Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63D9EF0605EF11EFAED2294B017001B1.roa
File: 63D9EF0605EF11EFAED2294B017001B1.roa (raw, json)
Hash identifier: oY4GssmIEEx7XBL7webiGIzwKl9jIMgtybmVLef/SP4=
Subject key identifier: 57:08:71:AC:A4:FF:BB:F6:43:0D:2E:F0:48:7D:50:70:CF:11:A5:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8686
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63D9EF0605EF11EFAED2294B017001B1.roa
Signing time: Mon 29 Apr 2024 06:12:00 +0000
ROA not before: Mon 29 Apr 2024 06:11:57 +0000
ROA not after: Fri 31 May 2024 06:11:57 +0000
asID: 174
IP address blocks: 156.236.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34438 (0x8686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 06:11:57 2024 GMT
Not After : May 31 06:11:57 2024 GMT
Subject: CN=662f3a30-df74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:6c:55:15:15:ab:81:94:f8:6e:b3:1a:89:
69:95:74:3f:c3:f8:cb:6d:73:1a:50:ce:c6:0f:ec:
d9:81:6d:4e:1a:d8:02:be:ff:00:8c:36:91:13:ae:
7e:e4:6c:f3:0f:56:d5:75:03:14:c0:69:a3:1a:b0:
0f:b6:c5:4d:6f:a3:5a:54:63:0a:4b:68:82:7b:13:
b9:06:83:d7:92:32:0d:7b:4f:71:3a:c8:15:ca:98:
12:8a:d3:a4:55:02:9c:e5:fd:ce:8a:d2:07:56:bd:
08:fc:19:a7:89:9a:d4:16:d0:92:4c:da:f7:e2:e2:
1a:b5:68:f3:c2:45:ad:c8:5c:8b:26:17:ce:33:b6:
12:9f:b9:95:af:7d:0e:89:80:01:d4:aa:87:f2:88:
29:a1:49:6e:07:35:4a:1d:4a:b9:5e:a7:c6:4b:96:
31:6d:88:7d:46:4b:34:f6:60:4c:0f:8e:d9:89:d4:
16:47:e0:9a:d0:66:b8:f5:ad:60:14:5c:25:8f:06:
4c:c0:2f:69:bc:63:9b:a7:01:78:23:4a:28:7a:0e:
f3:c1:c3:51:3c:6e:bf:9a:86:2c:31:9e:06:8b:62:
34:89:0d:25:b3:32:40:b3:f5:37:29:ee:46:e0:85:
c4:d3:c9:f0:2f:48:a0:8f:a8:15:7c:12:73:cd:a7:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:08:71:AC:A4:FF:BB:F6:43:0D:2E:F0:48:7D:50:70:CF:11:A5:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63D9EF0605EF11EFAED2294B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
74:6a:af:2f:78:cd:ce:67:33:dc:46:14:87:e1:9f:a6:1b:49:
93:9e:c3:68:12:98:28:ce:a7:8c:9b:ad:64:a2:a0:de:b5:4c:
82:85:f2:85:19:57:21:3a:0e:23:42:99:7e:3b:8c:f0:74:3a:
13:69:60:d7:da:b6:8d:87:22:3a:c8:9a:72:b9:55:b3:82:d3:
c9:45:f1:54:df:bc:8a:c1:18:70:f0:7e:10:df:16:7b:31:ca:
bd:75:14:bb:6f:91:a4:be:c6:1f:c0:3f:71:08:31:b7:14:0a:
97:f6:0f:26:42:f5:2d:8d:eb:cb:a8:76:e1:53:0f:30:21:fc:
0b:de:25:12:24:76:d8:1e:ad:b7:e9:2e:4f:b8:32:a4:d8:f7:
34:a6:83:a9:13:ec:f8:44:da:f6:08:3f:cb:8c:fe:88:e6:1a:
2a:93:07:88:66:39:69:a1:6e:40:d4:d0:bc:5a:07:5c:20:1a:
0b:2b:62:e0:04:91:eb:bd:c6:2c:f7:bf:5c:8e:91:00:35:e9:
7b:a3:5f:45:bd:69:a4:e4:52:fd:4b:cc:21:da:3d:21:66:1e:
a8:fe:22:8d:f5:b0:6c:20:40:4c:d1:dc:21:d5:07:b1:e9:1f:
9c:64:71:fb:78:92:d3:86:e4:71:73:5d:62:43:da:9d:51:aa:
28:b5:e1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:39:51 2024 by rpki-client on console-ams.rpki-client.org