Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A4B9720007E11EFB25C1B67017001B1.roa
File: 1A4B9720007E11EFB25C1B67017001B1.roa (raw, json)
Hash identifier: 3Zvj+aJnBaHK06n2zY4Lmbd/8E3JLF1+kP+YN2IaYWg=
Subject key identifier: D2:78:F8:AB:45:BD:28:D9:7C:9F:31:0B:EA:CB:41:E4:EB:CF:96:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 83B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A4B9720007E11EFB25C1B67017001B1.roa
Signing time: Mon 22 Apr 2024 07:58:28 +0000
ROA not before: Mon 22 Apr 2024 07:58:25 +0000
ROA not after: Mon 20 May 2024 07:58:25 +0000
asID: 140869
IP address blocks: 156.225.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33717 (0x83b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 07:58:25 2024 GMT
Not After : May 20 07:58:25 2024 GMT
Subject: CN=662618a4-7f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:13:28:9e:8a:a7:69:01:13:c6:5f:e5:e9:
b7:84:6b:0f:ca:d8:f9:24:42:05:0b:ef:1e:22:12:
a6:53:65:d4:f7:b1:3a:50:cf:23:3e:1d:7c:12:94:
12:0c:94:47:1f:eb:13:e5:f5:bd:d4:dc:ae:1d:3f:
6c:31:35:af:b6:35:fd:1a:24:a4:8e:5d:9d:53:ef:
37:da:a7:dc:38:57:a5:46:aa:f8:f6:21:62:30:66:
f8:16:9f:d6:fc:33:97:e3:44:07:21:97:f5:c5:aa:
e0:4b:1a:d3:ef:c4:27:ed:ce:1b:82:7c:cc:eb:0e:
83:97:de:d5:b5:81:5c:0d:53:40:ff:61:31:4b:2b:
38:3e:00:32:74:66:95:bf:ff:81:01:74:39:ca:3d:
2e:0a:0b:2a:db:76:7f:eb:13:0d:51:16:0c:e5:9d:
dd:49:64:fa:08:94:e5:1b:2f:8d:7e:ce:00:dc:b2:
e5:8e:78:25:1a:85:18:2c:c7:67:bc:45:fd:c8:c4:
2f:00:07:7b:a1:8c:7c:9c:d1:35:cd:52:b6:15:be:
6a:2d:e7:a5:d8:54:46:b6:16:74:d9:c5:06:a8:6c:
4a:bb:6a:c4:95:28:2e:92:64:22:b6:99:ac:96:58:
73:c5:12:3b:08:c2:df:87:e5:46:01:ca:9c:86:f5:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:78:F8:AB:45:BD:28:D9:7C:9F:31:0B:EA:CB:41:E4:EB:CF:96:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A4B9720007E11EFB25C1B67017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.86.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ad:7e:77:b6:db:70:bf:a0:ae:32:91:a2:03:da:5f:02:2a:
8c:ae:3a:a7:3d:ba:15:54:32:78:88:26:5a:9b:1d:b2:2a:88:
5e:83:11:6d:b7:a8:de:d7:59:15:2a:b0:b3:c6:48:59:f3:88:
69:f7:52:8c:0b:17:13:db:59:d3:42:2d:99:2e:a2:b1:2b:5e:
da:52:10:98:07:c6:25:e9:e9:5c:08:f5:f7:4e:2a:7a:f9:ed:
56:8a:2e:f0:b1:95:14:26:d1:25:1a:02:26:65:bb:c1:32:92:
c5:82:ed:7b:21:87:32:f7:56:33:9b:91:9c:e9:ac:f6:34:35:
52:9a:12:f2:db:83:00:44:cc:44:13:4d:26:b0:98:b5:73:94:
e5:75:86:09:73:76:98:3b:95:98:dd:02:fe:a1:02:09:24:15:
6f:53:4b:4d:a6:b1:57:ee:41:b4:0f:b4:aa:f3:ba:ed:a3:5e:
92:5b:75:2e:2f:a6:4c:04:75:e4:2d:b4:04:09:b0:11:a9:c9:
0d:50:ce:88:bf:6a:71:ce:fc:a8:b6:e5:9f:f2:73:c5:71:32:
c0:04:0f:f0:c5:be:94:4e:13:93:12:93:77:e2:a1:85:e0:2d:
66:8e:54:48:ce:0f:4a:39:f3:e3:34:49:bb:45:c7:5a:fa:c7:
87:7a:9d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:05 2024 by rpki-client on console-fra.rpki-client.org