Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15C4430A038011EFAAF1CF6C017001B1.roa
File: 15C4430A038011EFAAF1CF6C017001B1.roa (raw, json)
Hash identifier: Pv+1g9VBefhmkQ5gLt8WPkPWHca+2n/IBkAhzMQwLBY=
Subject key identifier: D2:F3:17:28:70:3C:D5:1B:CD:93:AE:F3:33:9E:61:A8:2C:B6:B3:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8576
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15C4430A038011EFAAF1CF6C017001B1.roa
Signing time: Fri 26 Apr 2024 03:50:13 +0000
ROA not before: Fri 26 Apr 2024 03:50:09 +0000
ROA not after: Tue 03 Sep 2024 03:50:09 +0000
asID: 136800
IP address blocks: 156.241.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34166 (0x8576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 03:50:09 2024 GMT
Not After : Sep 3 03:50:09 2024 GMT
Subject: CN=662b2475-bfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:df:02:c4:47:4d:97:e2:af:69:ee:1c:c4:
10:5e:81:b0:1a:8c:9e:08:1f:f1:6c:80:3c:3d:1e:
74:1c:2f:29:ea:c3:4e:93:b5:47:1d:51:c0:37:33:
5f:ab:98:27:f4:97:89:97:df:a2:3c:97:8b:29:6d:
cb:c7:eb:ef:b8:78:bb:88:08:5f:c4:39:88:8f:ee:
16:74:a2:64:77:99:6e:4a:b8:7c:34:c1:6e:b3:0d:
0c:6b:8b:e7:12:a7:4d:f6:67:3d:d8:46:ff:25:c3:
ca:b6:98:a3:58:9a:71:01:44:81:c7:89:a7:76:ca:
87:77:31:53:16:0b:e8:d2:6d:0f:7b:c7:25:de:85:
53:a3:9e:95:62:85:8a:2d:8c:ac:ee:40:fe:27:94:
a7:12:ff:1b:7d:11:09:c9:54:03:1e:c7:3b:a4:01:
ba:ba:1d:57:d3:f7:d0:de:d4:e8:0a:d9:c0:cb:11:
f2:47:a8:14:13:02:9c:0e:63:0b:6a:c7:8c:c4:42:
dc:44:ea:9e:b4:76:85:d4:60:8a:30:00:b2:e2:35:
e7:bf:26:69:4a:2e:3a:10:72:ab:b8:91:d5:5e:30:
89:6f:6f:7c:dc:44:de:4b:ae:f6:67:20:20:74:09:
63:2d:73:27:34:1b:96:51:e7:20:51:74:17:76:1a:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F3:17:28:70:3C:D5:1B:CD:93:AE:F3:33:9E:61:A8:2C:B6:B3:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15C4430A038011EFAAF1CF6C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:88:3c:ca:d3:1c:c2:25:a7:15:c2:52:0c:26:10:ff:23:81:
70:33:79:8a:8f:53:b0:b1:2c:4c:bd:58:87:90:25:8e:db:f5:
4f:3a:0d:13:db:b4:4a:8f:ae:a8:d6:fa:8f:f9:0a:4b:e8:93:
c5:9f:f5:9c:76:28:4d:50:d4:79:cb:6c:23:56:b3:0d:7b:9e:
4b:bb:7b:98:81:8f:a2:99:bb:ef:e2:47:93:4b:fd:f7:1d:79:
49:79:e6:c8:f8:15:2b:83:24:43:fa:31:d7:92:03:0a:0d:85:
3c:d2:9d:01:c9:0f:0d:20:55:2d:9d:07:8f:e1:42:ae:d0:82:
8e:0a:f6:8c:77:6b:9d:74:26:6a:07:e6:44:6f:82:f8:3c:ca:
72:7e:da:b6:b9:20:ab:72:df:81:2c:8c:a6:12:61:5f:b7:ed:
f7:c2:64:65:c0:8b:b3:2b:17:d1:04:a5:01:56:05:de:ca:66:
26:4a:fc:d7:eb:5f:9b:52:d4:92:00:1c:ee:9c:b9:90:f1:17:
e5:31:ca:42:b8:1f:d0:10:f5:3e:b7:e6:97:15:bb:88:9b:40:
26:9b:56:21:ed:9d:a1:39:29:e9:bf:77:b0:3c:6c:78:14:ed:
e3:1a:4a:e3:c5:fb:b1:c8:9d:32:70:b3:c2:8c:08:96:d2:f5:
c2:35:c6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:49 2024 by rpki-client on console-ams.rpki-client.org