Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15C6603E86AF11EEBD82234D4AD9E6FC.roa
File: 15C6603E86AF11EEBD82234D4AD9E6FC.roa (raw, json)
Hash identifier: OXhTq7g+Ve8EGT0q8UGePsdtpOnZupGgHla4x4st8Bo=
Subject key identifier: A8:7D:BE:13:51:1D:CA:E7:BC:D8:E6:A0:0F:16:07:DB:73:8F:B6:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 49CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15C6603E86AF11EEBD82234D4AD9E6FC.roa
Signing time: Sun 19 Nov 2023 07:41:44 +0000
ROA not before: Sun 19 Nov 2023 07:41:40 +0000
ROA not after: Sat 11 May 2024 07:41:40 +0000
asID: 140403
IP address blocks: 156.240.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18893 (0x49cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 07:41:40 2023 GMT
Not After : May 11 07:41:40 2024 GMT
Subject: CN=6559bc38-3653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:e8:58:ea:0a:36:a0:39:9e:e7:6b:83:3d:
15:76:62:ee:62:26:f1:cc:68:f8:b3:55:50:b0:83:
12:2f:c7:b0:ef:fe:c5:1c:ef:f6:95:3a:6e:1c:d3:
d0:fd:90:37:b1:66:49:f4:af:01:e9:eb:40:66:7b:
34:66:92:3a:d0:2b:1d:b9:64:59:3e:3a:90:9e:05:
91:a5:f9:90:cc:a3:eb:86:dd:de:46:1e:0d:35:82:
fa:4b:64:df:de:de:95:33:b2:9d:0e:a2:12:4f:6d:
e5:ff:9d:1a:a7:ae:17:ab:5a:1d:30:50:19:c6:4d:
52:2c:f9:84:fd:84:7a:4d:fd:4e:00:1e:50:57:e0:
60:c9:85:bd:85:e0:43:4b:a4:77:6a:eb:21:d7:7b:
a9:ab:a4:23:13:09:a0:ef:7d:48:08:bb:88:dd:8d:
90:67:e8:00:43:ba:19:14:9f:ff:20:27:22:f0:15:
67:1e:e0:7b:a0:d8:d6:59:30:55:74:d5:60:01:ea:
cc:44:d1:69:7e:85:87:e9:a8:12:aa:9b:a1:79:b1:
90:e6:c3:5d:75:a3:d6:25:13:98:b2:68:7d:85:58:
8f:73:b0:47:84:61:0a:e0:74:b8:86:2f:eb:99:c9:
9d:2f:77:78:07:18:03:5d:d9:50:01:a4:0b:dc:28:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7D:BE:13:51:1D:CA:E7:BC:D8:E6:A0:0F:16:07:DB:73:8F:B6:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15C6603E86AF11EEBD82234D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.62.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:cd:aa:9a:60:84:3b:a2:05:80:40:89:57:5d:70:8a:f2:54:
2e:da:ae:bf:51:26:c0:c6:59:62:25:11:e5:a9:a2:d4:b8:40:
2a:81:26:d0:a7:9e:87:14:95:2f:48:c7:36:84:98:86:3b:e9:
19:57:13:82:bb:e7:d1:61:f7:29:58:60:bc:32:01:01:44:3d:
5d:72:be:04:f9:11:e2:e6:3e:d0:55:5d:da:ec:72:b3:b5:95:
93:e9:6d:83:b2:ff:f6:dd:16:c3:e0:80:fe:61:35:f7:a2:91:
b2:a5:d6:13:2a:cd:73:dd:5b:58:15:4a:8a:78:be:cf:3e:25:
86:73:0e:f3:ac:b5:9a:23:75:83:d8:8c:41:3a:3e:9b:31:6f:
dc:ae:4d:4e:d2:65:7a:99:73:d3:29:76:ab:6e:8f:d7:ac:c9:
80:0b:56:aa:5d:12:92:16:65:69:d5:24:3c:08:e3:ee:27:e0:
5c:41:98:ec:29:e8:7a:4a:c8:20:9d:f2:9e:27:54:69:3a:b6:
85:d3:d4:d1:12:17:4b:0b:8a:82:85:4f:30:d9:a6:0c:99:48:
dc:a9:7e:61:01:39:1f:3c:98:f1:43:5e:f3:72:14:62:4b:dd:
d4:d1:35:d1:95:fd:58:15:8e:1c:1d:99:0d:ef:1e:ad:32:b4:
51:44:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:26:54 2024 by rpki-client on console-fra.rpki-client.org