:29:6f:73:c0:fb:d4:41:9b:96:8b:3b:4a:27:20:db:
08:6b:69:55:3c:45:90:5f:c5:1a:66:d9:c7:2a:3d:7f:74:7f:
29:a5:a4:da:ae:9f:11:a5:a6:81:22:be:23:f0:72:6f:a8:85:
6f:54:d4:2c:8a:c7:49:92:fd:66:8f:8c:ea:f8:47:e4:ea:72:
2e:45:8b:f6:71:dd:1b:ca:fa:e0:af:aa:18:b2:e2:67:d2:49:
1e:44:34:c6:fc:c7:31:8a:90:5b:09:dc:9f:45:f4:7d:42:93:
e7:71:57:34:6c:45:d9:cf:21:49:bc:b9:bd:a2:77:f9:4c:15:
57:1d:f9:8d:9d:3c:4b:69:00:ca:3f:47:d3:99:dc:2b:00:a5:
01:92:d7:a4:e2:c2:c4:90:a8:ca:17:5c:b2:cd:6d:d2:e3:73:
de:fb:39:93:70:1e:97:34:56:34:30:3c:81:8b:cd:e3:8f:46:
b1:60:0f:1d:5e:80:31:3b:5a:8a:d6:1d:fb:09:1e:2f:f6:f6:
e4:13:08:ca:98:bd:4c:02:18:b9:64:fc:f2:f3:ba:60:67:53:
c9:b0:61:61:f8:8c:48:b7:54:a6:b5:fc:7e:4c:de:c2:9b:61:
52:6d:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:13 2024 by rpki-client on console-ams.rpki-client.org