Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00D1C4E6CCBB11EE89456B80775412E6.roa
File: 00D1C4E6CCBB11EE89456B80775412E6.roa (raw, json)
Hash identifier: hZtCkvLchQUbIPBATm7yLuDNTx0SzYhXPfMvMpOEh2o=
Subject key identifier: F8:14:6D:DB:BB:A6:DC:9A:86:15:2E:CC:CA:EC:91:39:B7:65:7E:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 711D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00D1C4E6CCBB11EE89456B80775412E6.roa
Signing time: Fri 16 Feb 2024 11:03:24 +0000
ROA not before: Fri 16 Feb 2024 11:03:21 +0000
ROA not after: Fri 26 Apr 2024 11:03:21 +0000
asID: 9009
IP address blocks: 156.246.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28957 (0x711d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 11:03:21 2024 GMT
Not After : Apr 26 11:03:21 2024 GMT
Subject: CN=65cf40fc-742d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e8:0d:89:14:52:b6:2b:e0:56:ac:90:3b:f6:
05:e9:33:33:05:1e:e3:53:cd:0b:14:6d:ea:e8:29:
bd:38:f3:72:57:9d:ce:0f:66:14:53:1f:05:ff:95:
17:01:05:cf:fd:b3:83:74:d1:42:76:da:25:de:58:
b6:3d:1d:a3:e1:6d:39:9f:e6:c1:28:3b:0b:e5:06:
2b:78:11:a0:aa:f3:16:9d:ff:e7:ec:16:73:39:cb:
0b:a4:06:26:d1:e0:b0:0c:a2:ca:cf:f4:be:ba:15:
03:75:52:92:6e:f8:61:45:e1:d1:56:5c:41:b8:a4:
d8:5d:b5:70:4c:1a:a9:00:75:2c:b3:64:64:d9:6e:
f6:2e:fd:45:55:6d:c1:15:0b:ad:76:3a:7b:a7:5c:
c1:36:db:d1:f0:6f:7b:cb:bf:59:8a:c2:cc:fd:8f:
13:f3:76:72:4f:20:43:8d:c4:c4:eb:e5:05:49:32:
fd:3b:30:23:b4:89:1f:e2:52:51:72:c7:0f:16:ba:
87:0b:c4:48:ff:74:f2:e2:e3:ca:dd:a9:b3:89:76:
42:04:90:10:68:ce:a1:d9:99:fa:d1:2b:5e:2e:cf:
1a:1a:8f:4e:86:e9:6c:af:68:05:ca:4e:f5:53:08:
6b:39:50:cc:66:4d:89:8b:56:f2:39:b0:07:ef:57:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:14:6D:DB:BB:A6:DC:9A:86:15:2E:CC:CA:EC:91:39:B7:65:7E:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00D1C4E6CCBB11EE89456B80775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.47.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ea:f8:31:8e:ac:65:89:b2:c3:35:fd:8f:60:72:9a:70:fd:
e4:3b:6a:57:5f:9e:45:32:1c:5d:bf:6e:ee:b2:93:9f:78:88:
68:c4:ca:67:f3:a5:2d:5d:33:1b:88:f1:3b:40:5c:65:63:e4:
6c:cb:4a:da:11:db:75:98:d4:0b:09:e0:01:39:95:d2:46:89:
79:a7:6f:5a:e8:21:2c:21:03:4c:3f:6d:41:a5:07:b0:1d:d6:
6e:95:64:53:c3:01:6d:4c:6f:66:ee:12:42:34:26:ee:3c:6c:
f4:d6:29:50:89:01:e2:4c:2c:e1:97:2f:13:b4:69:1d:84:2e:
0d:50:a1:e3:af:ba:40:cc:0a:38:a6:de:8a:62:e2:ac:5c:75:
e1:d0:1d:44:ef:34:4c:00:4e:b4:04:a9:88:a8:48:58:2c:c8:
6f:0d:10:e5:9a:ec:a8:b3:19:34:c9:ca:a1:10:40:8b:86:a2:
fd:0b:88:f0:d8:4f:7d:2a:ca:92:be:ea:7f:6a:d4:df:9d:6e:
6e:c8:a8:da:c7:5a:1d:82:ba:7d:5b:5e:39:03:07:22:c1:d8:
b7:f5:e3:97:60:77:00:6d:53:e0:f3:f5:fc:c5:b9:0b:1b:51:
86:f9:82:bc:5c:94:2d:89:ee:ad:fd:5b:fd:ff:f3:f9:bf:97:
25:36:04:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:50 2024 by rpki-client on console-ams.rpki-client.org