Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3174FA0039311EFBAA5F70D017001B1.roa
File: A3174FA0039311EFBAA5F70D017001B1.roa (raw, json)
Hash identifier: f6bTKbJcf0AVozMGFJ//oyBPpN33bJT2uIoEx0l8AHE=
Subject key identifier: BF:50:CA:45:A0:90:99:98:39:08:05:05:80:38:58:B0:45:AA:A5:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8642
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3174FA0039311EFBAA5F70D017001B1.roa
Signing time: Fri 26 Apr 2024 06:10:11 +0000
ROA not before: Fri 26 Apr 2024 06:10:06 +0000
ROA not after: Sat 07 Sep 2024 06:10:06 +0000
asID: 138195
IP address blocks: 156.241.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34370 (0x8642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:10:06 2024 GMT
Not After : Sep 7 06:10:06 2024 GMT
Subject: CN=662b4543-b120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:f5:d2:fa:cb:3b:fc:ac:22:9a:18:d7:4e:
4b:a2:42:2c:2f:a0:93:73:b7:91:be:5b:59:42:87:
de:d1:39:78:51:48:a8:16:65:6f:76:8e:fb:bc:fc:
b2:f8:d7:bb:61:2e:6e:f5:9f:d3:d6:e8:78:ce:3e:
27:03:be:8f:0b:47:f7:ab:cb:56:37:0c:98:98:05:
38:a8:a0:63:11:27:ff:92:4c:3d:93:1d:a9:e1:5e:
78:0d:8c:c1:5c:a7:27:89:1b:65:1b:a0:a3:cb:d3:
67:69:d8:ac:58:0b:52:e8:1f:3c:8a:20:f0:b2:ad:
0e:32:e5:44:2c:b8:5d:eb:df:a9:33:b8:42:1f:dd:
77:d2:af:53:23:4f:98:96:43:1c:0c:c9:a3:3f:93:
fb:bf:3f:0a:39:c9:b2:31:ae:9a:56:79:02:cd:56:
86:27:10:bd:bc:b2:fb:46:4a:6a:b7:c1:7a:a2:36:
37:03:ff:b0:d4:c9:b2:26:b9:a8:38:85:3a:8d:7b:
3c:81:31:6a:ed:9e:03:eb:b1:eb:23:cd:e0:d7:f6:
bd:78:37:19:02:01:cc:68:14:d2:e2:fc:79:63:88:
be:77:ac:90:a5:40:ea:d9:e3:44:c2:18:7a:71:4d:
b9:21:2b:66:9f:c1:ae:96:a3:3c:81:55:2b:6f:18:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:50:CA:45:A0:90:99:98:39:08:05:05:80:38:58:B0:45:AA:A5:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3174FA0039311EFBAA5F70D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.16.0/20
Signature Algorithm: sha256WithRSAEncryption
11:07:a8:d1:68:f1:89:a9:90:1c:dd:bf:1c:46:c2:a0:8b:32:
e8:d2:20:14:3e:5f:e1:8e:3a:ca:ac:fb:2d:8b:34:e0:de:e5:
3e:85:69:4a:b6:1c:e8:46:d4:94:c4:78:89:3e:82:6f:29:25:
52:c0:34:37:77:dd:98:e9:c7:b8:89:7b:00:e3:dd:ec:73:9e:
94:b5:99:c8:98:03:c9:66:50:ef:41:7f:a4:4b:cb:41:f9:e1:
72:2e:04:f8:09:a3:2a:e1:49:0e:f9:d7:01:48:d6:f9:cd:ce:
6e:f9:84:93:25:59:00:ae:27:09:31:90:72:43:b3:c0:4b:64:
10:4b:41:a0:ae:71:08:e0:f1:b3:16:3b:77:06:6d:51:87:b8:
e7:82:ad:44:2f:54:36:3b:01:1c:b8:fa:ff:5f:b7:94:18:d3:
a8:05:c5:8e:90:8f:86:ec:21:f7:0f:e8:3a:87:8a:78:ce:21:
07:b6:f1:5f:d8:de:83:75:13:76:7d:d6:5e:0a:d1:e8:33:a5:
72:ad:a1:17:32:35:ce:34:1a:4c:11:ab:3b:50:63:eb:1a:7f:
87:0d:ff:89:aa:34:09:83:36:11:2b:36:aa:bb:69:0c:ea:4c:
ed:59:f4:53:a1:a1:f3:7e:de:d5:d4:c5:8f:72:ce:ea:bd:49:
e1:0b:4c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:03:59 2024 by rpki-client on console-ams.rpki-client.org