Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13A69D006CBF11EE82C2036B4AD9E6FC.roa
File: 13A69D006CBF11EE82C2036B4AD9E6FC.roa (raw, json)
Hash identifier: 4bz0+WJO/eC/kVFhYTiBy69//cdL91PIZekae+B0omo=
Subject key identifier: BA:C6:67:3A:FC:EA:E5:07:57:A8:C7:E1:56:F7:48:C4:27:50:71:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3EDF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13A69D006CBF11EE82C2036B4AD9E6FC.roa
Signing time: Tue 17 Oct 2023 07:30:42 +0000
ROA not before: Tue 17 Oct 2023 07:30:39 +0000
ROA not after: Tue 22 Oct 2024 07:30:39 +0000
asID: 149628
IP address blocks: 156.226.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16095 (0x3edf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 17 07:30:39 2023 GMT
Not After : Oct 22 07:30:39 2024 GMT
Subject: CN=652e3822-d409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:82:ea:4e:33:f1:7f:0b:bf:f1:cf:1d:50:
82:7b:42:e2:bd:bf:c0:f7:c1:15:90:a5:02:93:63:
44:88:06:dc:a6:b0:ab:33:df:b9:ba:ed:59:0b:82:
a9:6b:70:f9:78:28:3d:7b:b7:59:94:67:67:f7:7f:
0a:da:d2:49:f4:65:0d:86:e3:68:41:4f:1d:89:32:
7e:e1:3c:9f:bd:88:f1:f1:67:36:05:dc:bb:c8:d5:
51:7f:f6:b9:df:2b:e7:4d:70:56:f4:38:e1:2f:bc:
d1:64:b4:dd:63:ad:a7:17:6c:47:68:dc:54:00:cb:
d4:1d:4a:6e:c3:97:dd:93:ef:93:1d:65:4e:23:dd:
cd:35:59:5b:4e:4a:ae:2e:fe:31:b7:0f:5a:c0:bc:
68:41:e2:f8:14:8f:cb:d5:9d:a3:e5:b3:35:82:7f:
8e:ec:0a:98:23:57:ca:03:53:1c:e6:99:9c:fe:99:
c7:17:3c:34:d0:04:0f:33:5a:b3:b8:3e:8a:21:cd:
76:69:84:39:29:4d:09:01:9a:ba:1c:13:02:7e:3a:
76:e5:e6:1d:24:c4:8b:e0:cc:0b:ce:0b:77:62:d4:
76:68:0d:12:97:12:92:26:61:3f:71:1e:3c:9b:73:
aa:ee:6a:a0:e5:5d:02:1d:ee:a4:71:c4:40:42:7a:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C6:67:3A:FC:EA:E5:07:57:A8:C7:E1:56:F7:48:C4:27:50:71:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13A69D006CBF11EE82C2036B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.6.0/24
Signature Algorithm: sha256WithRSAEncryption
05:01:8e:c7:be:e6:d0:c1:6a:f0:43:5f:22:6a:03:52:27:d8:
0f:84:19:d0:4f:35:7e:d2:b7:d4:9f:0d:62:18:70:5b:c9:18:
3c:c9:7c:5d:07:dd:b3:4b:f0:97:1a:d1:87:fd:57:ca:12:0a:
55:03:d8:bd:45:df:be:b6:da:75:ae:cd:13:e7:11:f0:db:f9:
8e:dc:4c:69:96:a0:e8:33:df:be:4f:fb:bc:37:15:13:df:8f:
68:a7:f2:45:8e:44:9a:1d:d8:3d:ec:20:35:b5:c7:8f:bb:6d:
4c:ef:5d:37:73:48:2a:b0:ff:89:35:43:3a:2b:f0:37:15:1e:
97:a5:7c:06:51:0a:d8:34:27:41:01:c4:18:9a:e3:c1:ff:f7:
37:26:cf:28:1a:82:4d:77:bc:8f:6c:3d:de:d6:a4:08:27:33:
08:f5:27:bd:ea:71:69:45:26:a5:70:ef:7f:20:66:c4:cc:e3:
89:c1:20:ea:7c:4f:51:73:fa:c4:21:6a:c2:16:db:e5:f0:31:
7b:1f:31:1c:6c:f0:2d:4d:f7:39:0d:40:ef:05:c1:79:43:6e:
5b:63:26:87:4d:37:9d:09:c1:8f:3d:0f:52:ce:f9:5b:5e:6b:
e3:2c:77:0a:c7:3e:1e:41:db:6a:00:6b:33:3d:3f:34:b7:72:
14:09:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:49 2024 by rpki-client on console-ams.rpki-client.org