Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D91C3D3805F311EF9019B370017001B1.roa
File: D91C3D3805F311EF9019B370017001B1.roa (raw, json)
Hash identifier: c6Z2BRGnYBpnpwk1Xe2FzMyEyK61J15WRHxTLygV+h8=
Subject key identifier: BC:4D:80:AA:05:59:FA:74:30:0A:D2:30:37:90:E9:BD:DA:A0:93:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D91C3D3805F311EF9019B370017001B1.roa
Signing time: Mon 29 Apr 2024 06:43:55 +0000
ROA not before: Mon 29 Apr 2024 06:43:51 +0000
ROA not after: Tue 04 Jun 2024 06:43:51 +0000
asID: 142062
IP address blocks: 156.239.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34464 (0x86a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 06:43:51 2024 GMT
Not After : Jun 4 06:43:51 2024 GMT
Subject: CN=662f41ab-0794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:1e:a9:8c:13:f3:dc:3a:6c:07:49:95:a8:
33:55:ee:41:8a:a9:27:0b:f9:c7:7a:16:64:3d:d4:
49:52:ca:6b:f9:a0:92:85:20:b7:5c:88:25:26:ad:
53:4b:ba:88:07:30:6f:24:7f:51:54:c9:bc:f3:9f:
95:36:59:49:01:cb:56:9e:d9:33:b9:c2:11:0a:21:
fb:6e:33:90:73:37:33:36:13:90:f1:35:24:54:0d:
39:af:70:31:f8:0a:26:ac:48:ea:48:93:b9:ba:78:
f9:50:e9:aa:f6:cf:54:d3:10:62:7f:e4:8b:09:b3:
4c:11:73:84:68:bb:56:8b:95:86:0a:b3:b4:85:03:
25:d1:3d:4d:fc:f3:48:74:95:df:39:ea:2b:80:80:
57:2a:c7:25:7c:57:1d:18:8d:81:74:57:8d:ae:3e:
3e:88:9f:a8:9d:c7:dc:4f:ce:d0:03:39:92:ff:cc:
b4:ba:69:ff:5f:11:b1:56:67:c9:a0:f9:ad:53:63:
30:d3:2f:d7:7e:5f:bc:b7:8d:39:0c:2b:b0:d2:8c:
73:55:1f:e0:65:59:1f:ca:31:ee:ed:b1:0c:78:39:
f1:62:bd:dc:61:65:3b:3f:3b:b5:69:de:09:cc:44:
6e:df:86:46:5d:4a:cf:3d:21:32:ee:3a:41:0b:c4:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4D:80:AA:05:59:FA:74:30:0A:D2:30:37:90:E9:BD:DA:A0:93:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D91C3D3805F311EF9019B370017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.192.0/19
Signature Algorithm: sha256WithRSAEncryption
72:44:1f:db:1c:5c:11:32:af:03:4f:f6:83:29:3d:b5:da:55:
44:a1:ff:cc:b1:70:32:6a:36:b4:86:67:fe:18:f4:7f:f6:54:
f3:e4:b7:35:98:7f:d0:77:ea:4a:b8:87:80:14:a7:e9:3f:8a:
0d:a0:5d:4b:eb:63:c1:81:38:7e:fa:7a:e4:a5:a5:93:9f:20:
d1:65:82:bf:1a:ad:53:d0:d5:ff:34:9a:21:c5:1e:96:d5:44:
2e:09:0b:1e:88:0e:19:d6:5e:67:5b:ae:54:7d:82:c2:1d:af:
81:56:6e:88:90:2d:78:63:6f:e3:e9:14:5c:d1:4d:e4:49:d4:
50:a2:18:c7:69:a8:8b:cc:2f:4d:42:ef:f2:a4:89:8a:7c:ee:
3a:60:78:d2:81:3e:ea:cc:dc:6e:09:86:f7:cb:84:8f:63:c9:
32:52:56:d6:a0:f6:f1:d1:04:da:74:32:6d:04:8b:30:5a:3c:
70:10:75:cf:d6:fb:6d:09:87:d2:0e:aa:f5:37:da:1d:fa:14:
5e:f0:b2:f6:f9:d3:26:4d:67:d1:b4:a8:4a:11:6b:ae:47:6d:
48:5f:34:01:5e:ec:19:2d:af:46:39:57:2f:f3:24:af:17:68:
36:7c:74:61:57:2c:3d:b1:ff:10:f7:6d:61:72:b1:59:7a:ab:
38:8a:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:04:02 2024 by rpki-client on console-ams.rpki-client.org