Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16D62B1A84F411EEAC32DE474AD9E6FC.roa
File: 16D62B1A84F411EEAC32DE474AD9E6FC.roa (raw, json)
Hash identifier: +ePa+EM680f+4Qv4Qkg892PNecTVhdpNIas8stogPPo=
Subject key identifier: D7:EC:3B:C1:EE:19:26:03:7C:4C:7B:1E:A8:CE:FF:D8:5C:78:F1:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4959
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16D62B1A84F411EEAC32DE474AD9E6FC.roa
Signing time: Fri 17 Nov 2023 02:50:38 +0000
ROA not before: Fri 17 Nov 2023 02:50:35 +0000
ROA not after: Tue 12 Nov 2024 02:50:35 +0000
asID: 397630
IP address blocks: 156.227.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18777 (0x4959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 02:50:35 2023 GMT
Not After : Nov 12 02:50:35 2024 GMT
Subject: CN=6556d4fe-bdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:26:41:06:4e:9f:4d:6c:69:38:d8:ca:90:
e7:00:5a:bf:04:ff:02:6c:9a:2a:ae:6f:6a:89:db:
a5:d2:3d:68:bd:cc:05:70:47:d1:6d:98:38:6f:1f:
44:4a:52:21:e5:87:68:f0:dd:ae:80:c0:2e:3f:d6:
e5:96:a9:ee:2d:36:49:be:0b:1d:da:72:2a:bf:57:
7e:c3:63:d8:a8:8e:ca:3a:8d:2f:5b:77:b4:5c:6f:
fb:5c:f0:37:3c:ad:e1:4a:f1:35:07:9b:82:4d:db:
a6:67:b2:18:23:ee:83:27:32:e0:69:d4:6f:77:85:
9b:cb:d8:db:c8:de:5d:c4:b9:0b:f2:ec:33:f0:1c:
62:5d:3c:ed:2f:e8:ad:09:4b:3d:aa:83:bf:0a:9c:
e7:6a:ed:bb:82:0c:00:76:dc:3c:41:b0:28:ed:c9:
2f:a4:0f:0d:c2:27:a4:29:db:c9:40:4c:41:fc:f2:
76:71:69:f2:10:2c:a4:57:8b:83:8d:01:40:a1:f4:
ff:5d:c0:39:aa:7d:0a:63:cd:03:7b:4f:03:2e:34:
17:5e:fc:27:2e:84:8b:05:f4:d3:23:30:d9:b1:c8:
8a:bd:de:fe:d3:a8:61:23:61:18:27:be:80:2f:be:
12:65:9d:7e:ce:ad:84:41:d7:e3:c3:2b:3a:fa:22:
e0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:3B:C1:EE:19:26:03:7C:4C:7B:1E:A8:CE:FF:D8:5C:78:F1:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16D62B1A84F411EEAC32DE474AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:62:c9:16:48:86:66:c7:c0:69:63:f0:6c:f7:5a:7c:81:96:
4a:34:a8:2a:a7:2e:cc:b9:e2:d4:20:7f:1f:bc:5e:cb:d7:ff:
75:6f:ba:1f:bf:93:e9:a4:43:45:6f:f3:52:20:c2:ee:77:46:
e0:d1:cd:10:f1:7c:05:05:92:ed:1b:eb:77:5f:5e:2d:08:07:
22:90:d0:c1:df:8e:10:17:93:93:6b:1b:57:1a:e3:8d:bf:21:
31:12:c6:77:1d:53:81:3b:1f:bd:ed:93:fa:e8:86:c7:6f:6f:
36:7b:5f:98:f6:b0:70:97:61:b9:b4:a3:a7:59:ac:fe:70:f7:
39:f9:06:24:97:85:59:a5:91:dc:21:bc:c5:b2:60:12:09:a8:
87:ff:6f:bd:22:e1:68:63:24:19:ad:e7:6a:d3:b2:f2:55:6b:
76:4b:43:c5:0b:44:c2:37:f0:e1:15:5e:df:29:c5:83:e9:fa:
9f:bb:45:fa:eb:cc:13:ad:88:59:d2:dc:60:34:f4:1d:b1:c3:
8e:d7:af:48:09:d6:63:31:15:fe:3a:19:a0:a3:68:02:50:ea:
84:a9:77:04:14:be:6c:8a:cc:f6:b5:f6:a6:29:a2:ee:86:76:
e9:50:d8:d5:87:e1:f6:3b:d4:a9:3f:77:95:68:7e:2d:07:e8:
73:a0:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:05 2024 by rpki-client on console-fra.rpki-client.org