Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BDB3704039711EFABD03E2E017001B1.roa
File: 7BDB3704039711EFABD03E2E017001B1.roa (raw, json)
Hash identifier: RRS8IMmn8vkQ9PGSQ5WyjvINHL53aiBJn51eePCE/0w=
Subject key identifier: 72:FC:AB:E3:B0:B6:71:E1:F5:DC:B8:4A:A8:9E:11:D0:23:67:B2:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 865C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BDB3704039711EFABD03E2E017001B1.roa
Signing time: Fri 26 Apr 2024 06:37:43 +0000
ROA not before: Fri 26 Apr 2024 06:37:39 +0000
ROA not after: Mon 27 May 2024 06:37:39 +0000
asID: 18013
IP address blocks: 156.226.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34396 (0x865c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:37:39 2024 GMT
Not After : May 27 06:37:39 2024 GMT
Subject: CN=662b4bb7-321c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:51:3b:86:aa:66:e9:7f:25:28:17:ea:de:
10:5d:81:94:02:48:18:46:22:dc:63:61:a1:02:64:
99:19:9e:aa:e9:79:56:12:d6:ed:db:97:41:e3:aa:
65:1e:ed:a1:26:65:63:7c:c8:a8:fc:da:4e:1a:17:
59:17:c7:40:60:59:0f:ee:14:31:10:0d:f5:ac:21:
cc:d4:60:89:a6:19:07:2a:12:23:8d:d7:78:cf:f7:
03:1a:99:e1:2d:a3:62:41:f1:68:46:c9:2d:50:a6:
67:d1:83:25:36:5e:ca:2b:d5:67:61:24:a4:ba:d6:
f3:ec:26:1e:3a:8b:57:c1:af:8f:eb:6a:c6:66:e3:
49:e0:41:49:c7:d6:ae:38:e9:18:bf:43:f0:45:81:
bf:a8:87:ca:51:15:f2:51:2b:8c:db:f6:e7:e3:6b:
8d:32:6d:d9:86:52:2f:5a:8b:05:22:92:79:18:eb:
51:bf:df:6b:c2:75:18:95:c1:18:c5:a6:dd:2d:13:
9a:c1:b2:0e:ec:3d:74:09:57:82:44:fe:8d:e1:c8:
08:4d:ab:88:95:00:39:a6:d3:0e:57:62:1f:25:75:
9b:19:65:71:00:59:19:5a:8c:e5:d8:bc:ea:99:38:
b9:a8:eb:4e:19:f2:66:e2:6a:5c:14:8d:c9:68:15:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FC:AB:E3:B0:B6:71:E1:F5:DC:B8:4A:A8:9E:11:D0:23:67:B2:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BDB3704039711EFABD03E2E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.167.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ef:35:9c:83:45:1e:fb:74:9f:13:75:55:0e:9b:d4:ee:a6:
98:0f:65:58:74:14:76:a7:8d:44:72:b8:23:60:d6:1c:97:a5:
dc:27:7a:9f:0c:9b:a1:03:d4:56:fb:91:db:52:31:4c:38:3f:
93:08:a3:97:ae:0f:78:33:74:7e:88:d5:43:26:9c:f3:aa:31:
f5:0d:bc:cf:e9:8c:3a:87:a0:d4:be:d5:34:8d:df:5f:2a:99:
77:78:2a:12:9c:9a:1d:a1:6b:5e:e1:48:7b:61:20:38:f0:30:
08:58:4c:a9:dd:df:80:6f:8f:fa:7a:eb:a5:b9:cf:64:23:62:
fb:0b:53:83:c0:d3:d7:77:0d:c2:fa:3c:ca:cf:db:9d:3d:85:
ea:44:ea:0f:e8:10:e6:92:d3:23:59:4b:0e:e7:53:ad:53:8b:
67:d7:12:45:33:04:3f:b3:2d:88:9d:dc:41:5d:4d:d0:8b:83:
b2:5c:64:42:0f:76:90:f6:c0:e9:94:94:91:cb:06:1a:77:cd:
1f:c7:96:98:89:4f:54:9b:7a:2c:4b:ee:7c:52:1d:9b:96:7a:
d0:2e:bc:ea:a8:52:f5:57:07:b1:1f:0b:35:d6:55:af:ce:b0:
14:42:22:29:9b:e6:9f:30:a1:50:f7:d0:55:87:01:da:7a:0a:
bb:c5:d2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:18 2024 by rpki-client on console-fra.rpki-client.org