Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C772C6C056011EFBE5D4C3C017001B1.roa
File: 6C772C6C056011EFBE5D4C3C017001B1.roa (raw, json)
Hash identifier: MaNLgujtw2LGVdVXrM+F8hEyLP19Hq9YGvZltglFebs=
Subject key identifier: C1:19:F8:94:19:1C:8A:44:CB:87:B3:36:80:CD:1C:15:00:62:82:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 867D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C772C6C056011EFBE5D4C3C017001B1.roa
Signing time: Sun 28 Apr 2024 13:08:37 +0000
ROA not before: Sun 28 Apr 2024 13:08:31 +0000
ROA not after: Thu 06 Jun 2024 13:08:31 +0000
asID: 142286
IP address blocks: 156.250.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34429 (0x867d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 13:08:31 2024 GMT
Not After : Jun 6 13:08:31 2024 GMT
Subject: CN=662e4a55-97b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:7f:b2:56:72:bf:6a:0a:c1:d0:74:77:1d:
46:ab:e8:9a:0d:84:d7:14:c7:c2:0c:10:8f:b1:c0:
67:3b:a3:da:ce:dc:85:d4:52:ab:03:35:33:68:8a:
9d:e6:b4:79:ca:7d:4b:56:aa:9c:f6:77:04:ae:03:
bb:d5:c5:1f:68:3c:b0:dc:3e:39:3a:0d:83:a9:d2:
3a:89:e6:63:5b:45:14:95:d9:e0:00:7a:29:81:4e:
00:d9:4a:3b:84:12:6a:78:92:6d:e8:82:2d:c0:66:
11:ac:1f:8e:a1:6b:7c:8e:e9:ff:0f:09:e2:94:1f:
3a:2d:67:e0:a8:dc:56:98:fd:d0:37:70:8f:9c:b1:
22:72:c3:eb:5a:d5:4c:2f:ef:8e:e3:fe:22:e5:33:
e3:83:80:6c:f5:f5:45:70:c3:63:7b:12:73:90:d5:
ba:bf:77:7b:d0:c9:4b:57:8b:0b:ea:f8:36:13:76:
06:f8:4a:ea:a5:75:75:c5:c7:c5:af:01:fa:ef:21:
04:84:62:14:ad:aa:cb:1d:87:ab:57:bb:d0:b0:bc:
af:31:00:36:6c:8f:a4:0b:2b:f3:c0:fa:02:3a:83:
e3:37:7a:31:89:27:af:3c:49:de:12:17:6c:f5:55:
d7:99:4c:06:5b:f3:3e:f3:67:ad:e7:47:4f:01:66:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:19:F8:94:19:1C:8A:44:CB:87:B3:36:80:CD:1C:15:00:62:82:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C772C6C056011EFBE5D4C3C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.8.0/21
Signature Algorithm: sha256WithRSAEncryption
67:04:6d:ed:f3:2e:54:ab:50:bf:90:15:d2:37:2f:40:f9:4a:
64:c3:17:66:a7:ac:17:f8:b6:f8:31:17:e1:36:2e:61:cb:08:
de:cd:82:f5:88:1b:93:d0:68:02:36:c4:de:51:b6:90:ee:8a:
e6:bc:4c:ff:14:e2:4d:18:0e:f6:a7:69:14:0d:20:ca:4e:31:
8b:e8:05:b8:40:9c:93:d6:b9:9b:92:e6:48:9a:8c:55:51:6a:
0b:7d:60:bf:58:6e:3c:e4:04:0e:9b:e1:08:8d:19:5c:de:75:
9a:1a:93:0e:20:9a:d2:0e:87:87:4c:d2:61:30:d5:47:e7:9b:
14:8f:7d:dc:1c:79:90:1f:1d:c3:98:7b:f3:03:a6:28:f8:70:
7a:85:c9:35:ec:7d:86:c5:47:42:8f:b0:de:1a:4f:ff:2b:56:
bf:da:2d:4c:1c:58:08:5b:7e:dd:e1:18:41:64:13:ee:39:de:
dd:91:48:c2:57:2c:be:53:52:98:14:c2:60:20:93:8f:f7:22:
2a:35:a4:b0:b6:61:66:02:4c:74:90:47:8a:a0:bc:ec:24:b6:
d7:6c:f4:21:68:16:8d:1a:c2:4b:0a:95:65:ef:6e:58:5a:40:
b7:2b:24:69:51:65:7d:b0:fc:fc:61:f7:b6:e2:71:1f:dd:0a:
3d:f0:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:17 2024 by rpki-client on console-fra.rpki-client.org