Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C6866B47E0111EEBE19E90E4AD9E6FC.roa
File: 1C6866B47E0111EEBE19E90E4AD9E6FC.roa (raw, json)
Hash identifier: Si6jyzRuy22Aa7co3/fB5d7Pvsdu4eG2s0znDtI/Eqw=
Subject key identifier: 61:FE:F4:31:78:B5:37:AD:20:8F:CE:8E:BE:77:C6:76:95:5B:68:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 44AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C6866B47E0111EEBE19E90E4AD9E6FC.roa
Signing time: Wed 08 Nov 2023 06:36:13 +0000
ROA not before: Wed 08 Nov 2023 06:36:10 +0000
ROA not after: Thu 08 Aug 2024 06:36:10 +0000
asID: 133861
IP address blocks: 156.224.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17580 (0x44ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 8 06:36:10 2023 GMT
Not After : Aug 8 06:36:10 2024 GMT
Subject: CN=654b2c5d-cee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:c0:fe:4a:f6:03:51:b3:33:ec:e3:ba:5d:
39:a3:64:c5:6b:57:91:ad:7e:58:f4:64:16:f5:7e:
fa:cd:35:61:25:5f:5b:4f:3b:a4:d3:c2:35:d6:10:
44:83:44:88:97:47:65:54:c7:d9:a3:bb:9a:83:0e:
5b:38:2d:50:f9:c0:36:b6:19:35:1b:a6:1c:bd:ec:
a5:e3:4d:64:72:16:21:6d:e5:ca:a6:a2:31:51:89:
15:ec:35:54:90:42:13:0e:48:93:ca:89:d8:c2:8b:
8f:ab:56:ef:ba:e2:98:d7:db:92:38:dd:e7:c4:6e:
b9:b0:38:95:56:6b:d5:e4:29:ee:ec:63:66:64:1a:
7c:72:84:05:af:ef:92:30:22:6e:2c:b9:48:76:38:
64:01:92:a3:bd:84:cc:89:00:78:a3:44:26:9e:88:
dc:2b:86:a7:07:9b:38:a0:bb:12:f1:6c:22:e8:c8:
8d:20:1c:78:f3:22:72:dd:b4:85:c3:e9:63:06:93:
0d:20:cc:f6:8e:e4:b4:52:49:88:ef:6a:68:df:f2:
31:e2:b7:2a:3c:0e:e0:f5:f3:c5:df:fd:87:3b:f1:
50:a6:0a:1b:7c:60:d9:50:18:93:6f:f2:29:22:22:
1b:5f:20:bb:9d:fa:7e:71:dd:25:5a:d6:b1:4e:22:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FE:F4:31:78:B5:37:AD:20:8F:CE:8E:BE:77:C6:76:95:5B:68:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C6866B47E0111EEBE19E90E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.2.0/24
Signature Algorithm: sha256WithRSAEncryption
25:76:70:1e:04:50:36:15:82:67:46:30:5d:9e:3e:a7:37:e5:
0c:80:2d:4d:42:49:56:c1:3d:b1:86:ca:09:11:eb:35:f1:16:
5d:71:60:3a:d5:b4:33:e4:bd:73:05:f6:fa:60:83:bd:c2:d8:
d3:f9:1c:66:57:85:5e:f2:6a:72:3c:2a:11:d8:7b:e8:c5:d2:
e0:11:45:1a:bf:8c:30:9c:98:fd:d5:66:58:d3:a7:da:0f:52:
06:2b:7a:88:00:86:04:c1:f6:30:88:33:4a:ca:a9:27:41:62:
29:d5:dc:39:6a:9b:ea:f2:1e:c6:e9:d4:81:a7:3e:79:bb:76:
fb:7d:16:64:82:d8:de:9c:3f:13:67:c9:5f:65:c4:88:2b:e7:
8c:15:b9:29:cd:9c:6b:93:7a:cd:4c:5f:b4:03:d4:34:5d:48:
e8:d2:3d:e2:aa:4a:8a:85:24:7c:64:9f:4c:29:81:9c:54:42:
1e:97:50:2e:f9:42:a3:d3:a5:c4:56:2e:6f:6a:26:e8:17:95:
36:45:32:2c:fa:f1:0d:5f:2c:35:90:92:1f:93:74:5a:df:e2:
0b:79:ba:5a:58:76:77:b3:ff:e0:08:0f:e3:ca:dc:cc:95:f4:
3f:16:13:f7:09:5c:d6:fa:e9:23:e8:78:94:ed:3d:81:72:c7:
c7:34:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:49 2024 by rpki-client on console-ams.rpki-client.org