Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/019B4B8E3B2711EEB0F54E354AD9E6FC.roa
File: 019B4B8E3B2711EEB0F54E354AD9E6FC.roa (raw, json)
Hash identifier: PmMz2jShEAZnMKYo/PLpCyBn89/W0r0IGmskOlH9WfA=
Subject key identifier: 90:BD:B5:88:99:48:79:FE:10:AD:81:58:53:88:F1:7E:29:9E:46:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/019B4B8E3B2711EEB0F54E354AD9E6FC.roa
Signing time: Tue 15 Aug 2023 04:48:41 +0000
ROA not before: Tue 15 Aug 2023 04:48:38 +0000
ROA not after: Mon 27 May 2024 04:48:38 +0000
asID: 140627
IP address blocks: 156.247.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13731 (0x35a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 04:48:38 2023 GMT
Not After : May 27 04:48:38 2024 GMT
Subject: CN=64db03a9-a646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:fa:94:ad:f3:4b:b8:e4:71:01:2c:03:0d:
1e:08:d6:c8:16:28:13:2e:4e:f3:15:c9:d9:16:01:
17:4f:cc:21:37:9e:b3:6b:ba:7c:7f:cd:2f:41:5c:
9f:d9:6d:d1:27:87:83:5a:41:7e:c9:cd:fa:d6:c6:
02:6e:77:7c:e1:e7:16:7b:d1:9e:45:3c:09:29:09:
97:3b:dd:af:3b:22:50:87:50:88:b3:64:60:d1:4e:
43:8a:b9:ad:e5:0c:85:a1:d0:43:2c:0f:12:32:4d:
7e:f7:d4:b7:5d:3a:1d:33:22:b5:a8:67:ae:a1:a0:
e6:5c:c9:fd:ee:ea:46:07:6a:b0:e6:3a:10:5b:0a:
2c:ed:74:a5:5b:40:69:b8:56:48:56:af:e5:b4:dd:
72:51:d4:00:9f:66:7a:df:1b:5a:a0:aa:ca:19:51:
34:8c:81:09:51:62:59:52:e1:2f:e9:01:69:c8:4c:
74:c8:ee:97:b7:5c:72:ba:02:a6:41:23:ca:42:01:
2f:1c:de:6f:96:6a:fe:de:4d:71:05:d4:f8:31:97:
da:33:52:2f:c4:30:61:81:3d:94:02:3b:dc:83:72:
61:d9:1a:be:c7:78:ce:f5:65:48:be:40:f1:71:50:
b6:ce:41:0b:2d:83:d0:de:cd:3a:3a:35:cb:f8:c0:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BD:B5:88:99:48:79:FE:10:AD:81:58:53:88:F1:7E:29:9E:46:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/019B4B8E3B2711EEB0F54E354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.240.0/24
Signature Algorithm: sha256WithRSAEncryption
39:3b:08:a1:4b:f1:21:05:23:df:2e:a1:4e:ac:24:ca:ac:2c:
26:8c:bc:2e:f5:81:bf:e7:e9:c9:e8:0f:21:db:9e:e3:ac:aa:
9c:86:0d:09:0a:fe:51:ff:ba:f9:21:54:02:e9:d4:b2:5f:5b:
e5:7d:7f:c8:14:e3:ba:18:cc:8b:4c:88:6e:24:9f:41:df:19:
ea:db:ba:8b:63:92:d9:bd:ca:6f:aa:f2:b2:aa:14:45:82:ac:
d7:72:96:31:75:75:ef:fc:0d:f4:6d:07:61:b4:79:97:cd:7e:
ab:86:29:a4:f4:27:34:21:c0:17:01:6c:8f:19:b0:8f:59:04:
10:86:43:f0:eb:8b:c8:15:96:1c:03:42:a8:f2:1b:aa:9a:6d:
0f:30:8d:87:4f:69:d7:27:85:37:2d:cb:18:0c:78:aa:be:13:
96:da:94:f4:7a:9b:65:f9:2a:90:b6:fe:da:8a:10:73:21:89:
b9:7a:11:34:99:12:27:01:ed:76:f6:a4:98:11:c1:5b:8b:ca:
46:9d:60:e7:66:20:73:7e:76:2d:fa:1f:c3:54:75:ba:5a:cc:
28:40:2e:4b:fa:52:22:69:bc:c9:ca:2e:42:c0:f1:c9:53:cb:
61:a6:ec:68:31:4f:c6:69:59:da:33:33:b1:64:e6:e7:86:4a:
07:18:e8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:02 2024 by rpki-client on console-ams.rpki-client.org