Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BF2F3983B2C11EEA5C594444AD9E6FC.roa
File: 0BF2F3983B2C11EEA5C594444AD9E6FC.roa (raw, json)
Hash identifier: nufYTcmUyubmGKWCBdlzlAvM3GdQ3kpo6BHg5dAILK4=
Subject key identifier: A2:FE:E6:09:C9:66:81:FF:A4:4F:A3:E7:45:9F:A7:54:21:29:42:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BF2F3983B2C11EEA5C594444AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:24:46 +0000
ROA not before: Tue 15 Aug 2023 05:24:43 +0000
ROA not after: Mon 27 May 2024 05:24:43 +0000
asID: 140627
IP address blocks: 156.247.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13809 (0x35f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:24:43 2023 GMT
Not After : May 27 05:24:43 2024 GMT
Subject: CN=64db0c1e-5875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:48:cf:7b:ee:cf:fb:d5:6c:61:81:d1:e6:
0e:7f:6c:a6:95:3c:d2:13:ab:00:a2:9d:78:07:2d:
c0:50:d4:54:7e:3e:5f:e7:ea:43:8c:d4:d4:9b:69:
1b:ef:16:5f:87:56:8e:a8:0a:89:c7:b1:0d:48:0b:
40:34:da:3c:4d:3c:b0:a0:7f:24:d6:62:66:fa:46:
1d:ec:bb:a9:2a:ad:c0:cd:4e:f1:7d:0e:c9:20:83:
63:08:1e:85:92:74:f3:96:98:a4:39:52:6c:33:a4:
63:d0:d1:7b:f9:83:25:7d:14:0c:6b:b4:94:80:14:
33:f9:2e:80:10:73:1b:df:66:89:48:22:ec:98:f4:
46:0f:39:b6:16:72:63:72:a1:d3:d4:cc:6a:27:a1:
db:a3:f2:64:80:82:0b:38:80:89:97:d8:34:5b:db:
52:a8:73:9f:48:ee:b2:d4:0a:5a:c2:fe:f8:a0:1e:
c6:33:96:9d:eb:37:56:3a:96:cf:5b:fa:9b:a2:8d:
bf:d2:b4:c9:00:91:67:64:b5:d1:8d:69:6c:4e:b4:
24:c9:49:79:f6:66:f9:4f:12:df:dd:2f:d5:17:5c:
9a:cb:6e:ea:55:e1:32:50:af:79:84:36:53:10:90:
de:db:ac:16:ac:65:ea:13:63:08:f7:17:0b:d1:cf:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FE:E6:09:C9:66:81:FF:A4:4F:A3:E7:45:9F:A7:54:21:29:42:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0BF2F3983B2C11EEA5C594444AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.151.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d1:ac:89:93:db:7b:2e:24:a8:68:b3:e8:03:4c:b2:cf:9c:
c6:98:1b:dd:2e:15:46:3d:be:42:20:db:27:fc:fe:ba:01:ae:
aa:fd:a5:94:f9:31:93:6e:7f:08:19:4c:80:fb:20:b7:bd:c4:
f9:8f:92:c8:af:31:80:e4:cb:f8:42:9d:64:91:4b:26:b9:e0:
d7:9c:8c:da:99:08:0a:ff:f8:44:c8:63:ee:ab:ef:00:fe:d2:
41:70:7d:f8:f9:d7:55:77:43:9f:5c:1b:81:ae:ec:10:a1:1d:
6d:9d:59:58:7b:67:fa:ae:57:f2:76:31:8c:e4:64:70:91:1f:
25:19:fa:94:b2:31:ae:3f:d4:9c:95:f9:cf:75:78:50:a7:01:
dd:51:d5:14:71:dc:88:d2:a9:ce:3e:6a:33:d0:12:9d:8a:4a:
90:55:f1:21:a8:54:3a:b9:9e:02:e2:18:15:b6:22:63:0e:6e:
cc:48:ba:39:68:d4:cf:c5:94:d0:9d:b5:d7:ab:0f:c7:57:32:
bf:41:bc:37:8f:1f:e9:1e:0c:07:f4:c1:ad:c2:3c:c1:bd:ab:
aa:45:f4:aa:f4:15:15:cf:8e:44:78:fd:a3:57:e8:b7:3b:9c:
74:45:63:3e:33:1a:b9:a4:4c:97:65:e3:81:7f:b9:75:3c:0a:
4d:6b:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:04 2024 by rpki-client on console-fra.rpki-client.org