Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B436A56014411EF8F5E6A34017001B1.roa
File: 1B436A56014411EF8F5E6A34017001B1.roa (raw, json)
Hash identifier: Uk718nQXo9ljyTGAKX10zn7HtjqWeF6Ll7aCaGbpz+g=
Subject key identifier: A7:94:75:60:91:90:DC:A0:C0:44:01:F8:31:0F:08:1C:82:E4:46:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8410
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B436A56014411EF8F5E6A34017001B1.roa
Signing time: Tue 23 Apr 2024 07:35:50 +0000
ROA not before: Tue 23 Apr 2024 07:35:46 +0000
ROA not after: Mon 13 May 2024 07:35:46 +0000
asID: 40065
IP address blocks: 156.224.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33808 (0x8410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 07:35:46 2024 GMT
Not After : May 13 07:35:46 2024 GMT
Subject: CN=662764d6-2b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:47:a7:c0:d6:10:6b:d1:64:01:0b:8e:8b:
b3:6b:66:cf:17:cd:30:c9:e7:d8:dd:fc:2b:4b:26:
36:90:b6:03:1b:61:74:9e:56:19:e9:79:c0:bb:17:
4b:17:86:71:ab:03:f5:9c:76:16:dc:1b:71:82:20:
de:8f:89:20:11:bd:1b:52:d7:b3:43:db:94:d8:bb:
01:2f:b0:e5:37:e3:d8:b9:1c:a1:09:42:26:d2:7b:
ae:92:8d:6e:81:e6:b8:5d:ad:b2:2f:d9:54:17:d7:
fa:d0:36:be:28:c4:be:76:0d:19:45:3a:b4:36:d6:
0b:ef:36:a8:8d:29:fa:f6:04:7b:95:bf:dd:ea:06:
7a:bd:bd:ed:86:02:e4:64:2d:e5:76:b9:76:e9:7c:
95:aa:23:4c:eb:00:12:35:7f:da:7e:82:0b:0a:21:
be:7a:70:3d:cb:91:c8:d5:40:99:5f:9f:0d:1a:21:
10:70:fc:c6:6b:ff:33:80:79:9e:e6:3e:5d:39:78:
0b:51:73:e0:4b:fd:9f:91:fa:0a:76:b1:64:9b:2c:
19:31:db:da:3b:bc:6a:f9:11:c5:2e:69:60:59:3d:
bd:80:bb:d4:df:f1:5a:be:ea:36:6d:20:9a:15:44:
0a:20:70:fb:c1:0e:30:d8:d4:56:6c:e0:0f:af:a4:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:75:60:91:90:DC:A0:C0:44:01:F8:31:0F:08:1C:82:E4:46:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B436A56014411EF8F5E6A34017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.16.0/23
Signature Algorithm: sha256WithRSAEncryption
67:4a:b3:21:8d:7a:b9:fc:9b:64:d9:70:af:3c:cc:dc:f2:f2:
a1:50:7b:f4:1a:53:b2:54:e9:0d:ea:6e:c1:20:29:51:74:27:
06:5b:64:b8:66:fd:10:4a:b3:00:83:d8:94:68:a0:db:1e:1f:
e8:41:fc:04:91:b1:7f:46:38:5b:c7:f8:c7:a3:bd:56:50:6a:
dc:32:ab:8c:20:f5:3b:3d:7e:ea:c2:0c:a8:66:28:da:85:6f:
e0:e1:11:63:75:37:06:9b:71:99:9d:d8:d4:5a:57:af:bd:09:
e9:7e:ac:8f:69:a7:86:a5:ab:40:a2:e5:6f:54:b3:89:cf:70:
30:7e:09:05:30:a1:07:5b:83:bf:4c:35:c3:46:de:85:e7:92:
62:fa:bd:1a:2a:ac:81:d7:50:ab:03:e3:73:fa:fa:a0:f8:9e:
33:15:c4:c3:ab:5b:6c:fa:89:6a:14:4d:47:2f:89:5e:3b:6c:
e9:73:01:0d:6e:d8:cb:41:d1:74:3e:e5:9d:4b:20:c1:f7:86:
dc:25:36:bf:e7:09:db:01:cd:db:70:5f:fa:22:32:26:0d:58:
b7:73:ca:f8:db:ae:ae:c3:f4:0c:87:ce:53:bc:a3:bb:a9:4d:
d1:5a:67:0c:71:3c:e3:6a:ca:59:a9:23:4d:76:05:f0:88:9b:
88:06:22:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:03 2024 by rpki-client on console-ams.rpki-client.org