Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EAC2502022511EF93725A5F017001B1.roa
File: 1EAC2502022511EF93725A5F017001B1.roa (raw, json)
Hash identifier: I3ePrL4byV3T5IQ2UucbqU3KgbvJ1rCjzJIg7lgYNaw=
Subject key identifier: 7E:3E:E1:B8:C3:D9:C7:2C:29:7A:57:6C:3F:E9:28:64:45:86:5E:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EAC2502022511EF93725A5F017001B1.roa
Signing time: Wed 24 Apr 2024 10:26:32 +0000
ROA not before: Wed 24 Apr 2024 10:26:29 +0000
ROA not after: Thu 12 Sep 2024 10:26:29 +0000
asID: 142286
IP address blocks: 156.225.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34012 (0x84dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 10:26:29 2024 GMT
Not After : Sep 12 10:26:29 2024 GMT
Subject: CN=6628de58-c70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:e2:08:3b:91:06:71:ea:c9:d1:9d:89:70:
1a:cb:fd:9b:f6:ca:a7:78:fd:f1:a6:83:d5:26:4b:
5f:60:43:2d:2e:ee:ae:40:af:8b:ee:9b:ab:7b:a7:
45:4b:be:d4:bc:ae:0b:9a:f2:ac:1e:9e:cd:28:a6:
b6:6a:b6:b9:84:b8:72:e4:9e:a9:ab:d3:b0:6f:8e:
a3:2b:a6:ff:53:63:05:61:7b:87:1a:56:b6:62:28:
53:29:4a:b0:6b:14:85:8f:f0:0e:34:49:d7:d9:16:
ee:e3:fb:4e:68:45:fd:95:87:24:03:81:82:82:95:
df:6d:4f:7c:82:2c:79:7c:8f:c8:6f:cf:10:94:98:
6f:8f:2c:01:6c:ce:5d:39:d7:f5:00:ae:a1:8c:75:
71:b6:c3:78:fa:60:64:bf:68:c5:da:3a:9e:28:18:
d6:8a:be:ab:4d:21:8f:b6:15:95:38:0b:1a:6b:9c:
20:ac:c7:45:29:9c:f4:c5:7d:d2:4a:63:6f:78:c7:
eb:70:cd:b3:a0:ac:c7:53:13:c8:10:3d:00:20:91:
dc:da:73:d5:54:8b:a8:c6:2d:16:52:e6:4a:da:b5:
ae:2a:ed:21:89:f6:5e:b0:c1:37:d6:89:69:8f:f8:
b2:01:26:80:b1:c9:93:62:a0:b3:32:de:0f:cc:19:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3E:E1:B8:C3:D9:C7:2C:29:7A:57:6C:3F:E9:28:64:45:86:5E:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EAC2502022511EF93725A5F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.144.0/20
Signature Algorithm: sha256WithRSAEncryption
62:90:24:d4:5b:41:94:8d:74:93:d4:dd:c0:09:96:41:25:a0:
5f:a6:0c:1f:90:07:c0:e1:90:94:69:eb:4b:76:69:2f:75:3e:
2f:4e:d1:10:3d:ca:1e:0c:9e:95:7c:3a:f9:aa:aa:c4:dc:de:
c7:cf:32:d6:cb:7b:12:95:80:38:d1:b9:25:5f:e0:2f:3d:89:
05:83:47:3c:39:c7:34:55:5a:b3:cd:91:1d:50:0e:00:af:57:
9c:f4:34:e0:1b:c4:2c:04:d4:5b:73:ec:93:7f:4c:85:4c:1d:
4d:76:1f:e0:dc:b0:15:b1:42:60:c7:06:0c:dd:f0:3c:4b:78:
04:78:e7:c0:58:ab:b6:4b:2f:2c:ed:ed:5d:ee:07:a6:4c:45:
bf:d0:ad:90:c3:0c:37:7f:0d:57:fd:c3:0a:38:70:ac:58:0f:
af:ac:a6:07:db:d0:97:2b:05:2c:b6:d1:89:29:3f:1f:47:06:
e6:53:8a:88:f4:04:40:8d:83:11:bb:40:df:95:c4:c7:80:de:
ad:ae:65:c7:0a:d5:8d:8f:32:72:6d:c6:eb:3b:46:c5:b2:b4:
ed:7c:0b:d6:8c:15:47:e1:61:09:cd:6b:00:5c:dc:c6:33:4f:
2e:12:9e:27:a7:8a:69:e1:e2:0d:52:63:6e:14:f6:74:2d:aa:
d5:46:64:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:49 2024 by rpki-client on console-ams.rpki-client.org