Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E11CB44018311EFB994E22F017001B1.roa
File: 1E11CB44018311EFB994E22F017001B1.roa (raw, json)
Hash identifier: ywB5ugGOuvi32/oKuFzOByf/XG04Ep8rQe02HB37p98=
Subject key identifier: 58:51:35:98:3F:50:C5:F5:A6:B4:BA:2C:80:21:35:4F:E0:BD:C6:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 844F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E11CB44018311EFB994E22F017001B1.roa
Signing time: Tue 23 Apr 2024 15:06:53 +0000
ROA not before: Tue 23 Apr 2024 15:06:49 +0000
ROA not after: Sat 25 May 2024 15:06:49 +0000
asID: 137547
IP address blocks: 156.245.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33871 (0x844f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:06:49 2024 GMT
Not After : May 25 15:06:49 2024 GMT
Subject: CN=6627ce8d-d00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:16:66:c3:5f:ec:a4:23:9e:ac:d2:a4:2a:
e5:34:97:bb:d1:95:ae:9d:1d:a8:ec:a8:81:a9:8e:
b6:c2:2c:9c:1b:1f:4f:db:bb:76:62:15:44:86:37:
fa:af:d1:87:e6:97:af:b6:f7:f6:d3:05:79:79:6c:
6a:6d:79:cf:b1:ea:1b:50:f8:f4:06:0c:08:ba:a4:
ca:ee:e7:01:c2:34:9c:da:00:8d:e7:66:64:4b:56:
02:be:98:75:d4:51:95:ca:ae:c9:80:1d:af:bb:cd:
b0:83:db:54:28:7a:bf:3b:e6:74:bf:e7:c0:a8:7d:
f4:12:d0:5c:e8:6d:15:71:b2:17:9d:06:07:87:72:
62:d2:2b:c9:72:e4:1c:f0:52:a1:98:43:93:c8:ae:
6e:0e:ac:6b:22:24:d9:56:43:47:f2:60:4c:8a:fd:
be:53:7a:c1:f4:cf:b2:8f:45:16:68:9c:7f:34:77:
d7:fb:72:b0:fd:2c:0e:49:f8:66:43:fe:c8:6e:e9:
0c:07:7f:5e:98:72:41:f1:e4:3e:04:93:78:ab:46:
f0:56:4a:f7:20:85:d9:0c:83:bb:6b:de:5d:21:d2:
f1:e4:7e:05:83:44:36:ff:26:c8:07:21:57:98:7f:
63:95:14:4d:9d:f7:f3:ff:49:b6:44:c5:14:77:8a:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:51:35:98:3F:50:C5:F5:A6:B4:BA:2C:80:21:35:4F:E0:BD:C6:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E11CB44018311EFB994E22F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:9c:3d:dc:9a:9b:bb:dd:1f:8a:2a:be:17:7d:8f:b3:be:55:
f0:85:55:1f:4a:76:53:bb:58:1c:c5:a6:56:f4:a2:56:57:b4:
30:f4:03:a7:b3:ba:53:29:3c:6c:0d:9f:83:be:89:06:3c:2d:
f6:92:91:2c:1e:38:09:e2:d2:4c:a1:2b:c4:c8:3d:55:af:68:
a3:0f:bd:a9:37:75:d4:37:68:8a:51:08:03:5c:41:62:4d:2f:
de:4b:11:6d:de:94:76:7c:d7:fe:5f:4b:7a:66:36:a0:da:18:
2c:6c:79:e9:d1:38:a9:0f:18:6e:a6:04:fc:54:76:06:b1:9b:
80:50:fb:0b:bc:47:32:23:74:9d:03:1b:7a:79:7e:37:f0:43:
66:0b:43:71:48:d0:69:cd:fd:08:b5:2c:71:6a:4f:2f:8d:cf:
48:7e:2b:52:82:3e:7b:fd:92:b2:79:ed:96:55:22:9d:d5:b0:
04:a8:0d:a6:6e:af:1e:d0:2f:e7:aa:c8:61:c2:22:db:1a:47:
30:7d:14:44:54:8f:ed:8d:1d:2a:8c:48:11:7d:e0:cd:bb:32:
7d:ca:7e:1b:39:55:7a:bb:10:82:91:b0:7a:3e:f0:e9:54:f8:
1a:40:27:55:a4:a4:23:12:ab:7b:77:fa:52:5f:f5:e1:40:22:
ac:4a:81:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:49 2024 by rpki-client on console-ams.rpki-client.org