Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/254BE540CCBB11EEA21D8F80775412E6.roa
File: 254BE540CCBB11EEA21D8F80775412E6.roa (raw, json)
Hash identifier: hfC9DV1bC6/h1YWgvhVCk0f5tKrYDSH4j4UAPLf+IWM=
Subject key identifier: 7F:99:94:3F:DF:1C:63:40:B9:03:5B:31:E1:1A:23:0C:80:B4:39:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 711F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/254BE540CCBB11EEA21D8F80775412E6.roa
Signing time: Fri 16 Feb 2024 11:04:25 +0000
ROA not before: Fri 16 Feb 2024 11:04:22 +0000
ROA not after: Fri 26 Apr 2024 11:04:22 +0000
asID: 9009
IP address blocks: 156.246.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 11:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28959 (0x711f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 11:04:22 2024 GMT
Not After : Apr 26 11:04:22 2024 GMT
Subject: CN=65cf4139-e238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:0f:f0:b9:6f:d2:38:6f:9a:a5:eb:8f:da:
9d:16:e9:4c:42:97:6a:10:54:ea:05:1a:12:5a:98:
ea:2a:f3:f4:42:e2:b6:b6:38:c2:08:66:3d:53:f3:
0f:a5:27:dd:96:4a:e0:31:96:68:19:a3:81:64:a8:
93:89:9d:f4:71:6e:c8:6b:e1:c8:ca:d4:59:c6:07:
5c:8d:52:09:ee:a2:41:e1:5f:c0:e8:c8:ee:50:3d:
66:62:2b:79:25:67:be:65:b4:38:74:4c:a1:93:42:
19:a4:0d:a5:5b:84:9b:ec:3c:c2:1a:dd:54:a4:a0:
90:e3:b9:c4:08:40:2c:79:15:e4:7a:24:f3:d4:d1:
6c:55:0a:29:db:83:f2:7d:d8:27:d8:ed:5d:e0:58:
03:dc:ba:a6:f5:87:6c:ee:49:66:1c:a3:52:dd:90:
d5:12:8a:89:e2:ad:da:0a:ac:64:4e:56:16:1a:b0:
01:19:3b:db:52:a2:58:62:49:ae:0b:b8:76:6e:de:
10:77:99:22:d9:fb:70:d7:85:44:14:ed:3c:7a:44:
e9:75:37:47:fd:a8:f1:34:3a:a8:f7:d6:ff:5d:d7:
ff:74:01:b0:1e:03:d6:02:dc:28:03:b3:12:14:3d:
cd:f2:05:d6:40:45:2e:ca:8d:b0:96:85:09:98:2a:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:99:94:3F:DF:1C:63:40:B9:03:5B:31:E1:1A:23:0C:80:B4:39:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/254BE540CCBB11EEA21D8F80775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.48.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e3:73:bf:f0:f6:e9:19:66:9c:2f:6a:0e:be:88:c8:bb:34:
8d:5b:0c:48:9d:44:37:81:74:2c:a6:23:c5:61:e8:ec:ea:0e:
52:5c:5a:54:fb:a1:3e:a4:0e:ad:96:c4:22:47:fe:4d:61:3d:
d1:c7:cf:62:04:bd:e3:69:af:0b:52:f4:fb:1e:68:f1:3e:7d:
9a:03:33:b6:c7:c8:d2:d3:7e:5b:77:41:7c:f4:a9:0b:d1:5a:
e7:0f:92:2c:43:7d:d7:be:c6:ae:cb:0c:80:9e:5e:c1:b3:72:
46:2d:c7:35:61:d4:94:07:01:5e:5d:2a:bd:fe:ee:77:94:e9:
ef:fd:58:af:ab:1d:30:30:02:b9:1b:85:c0:77:a3:95:df:19:
d4:18:55:6a:a8:41:a8:5b:cd:b4:41:3a:d4:12:2a:32:04:ef:
60:d1:8e:c8:15:40:46:68:41:2e:0e:0f:b2:57:da:5b:f0:1d:
a0:b1:e6:15:22:07:52:a9:4d:df:ef:02:91:22:c5:a8:98:26:
1f:50:ac:cc:c9:5f:50:b8:72:df:bc:ee:1d:db:b8:c9:ae:e7:
4b:1a:a1:8c:74:37:84:09:1d:2c:e5:f8:8e:5a:11:23:41:2b:
c6:27:74:dc:53:62:4e:e6:56:48:a7:c7:27:f0:8c:70:8e:e3:
71:b6:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:53 2024 by rpki-client on console-ams.rpki-client.org