Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1856FE0FB9711EEB23D21F7007001B1.roa
File: A1856FE0FB9711EEB23D21F7007001B1.roa (raw, json)
Hash identifier: B/3nYE2MNPdja+xJmhVSeosx1q8A1mf+bafz58KEr2Q=
Subject key identifier: 01:C4:98:3B:62:86:87:1A:D3:E2:C8:0A:D3:BB:10:95:FA:8C:9D:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8299
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1856FE0FB9711EEB23D21F7007001B1.roa
Signing time: Tue 16 Apr 2024 02:18:36 +0000
ROA not before: Tue 16 Apr 2024 02:18:33 +0000
ROA not after: Sat 18 May 2024 02:18:33 +0000
asID: 174
IP address blocks: 156.236.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33433 (0x8299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 02:18:33 2024 GMT
Not After : May 18 02:18:33 2024 GMT
Subject: CN=661ddffc-ee6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:9c:25:34:50:1e:fe:ab:c0:c0:7c:ce:25:
53:ee:87:85:67:3e:63:d7:ab:3f:41:52:ad:c5:ca:
10:5e:eb:ad:8e:03:5b:27:1f:aa:50:9c:2c:aa:e0:
33:8a:c5:d2:0e:62:ec:fd:d3:28:78:7b:47:2c:9e:
ee:14:fb:02:62:84:2f:b7:2d:93:77:76:06:7c:0d:
cf:03:a3:3b:bc:99:bb:b1:42:65:64:c6:2f:11:2d:
1a:63:28:e1:49:79:0c:06:d9:37:21:95:93:d6:4a:
bf:c8:88:a2:a3:0b:78:e7:15:32:58:36:16:23:9f:
f8:41:3d:c0:dc:e1:d2:4c:07:9f:a5:e6:ae:20:86:
7d:94:f9:69:c0:6e:a2:76:e6:4c:96:f8:3b:7b:5e:
40:3f:05:57:57:7e:4e:52:32:25:16:2e:b3:9d:f6:
bd:07:f7:78:a0:0c:d8:82:6d:12:fb:b9:5a:3e:4a:
b8:ad:7d:49:c1:33:3e:f4:07:69:6e:c3:11:92:80:
e9:e0:f0:b5:25:81:74:a4:58:5e:dd:e5:c0:2b:87:
e8:dd:39:de:d5:aa:12:22:3a:27:04:3f:97:b3:5a:
a3:5a:cc:cf:90:84:e0:63:de:6f:80:8e:ba:fa:1b:
14:3d:3f:45:56:68:81:34:be:20:1c:ef:bd:c7:9a:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:98:3B:62:86:87:1A:D3:E2:C8:0A:D3:BB:10:95:FA:8C:9D:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1856FE0FB9711EEB23D21F7007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.86.0/24
Signature Algorithm: sha256WithRSAEncryption
49:03:71:72:46:56:b7:fb:11:e4:01:8f:bf:e3:84:6f:ab:ab:
52:87:7d:84:25:d4:f5:80:94:74:ab:14:d8:30:b4:5a:39:21:
01:de:db:f3:d8:2a:c8:d8:a5:db:f9:18:41:f4:1c:06:be:48:
a7:e0:2a:42:7a:da:d2:db:13:48:02:e1:a5:9c:17:4f:52:b9:
b8:3d:23:da:60:dd:fb:4f:c3:8e:34:8c:69:47:29:39:ae:bb:
be:19:c4:f3:f6:59:5f:3e:46:94:e5:cc:f1:9d:c5:4c:d1:4e:
04:56:65:d1:81:87:f3:39:2b:c8:3a:b7:ab:b7:ee:fe:12:cc:
5e:92:16:bd:4a:1b:58:2e:78:18:e8:8b:3b:d1:36:37:0b:eb:
05:7a:ec:6d:8a:2e:22:59:38:c7:04:f0:ad:9d:1c:3c:a0:ff:
73:b7:55:10:f8:5f:34:1f:ed:0f:b4:df:81:90:9d:d4:67:0d:
10:51:b0:43:94:70:8f:eb:c5:e4:01:73:40:84:cf:29:af:90:
6c:1f:90:69:11:37:f7:0c:74:35:18:9c:0e:a8:35:4e:4c:a3:
3c:8a:9f:66:d0:de:07:23:06:50:c3:e5:bf:5f:f6:c5:d2:93:
fc:ca:f6:51:c7:27:85:2c:36:b8:0b:f5:dd:68:10:b0:ee:ec:
78:b6:b2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:23 2024 by rpki-client on console-ams.rpki-client.org