Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0BA1710A2C811EE934B932FD25BE465.roa
File: E0BA1710A2C811EE934B932FD25BE465.roa (raw, json)
Hash identifier: cFUl/4aoINhrXWjuMYGBpgh/T0iln43TQQOjvMdE2v8=
Subject key identifier: B4:27:71:24:6B:1A:5E:9D:B1:70:75:86:9B:38:74:1D:DF:7F:FC:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 58E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0BA1710A2C811EE934B932FD25BE465.roa
Signing time: Mon 25 Dec 2023 01:56:54 +0000
ROA not before: Mon 25 Dec 2023 01:56:51 +0000
ROA not after: Mon 13 Jan 2025 01:56:51 +0000
asID: 139057
IP address blocks: 156.225.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22752 (0x58e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 25 01:56:51 2023 GMT
Not After : Jan 13 01:56:51 2025 GMT
Subject: CN=6588e166-cb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:12:26:6d:eb:cc:b3:be:8b:2b:3d:47:57:
a2:3a:e7:6d:9e:08:5b:8d:a2:9e:b3:92:4c:12:eb:
56:d3:79:0a:98:92:65:ef:d6:d5:42:0b:16:d2:3a:
70:40:de:22:66:44:c2:be:c6:0d:52:58:ab:d3:a4:
06:2a:64:e5:7a:ff:6e:82:a5:fd:0d:27:6e:61:fe:
ff:e5:da:52:6c:21:59:e5:c4:61:2f:4e:56:3b:36:
a8:b4:e8:40:fa:3d:10:98:bf:5d:d1:e6:98:6f:80:
2d:f4:c5:15:fa:cf:56:19:8c:27:9a:57:6d:ba:ee:
08:34:e6:f6:e0:2f:d0:5d:9c:88:fb:9c:69:bb:a1:
3d:05:b8:c1:92:13:7a:28:97:67:da:50:9d:ac:94:
ad:2d:2b:9d:1a:d0:47:22:6c:23:38:97:84:f5:e4:
70:07:06:68:57:a8:e6:b4:08:20:cb:cd:a0:e8:fa:
2c:87:78:ee:c3:f6:20:bc:81:cf:7e:3f:16:aa:19:
f2:a1:21:09:8d:4a:4e:76:fb:70:5f:47:9a:11:cb:
df:9b:f0:09:87:70:75:61:09:a0:0c:fa:4d:b5:27:
67:19:58:d5:34:b2:8e:08:bd:8c:f9:07:d5:99:98:
ad:eb:6f:75:f3:83:26:3c:c5:16:4c:fd:47:4c:d0:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:27:71:24:6B:1A:5E:9D:B1:70:75:86:9B:38:74:1D:DF:7F:FC:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0BA1710A2C811EE934B932FD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.110.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:a3:31:3e:a4:15:0b:5b:fa:dc:94:ad:16:8a:a3:46:c1:85:
40:91:cd:ea:67:2c:47:9f:50:b0:5b:67:9f:17:cc:ee:fc:f8:
3c:f6:1e:11:fd:be:73:f2:ee:a1:fc:39:28:54:29:76:1e:dd:
83:e1:12:50:2e:8b:52:ab:9a:3b:21:ae:ef:8d:70:3b:56:c0:
f2:81:d5:a8:6f:44:14:46:b7:26:f7:53:a0:19:85:6a:7b:52:
ce:d5:d2:af:fd:ff:2a:45:07:be:0b:05:09:08:68:f8:23:2b:
42:c9:07:2b:12:a6:be:83:74:9c:6c:7e:f2:43:2a:5c:40:ee:
d0:60:cf:7a:bc:9a:93:52:47:4d:91:62:3e:66:d5:f1:4c:0e:
71:d2:7d:d9:b5:59:ab:d6:07:6f:48:9d:ce:20:7e:a5:b3:a6:
f1:22:c2:23:e3:cf:73:4e:a9:9f:00:b3:36:e9:9f:b1:e9:72:
ae:5a:d8:0a:e2:d9:f8:3a:87:b8:ec:d8:6c:66:25:27:09:09:
97:d5:9e:16:a0:ac:79:42:4d:3c:f3:63:7a:1c:ea:e9:48:a2:
23:b4:9b:9c:eb:ed:8c:a1:19:88:3d:d7:77:cc:f1:95:00:b6:
f4:92:dd:d1:82:0c:b4:fe:1b:21:c6:6b:7a:4f:72:5a:0d:d2:
f4:d1:b1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:59 2024 by rpki-client on console-ams.rpki-client.org