Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F837C56A277E11EE9EDBA3144AD9E6FC.roa
File: F837C56A277E11EE9EDBA3144AD9E6FC.roa (raw, json)
Hash identifier: CUa6tdakRZRxALOKfQsois+glQQyd0qT6Q4RoMaFXRA=
Subject key identifier: 8D:51:FF:F1:1D:66:DE:3A:EB:0B:8E:DC:2A:1F:27:35:22:7D:B4:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 31B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F837C56A277E11EE9EDBA3144AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:27:58 +0000
ROA not before: Fri 21 Jul 2023 04:27:54 +0000
ROA not after: Thu 13 Jun 2024 04:27:54 +0000
asID: 22773
IP address blocks: 156.229.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12727 (0x31b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 04:27:54 2023 GMT
Not After : Jun 13 04:27:54 2024 GMT
Subject: CN=64ba094e-23dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:9c:9c:31:79:58:68:10:0d:b5:36:04:ec:
a2:59:72:b0:f1:cb:ac:44:1b:a8:12:b1:60:49:b8:
e0:f4:29:0c:bb:37:ce:bf:f3:ad:42:e7:85:d9:b1:
b4:43:7c:e9:1f:8e:56:e4:6c:51:35:93:74:d7:a9:
4e:9c:28:6b:83:f0:20:2c:ee:50:ed:5f:02:ae:e2:
cd:95:08:ef:9c:9e:af:d4:2d:5e:47:d2:35:52:50:
af:01:26:1b:e2:dc:a9:8a:a6:cd:32:e0:d1:d7:bb:
b5:f9:f8:69:9e:90:fa:54:5e:4a:4d:b9:dd:ad:7f:
34:f8:d8:8b:5a:60:79:d0:33:4c:82:d2:25:7e:6e:
79:fd:ab:9f:c1:f9:91:f2:56:02:6a:f4:08:dc:90:
15:0f:52:cf:45:30:a9:1f:ed:b6:8f:db:31:58:09:
d8:d6:8e:c7:e6:5a:ab:49:47:39:2c:2d:a2:fe:9b:
6a:65:11:fb:90:5e:49:1f:3e:d8:8e:5a:bb:65:66:
d9:fc:69:50:b5:d9:ee:ff:94:14:50:e1:e4:c1:86:
35:55:15:c4:88:82:86:62:92:08:4f:cc:d7:a9:9a:
6e:7d:f2:0c:19:3e:0f:c9:31:0c:eb:c1:f1:85:6f:
ba:0a:74:36:78:01:72:cc:02:ad:53:39:94:12:3d:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:51:FF:F1:1D:66:DE:3A:EB:0B:8E:DC:2A:1F:27:35:22:7D:B4:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F837C56A277E11EE9EDBA3144AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:0c:83:ad:95:d4:8d:a5:71:69:e4:0c:63:7e:02:c6:d2:3d:
27:54:31:18:29:28:30:bb:3c:9f:43:28:b0:86:d0:34:99:9c:
ac:06:1f:78:be:94:10:da:9c:f2:1f:a2:08:78:f8:3e:33:04:
1d:64:20:16:07:2b:b5:0b:4d:37:52:6e:7b:7f:bd:5f:15:ec:
92:be:94:da:04:e0:20:86:6d:31:b7:a0:aa:86:d8:6e:6f:fc:
66:60:90:a8:32:0c:5f:22:36:e5:ba:f0:ad:51:33:7c:ff:f0:
98:4a:6b:f2:72:dd:d8:fb:c3:ae:ca:a5:bb:da:a8:72:65:6a:
b8:f2:fb:34:32:db:c9:dd:e6:8a:bf:6d:21:4a:8c:5a:43:28:
7e:5d:4b:b6:e4:f1:31:17:a1:a8:8c:7b:9b:78:6f:40:d2:f9:
9b:cd:c2:a6:e4:ec:bb:12:29:05:6c:21:bf:40:0c:fa:67:42:
82:05:4e:64:ba:86:c6:18:c7:52:fe:c8:37:fc:98:ed:4d:34:
8a:1c:e6:bd:38:da:18:13:eb:a5:f2:e8:58:3b:5e:32:f1:bd:
d8:19:ea:d9:d3:3f:2c:34:fc:58:04:91:e4:f4:e2:1b:31:14:
9d:79:d7:e5:93:e3:1f:d2:64:36:6b:32:69:09:9d:5d:4b:99:
01:c2:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:23 2024 by rpki-client on console-fra.rpki-client.org