Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0917E126037F11EFA7954A66017001B1.roa
File: 0917E126037F11EFA7954A66017001B1.roa (raw, json)
Hash identifier: SUvm0pAo1Y7hNSQtf9Dcdyu+NobwUWau+yz7Ua+rsbw=
Subject key identifier: 64:1A:AB:AE:6C:3F:50:A2:71:FB:08:D6:7F:0C:74:E1:A0:AB:12:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 856C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0917E126037F11EFA7954A66017001B1.roa
Signing time: Fri 26 Apr 2024 03:42:42 +0000
ROA not before: Fri 26 Apr 2024 03:42:38 +0000
ROA not after: Tue 03 Sep 2024 03:42:38 +0000
asID: 136800
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34156 (0x856c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 03:42:38 2024 GMT
Not After : Sep 3 03:42:38 2024 GMT
Subject: CN=662b22b2-8c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:88:66:48:c8:ea:1c:ef:cd:01:9c:15:e5:
a6:8e:97:c2:21:6e:0a:18:42:b9:3e:fe:a0:d1:e1:
3a:05:38:ce:ca:88:4c:cc:ad:15:35:dd:ef:f6:6b:
30:d2:a6:ac:75:a8:ce:cd:9c:8d:d6:f3:c6:80:5d:
db:a3:fe:a4:a7:78:f0:75:3f:ac:a4:14:2b:99:be:
db:7c:4e:ac:1d:be:39:00:53:dc:f8:0e:fb:a0:45:
71:c3:78:33:f5:20:30:a0:a5:bc:80:59:35:f9:63:
ac:f9:a5:2c:8a:de:a1:12:1a:6c:d6:44:a2:2d:79:
39:43:e5:16:80:d7:d3:1c:81:a1:7a:c1:01:76:a6:
52:ea:8b:9a:9a:27:81:ac:19:f1:c5:97:e9:6b:c3:
96:44:3a:98:64:de:55:cf:c6:f7:54:79:49:70:ae:
10:d2:5e:fa:43:f3:9d:97:76:3e:68:5e:5c:c2:06:
9e:e8:d9:a7:0b:15:d5:f9:a8:f2:c6:c6:8d:73:b3:
be:2e:c0:0d:1d:9f:7a:f0:43:61:cc:78:07:4d:42:
d0:01:04:e6:4c:f2:65:c5:20:64:cb:63:4f:76:ea:
b2:8a:b2:85:bc:8b:4a:60:43:06:69:32:aa:95:f4:
8f:f8:5d:ad:97:28:1b:5d:b9:c2:3a:a5:59:0f:2f:
9d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1A:AB:AE:6C:3F:50:A2:71:FB:08:D6:7F:0C:74:E1:A0:AB:12:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0917E126037F11EFA7954A66017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:13:17:d2:8b:65:26:7c:14:28:fb:e3:b7:96:5e:75:fb:ae:
79:3a:26:84:d7:3a:88:c7:47:a7:69:db:86:35:3a:6c:86:5f:
96:02:66:e0:f9:68:ec:9a:dc:71:56:8b:5a:a0:61:7a:d2:8f:
77:56:31:d2:ae:ae:99:fb:7c:be:63:df:02:63:e0:2b:7b:e9:
85:6c:c5:4b:87:ef:ac:8b:58:a8:22:e9:1a:8b:a8:19:5a:d4:
ef:0f:09:fd:16:78:27:12:49:3a:4b:5b:71:c6:5e:e7:ad:33:
9e:a3:c5:6b:8d:6a:aa:32:e8:65:49:43:46:a9:aa:d1:c9:34:
e2:8a:86:57:ab:9b:8e:78:f2:2a:13:ba:fa:91:c8:11:79:19:
2b:e6:77:60:45:ca:0a:ca:6c:07:c2:75:d1:0f:5a:4b:10:ce:
51:24:cb:b0:f1:75:42:3f:2c:f9:ee:d3:76:26:81:72:85:23:
87:59:fe:ee:57:4e:32:54:34:e6:5b:94:ed:2f:10:33:50:05:
a0:07:83:e9:93:38:34:b4:5c:63:03:be:bb:c1:8b:09:47:20:
d3:47:5f:44:79:bf:cd:82:f7:41:88:4f:8a:9e:d5:7c:59:c5:
6d:73:16:44:b5:5a:1b:79:c8:7f:be:a9:26:c0:32:f7:a0:d7:
b8:64:dd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:48 2024 by rpki-client on console-ams.rpki-client.org