Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04548B3A018611EF92BBDB47017001B1.roa
File: 04548B3A018611EF92BBDB47017001B1.roa (raw, json)
Hash identifier: ltJI0uWoA283kFjD9euvDfFCePH7o/c39CplECHq8LQ=
Subject key identifier: 54:98:D2:06:4A:A6:97:44:D3:05:C8:AA:9C:6E:65:75:A5:DB:12:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8471
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04548B3A018611EF92BBDB47017001B1.roa
Signing time: Tue 23 Apr 2024 15:27:38 +0000
ROA not before: Tue 23 Apr 2024 15:27:35 +0000
ROA not after: Mon 03 Jun 2024 15:27:35 +0000
asID: 142286
IP address blocks: 156.244.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33905 (0x8471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:27:35 2024 GMT
Not After : Jun 3 15:27:35 2024 GMT
Subject: CN=6627d36a-89af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:54:f7:68:45:4a:12:b2:3b:a5:03:71:7c:
36:4f:bb:f4:7f:b4:57:9b:9f:65:4e:51:f6:4b:8f:
87:ed:fe:75:8d:7c:3f:74:6d:f3:18:bf:f7:ff:cc:
bf:61:dd:90:3c:1a:91:d5:4b:95:6f:41:5a:7e:5b:
19:cb:c9:f1:43:ba:1b:e3:28:f7:cd:29:1f:c5:0e:
4f:6a:5f:94:34:db:92:0f:df:dc:fe:99:f0:47:d1:
74:6a:33:c4:11:14:d3:17:62:0f:45:f1:1c:46:c3:
13:d5:fe:39:6d:bc:d9:4d:80:b1:84:07:f3:20:08:
dd:19:b0:8d:e5:b7:0b:4f:f0:3f:cf:96:fe:00:38:
0c:23:8f:cd:ef:bb:00:08:b6:ca:45:43:aa:30:e8:
a1:0b:ed:59:62:9b:2d:00:4d:ff:45:2f:6d:c0:41:
8f:df:ab:a8:2d:e2:ca:b5:1e:73:37:a6:c2:84:7c:
fa:fc:49:a0:20:31:ec:3a:4c:a3:1c:07:fb:f8:6b:
2f:68:c2:49:14:2f:0f:98:24:a5:27:ea:7f:8c:40:
95:5c:a0:bf:16:dc:46:35:16:6c:66:81:be:3a:c0:
aa:21:9c:36:4b:51:15:9c:7b:0d:fd:b9:b4:52:1e:
0a:c5:ea:6a:75:b7:56:09:0f:50:77:97:47:29:cd:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:98:D2:06:4A:A6:97:44:D3:05:C8:AA:9C:6E:65:75:A5:DB:12:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04548B3A018611EF92BBDB47017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.64.0/18
Signature Algorithm: sha256WithRSAEncryption
92:af:2e:77:d5:de:bd:2f:c3:98:49:c0:3f:e0:38:2c:20:a0:
3e:8f:22:be:b5:59:60:ff:ad:46:5c:10:5e:2f:85:ad:87:6a:
9d:ca:ac:31:db:e6:01:9a:33:e4:fb:31:87:14:66:55:2d:4f:
f6:88:eb:fd:b5:e0:e5:80:fc:4a:79:5b:4c:98:73:99:b5:7c:
fc:1a:3a:41:43:9f:49:ea:cf:06:bc:d0:ee:45:32:04:79:fc:
97:dd:f6:75:52:70:63:56:86:4c:77:d3:51:50:72:41:50:70:
0a:99:28:d6:71:a2:09:fb:60:86:2f:1f:c8:30:67:17:5e:1f:
57:1f:b6:f7:c2:18:68:e5:f4:6a:d6:40:e4:8b:c4:80:18:bb:
8f:69:b6:e7:5b:59:7f:ff:77:a0:2f:a3:c2:4c:93:47:19:63:
2a:b3:59:e1:cb:35:91:cf:91:84:0c:5c:e6:0b:99:2f:e0:8d:
ba:1f:a7:a2:62:ac:43:7b:b1:da:9d:70:26:84:28:91:3f:cc:
01:9b:b5:ac:fa:9f:b7:6c:21:e0:22:91:de:c5:57:18:08:ee:
c2:79:0c:b8:13:27:90:e0:a2:99:e9:24:e2:23:d6:80:15:2a:
87:5d:62:24:30:d1:12:c0:ba:31:99:41:23:0d:2b:ee:fe:73:
19:d5:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:48 2024 by rpki-client on console-ams.rpki-client.org