Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/BCB2206490B911EDB137EEEFF1222468.roa
File: BCB2206490B911EDB137EEEFF1222468.roa (raw, json)
Hash identifier: qXxsfL6E1f4ZbFdHxJvfTpEcuTwjWp7jvPocXAoHmgQ=
Subject key identifier: 15:3A:72:3A:32:E2:41:F5:A8:3F:BD:44:8D:08:A1:4A:DA:F1:3C:B8
Certificate issuer: /CN=F364FE7FAR/serialNumber=651E91968E3171C17CEEC0C449178EE7E1497418
Certificate serial: 02
Authority key identifier: 65:1E:91:96:8E:31:71:C1:7C:EE:C0:C4:49:17:8E:E7:E1:49:74:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/ZR6Rlo4xccF87sDESReO5-FJdBg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/BCB2206490B911EDB137EEEFF1222468.roa
Signing time: Tue 10 Jan 2023 07:38:13 +0000
ROA not before: Tue 10 Jan 2023 07:38:02 +0000
ROA not after: Sat 11 Jan 2025 07:38:02 +0000
asID: 328200
IP address blocks: 156.38.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.crl
rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.mft
rsync://rpki.afrinic.net/repository/arin/ZR6Rlo4xccF87sDESReO5-FJdBg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364FE7FAR/serialNumber=651E91968E3171C17CEEC0C449178EE7E1497418
Validity
Not Before: Jan 10 07:38:02 2023 GMT
Not After : Jan 11 07:38:02 2025 GMT
Subject: CN=63bd15e5-1433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:57:d3:3b:b4:df:99:a9:be:7c:a8:3f:77:
10:97:c6:7d:87:ab:d7:36:46:4d:3c:2b:eb:78:aa:
cb:2e:47:f4:c3:eb:93:4f:16:c2:98:ae:00:51:4d:
43:78:7f:cc:64:18:6c:bd:49:8f:d2:21:65:c5:46:
f6:43:ef:55:4e:d1:a6:0e:12:22:c8:09:06:61:e7:
ef:ee:d2:af:c7:9f:9e:c9:35:d4:e3:f3:71:85:36:
99:cb:6f:5d:0b:b1:f1:fe:22:5f:06:52:15:01:20:
6c:39:54:1a:7e:3e:76:78:55:a1:77:fd:39:bf:f1:
c3:e9:05:5e:1b:7e:9c:75:88:aa:ec:d4:72:63:ed:
6a:eb:b3:d2:eb:f1:f3:7f:aa:58:a4:09:7a:74:59:
2e:53:6a:e1:ec:50:0f:63:24:33:f5:83:12:ef:03:
ce:29:e3:d2:a4:18:64:e1:42:7b:f5:49:ce:e5:16:
7a:ec:8f:0d:6f:dd:50:21:99:b2:b4:7e:f6:80:bc:
5f:8d:da:7f:a3:dd:84:63:52:82:22:a6:16:07:87:
2c:7d:3c:3d:73:82:9f:5e:23:80:31:37:73:60:24:
a6:2f:32:5b:fe:4b:fc:d1:86:9a:6f:44:ab:09:82:
53:4d:5f:ca:d9:72:1a:ad:00:23:92:74:fa:cc:3c:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:72:3A:32:E2:41:F5:A8:3F:BD:44:8D:08:A1:4A:DA:F1:3C:B8
X509v3 Authority Key Identifier:
keyid:65:1E:91:96:8E:31:71:C1:7C:EE:C0:C4:49:17:8E:E7:E1:49:74:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZR6Rlo4xccF87sDESReO5-FJdBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/BCB2206490B911EDB137EEEFF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.38.32.0/19
Signature Algorithm: sha256WithRSAEncryption
15:f3:18:4d:85:82:f7:94:c3:4a:3a:1a:c2:93:11:9a:61:54:
14:9d:06:a2:eb:92:80:d2:c3:eb:65:d1:e4:da:1e:5c:d2:b1:
2c:ec:58:1e:b7:14:f1:c0:f7:89:ef:ec:40:cc:ba:0a:d0:b5:
56:e4:6d:41:bf:e9:20:7e:16:67:18:9c:5e:0e:9f:0a:89:81:
1e:3c:74:ab:1d:bf:2c:5d:8a:7b:51:19:4c:ca:ab:3a:78:3c:
6f:ad:e6:13:d2:83:31:4b:5f:ba:28:cc:75:39:0b:b5:76:2a:
6c:0f:9c:6e:f6:78:c2:f8:d3:cb:f0:7f:3c:ef:30:42:53:36:
d1:51:30:b3:1e:71:57:b4:2a:26:fb:db:03:52:84:29:5a:cc:
18:22:18:42:62:78:22:0e:66:5c:a6:bb:22:b6:ab:54:64:96:
2e:0f:26:d4:ee:a6:da:b3:f2:35:1a:37:c4:5f:04:f1:73:8d:
5c:3e:51:ed:9f:6a:28:b6:5d:c5:ee:b8:7c:f7:f0:d0:49:63:
b5:da:96:05:80:52:cd:65:83:aa:1e:e7:f2:0a:7d:30:c8:3a:
25:e7:99:a4:c8:c5:f5:ac:31:ce:86:79:79:de:4c:b1:ea:d8:
91:5b:eb:25:1d:d0:bf:c6:06:37:13:a8:6f:a4:21:53:3c:64:
57:31:7e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org