Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9F014F8155D11EEB1FF1D4D4AD9E6FC.roa
File: F9F014F8155D11EEB1FF1D4D4AD9E6FC.roa (raw, json)
Hash identifier: YUTCi1LAylmVURDJwHR7Wa5JxIFg3wsFEHlec/XQT5c=
Subject key identifier: 35:F7:35:0E:63:27:AD:6C:C6:E0:25:9F:38:67:6E:83:14:4D:A3:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9F014F8155D11EEB1FF1D4D4AD9E6FC.roa
Signing time: Wed 28 Jun 2023 02:46:26 +0000
ROA not before: Wed 28 Jun 2023 02:46:23 +0000
ROA not after: Mon 27 May 2024 02:46:23 +0000
asID: 140627
IP address blocks: 156.247.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11622 (0x2d66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 02:46:23 2023 GMT
Not After : May 27 02:46:23 2024 GMT
Subject: CN=649b9f02-3076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f9:97:6e:8b:74:61:1a:cb:44:e5:fa:c4:98:
45:96:5e:46:82:cc:09:71:de:00:d3:95:45:eb:df:
24:3f:38:41:7a:b2:1d:b9:e1:73:0f:96:ad:08:de:
98:ea:09:c3:e2:91:ad:4a:0b:37:20:ca:e8:5f:31:
0c:25:cf:bd:f6:fc:dd:e2:69:bc:da:c2:f8:d4:f8:
43:93:fe:3b:d6:fe:bf:27:95:fe:c0:ce:7e:0b:3f:
61:00:f4:b8:83:e8:12:cc:8b:ca:38:29:28:06:40:
aa:8f:71:b5:28:84:94:31:07:e1:77:ab:ea:df:0f:
2b:d0:8a:b5:af:38:fb:04:15:91:40:74:e9:0c:0e:
3e:07:b4:ca:07:16:c1:28:98:bc:fc:10:bc:ae:16:
df:5a:c3:70:3f:f8:db:fe:f1:f6:40:86:08:01:0b:
ca:3b:3f:9d:43:37:92:61:6c:6f:7b:04:46:d3:2b:
05:57:f4:89:34:59:c9:34:d1:0d:da:df:2f:87:d4:
32:6b:a7:7a:80:77:04:a2:72:dd:b7:ea:b4:6b:f4:
47:2a:75:b8:9b:1a:8d:09:77:30:ce:16:0a:3d:24:
5f:23:9c:ea:95:03:ee:dc:2a:84:da:00:3a:8b:a0:
e5:90:92:e2:96:7f:49:c0:47:72:e3:0b:be:b8:42:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F7:35:0E:63:27:AD:6C:C6:E0:25:9F:38:67:6E:83:14:4D:A3:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9F014F8155D11EEB1FF1D4D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.189.0/24
Signature Algorithm: sha256WithRSAEncryption
93:de:15:f6:6e:26:3b:5b:04:60:42:6b:65:98:1e:ae:bc:1b:
dd:12:50:d2:3b:66:f9:54:7a:1b:a8:e1:24:74:4d:a7:84:85:
7c:82:e0:08:06:78:9a:a8:60:3b:3a:36:3b:9e:89:cd:7f:95:
a0:e9:d8:36:d0:9c:96:fb:84:8f:3b:64:27:54:e0:eb:2b:7f:
af:50:ed:0f:67:62:bc:b2:e5:55:f8:a6:dc:71:af:d3:15:f6:
a5:2b:01:e2:a1:80:b6:d4:ea:ac:bf:08:91:40:5c:71:4f:80:
ce:c3:db:18:b2:9f:13:a8:5a:13:19:55:0c:44:e0:1d:5a:b9:
7d:3f:65:75:c3:ad:b7:40:1a:3c:96:14:f1:f7:96:53:ba:93:
f2:32:cb:12:a0:2c:b7:bd:3c:b1:dc:0f:64:04:a4:f0:b0:36:
30:c1:50:c7:ae:f9:28:5c:5c:d4:40:c4:ff:b2:85:7e:75:02:
9a:d4:ff:6a:c8:f0:2a:ab:8e:2a:f3:7f:cd:d4:14:00:b8:42:
19:5c:68:47:bb:a3:33:0e:8f:86:54:8b:49:d4:7d:96:11:8e:
ba:e5:21:d9:2d:fd:1e:e3:9b:bd:ce:2b:13:da:de:e6:63:3e:
cd:b3:86:d5:09:e9:17:91:b5:34:38:99:8d:f4:a6:aa:77:17:
8f:99:09:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:05:01 2024 by rpki-client on console-ams.rpki-client.org