Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBC509B076CD11EE9DB276164AD9E6FC.roa
File: FBC509B076CD11EE9DB276164AD9E6FC.roa (raw, json)
Hash identifier: j4+vekfsGLvF+uave6BH4+mvfprtwCVS+2pGykt3wSA=
Subject key identifier: A1:F6:DE:D4:82:7A:5F:43:73:34:65:69:80:29:FD:5A:8D:74:F8:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 424E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBC509B076CD11EE9DB276164AD9E6FC.roa
Signing time: Mon 30 Oct 2023 02:42:36 +0000
ROA not before: Mon 30 Oct 2023 02:42:33 +0000
ROA not after: Thu 19 Dec 2024 02:42:33 +0000
asID: 141190
IP address blocks: 156.240.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16974 (0x424e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 02:42:33 2023 GMT
Not After : Dec 19 02:42:33 2024 GMT
Subject: CN=653f181c-9dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7e:aa:18:eb:06:aa:f2:7a:e3:38:c4:ae:69:
ce:03:3e:6c:c6:1e:29:0c:71:c0:26:96:2c:c5:5f:
00:46:ac:3d:c9:5d:2f:ba:d8:9f:b1:42:08:7d:f5:
3d:50:5f:57:17:7d:f7:50:26:1c:55:ff:fe:8b:94:
bf:12:dc:28:5a:be:bf:ce:57:96:f4:2d:65:51:2d:
3f:43:83:4c:e0:da:4c:51:ac:42:5b:62:21:6a:a9:
41:82:94:4f:c5:dc:10:5f:17:37:97:6c:6e:38:b7:
96:75:e2:9f:47:34:cc:3b:bd:cd:94:ad:2e:c0:28:
da:88:09:da:51:bd:7a:12:63:fe:9a:b5:4d:9d:84:
0b:51:8b:02:84:94:60:c0:e0:38:ad:18:f6:a4:c8:
6d:32:ac:e4:56:78:4b:b9:db:d2:ed:69:65:0c:9c:
7d:67:5f:5c:db:20:58:3a:0f:fa:a5:b9:60:e5:be:
c4:ee:08:09:0b:8c:a5:03:ce:3f:ce:a5:dc:08:8a:
6d:c3:9a:3f:af:56:14:14:80:05:9e:5c:fa:63:e8:
b9:04:d7:89:2f:f1:d6:88:06:4d:d1:3b:fd:c7:1f:
87:58:94:c9:81:9e:f0:34:57:a2:01:b2:f7:cd:27:
d9:78:63:59:39:4d:ca:b4:7f:d3:79:63:5f:55:5a:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F6:DE:D4:82:7A:5F:43:73:34:65:69:80:29:FD:5A:8D:74:F8:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FBC509B076CD11EE9DB276164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.64.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f1:00:7d:94:86:7d:68:82:7c:c1:88:9b:b2:6f:88:f6:43:
e1:ca:ed:56:50:73:7c:f2:7b:7e:1a:f3:48:8a:4f:f3:56:38:
e2:aa:da:1f:97:a1:15:2b:81:01:bc:dc:a8:95:56:62:a8:85:
18:b3:e9:5a:cd:1c:23:78:d5:cd:38:1f:0f:c4:30:34:d4:0f:
96:77:56:dc:63:e1:32:72:1c:21:48:c3:45:f3:b6:14:cd:e1:
6d:96:bd:e2:78:b6:41:01:35:03:14:35:6f:d5:bd:5f:17:18:
8b:4a:80:95:5b:81:27:df:0f:16:7a:fb:86:b7:99:11:62:29:
b9:11:11:6e:92:2a:4e:ad:1d:ac:5f:26:c4:16:da:4c:eb:ff:
44:de:da:59:2f:2b:3c:90:b1:8e:d2:39:ea:86:51:68:90:df:
cc:cf:9c:7b:b0:46:86:59:d1:72:aa:2e:b3:da:91:2c:33:b5:
68:b6:e6:19:b7:04:87:6d:02:fa:c6:f4:44:d2:6e:7b:6c:05:
51:0c:49:61:b4:14:f9:bf:81:99:50:a6:fd:fa:09:0d:fe:6f:
f2:86:2c:fb:e6:25:cb:13:6b:e9:b8:23:fd:e0:c2:45:99:cf:
ad:b7:ae:0d:f5:17:60:e8:9a:ad:3c:8d:9a:39:09:51:50:9a:
2b:0e:bf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:09 2024 by rpki-client on console-ams.rpki-client.org