Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0122D0743B2B11EE978B4C414AD9E6FC.roa
File: 0122D0743B2B11EE978B4C414AD9E6FC.roa (raw, json)
Hash identifier: yKXkN3H7XoOpKKQ8WKwz0O098TH4PJWa9qWCXVVvIc4=
Subject key identifier: 80:23:96:6C:42:D9:1E:42:2A:A3:EB:72:CB:66:27:E9:E1:B1:6B:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0122D0743B2B11EE978B4C414AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:17:19 +0000
ROA not before: Tue 15 Aug 2023 05:17:15 +0000
ROA not after: Mon 27 May 2024 05:17:15 +0000
asID: 140627
IP address blocks: 156.247.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13793 (0x35e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:17:15 2023 GMT
Not After : May 27 05:17:15 2024 GMT
Subject: CN=64db0a5e-a842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:3b:d2:fb:b1:34:eb:9e:47:8f:8b:58:16:
67:58:ab:51:93:8a:cf:48:69:3d:36:5a:d1:31:54:
5f:ae:f6:45:ce:34:70:94:c0:55:d8:4a:6f:46:bc:
41:b3:75:27:0c:47:d9:41:da:b0:7d:70:32:36:d2:
9d:b7:c5:b1:44:b9:27:4f:49:cf:af:3c:89:8f:82:
a2:13:53:6b:d8:ec:62:21:88:b6:72:38:b5:0e:f0:
39:a5:97:5e:6d:cd:6f:bc:f8:58:95:76:05:9a:56:
92:00:82:49:e2:28:23:8e:17:76:25:1a:af:dc:07:
1c:53:17:ca:9b:d4:aa:e3:ea:10:6e:fa:93:93:18:
0e:bf:cd:07:8c:8a:e3:47:9c:60:93:1f:bd:38:b5:
86:00:c2:62:98:af:fb:74:95:c3:32:dc:f4:72:bf:
c8:1b:07:c8:c5:fc:4b:2a:8d:c0:90:4a:85:a1:b7:
56:e1:af:81:f0:1b:78:ab:21:7d:1b:96:58:08:5b:
94:71:1f:3f:b0:ce:7d:59:66:f0:e6:ec:98:94:ce:
0b:6f:f6:ff:2e:9b:96:06:33:be:bc:a0:00:72:5e:
42:a4:aa:ca:b6:43:a9:11:a6:97:44:3c:97:ba:d5:
b4:4d:ae:87:22:9d:20:fa:5d:c5:44:f8:f0:39:e4:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:23:96:6C:42:D9:1E:42:2A:A3:EB:72:CB:66:27:E9:E1:B1:6B:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0122D0743B2B11EE978B4C414AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6e:c3:73:0d:0b:24:8b:10:8f:f2:3d:93:9a:26:9c:94:a8:
d0:3f:46:55:76:0c:88:20:4f:e4:db:fc:ed:50:00:ec:20:ac:
28:b3:3a:04:bb:46:ff:1b:63:ca:98:94:99:f2:eb:37:50:b4:
fe:23:2d:7a:20:d4:a3:cb:72:12:93:a9:66:62:ef:e8:39:d1:
6d:1f:c1:49:88:36:be:44:70:8d:92:12:fd:98:3c:75:da:a6:
46:b2:be:8f:4f:ce:5d:86:fe:4f:c7:f2:3c:77:9a:bc:ee:b3:
4d:a8:5c:2b:84:59:d2:8a:75:6c:a5:56:8f:29:87:27:b1:78:
52:45:2d:10:31:6c:b0:2e:6e:e3:fc:95:2c:14:29:be:0b:c2:
54:54:8a:4a:b1:79:bc:07:79:4e:9f:92:0a:8c:60:d6:a8:a2:
96:c9:3e:8b:91:fc:a2:de:1a:ab:a0:06:56:ee:a9:d7:29:80:
5a:7a:10:a2:09:5f:51:bf:f2:81:46:f8:08:a7:bb:a1:40:f1:
52:9a:43:5d:79:61:01:e4:4d:83:62:92:7a:d6:ba:b6:db:79:
34:a8:92:cc:7b:c5:8c:8e:ad:89:78:27:20:2a:0a:01:c7:b1:
ae:c4:15:78:01:67:91:cb:b7:f9:37:df:d1:a5:03:fe:45:bf:
f5:f4:4f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:03 2024 by rpki-client on console-fra.rpki-client.org