Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/236D8EA47EB411EE930D394A4AD9E6FC.roa
File: 236D8EA47EB411EE930D394A4AD9E6FC.roa (raw, json)
Hash identifier: 19maHPHkYmOOh9YhixiMZ0rW10rvB+40Zbvjk7YDrm8=
Subject key identifier: 28:CF:EF:B8:5F:70:EA:BE:68:22:17:8B:B5:E3:A2:4C:6E:DE:D0:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 44BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/236D8EA47EB411EE930D394A4AD9E6FC.roa
Signing time: Thu 09 Nov 2023 03:57:45 +0000
ROA not before: Thu 09 Nov 2023 03:57:42 +0000
ROA not after: Thu 08 Aug 2024 03:57:42 +0000
asID: 133861
IP address blocks: 156.245.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17599 (0x44bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 03:57:42 2023 GMT
Not After : Aug 8 03:57:42 2024 GMT
Subject: CN=654c58b9-705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:de:2f:d7:e5:e8:ff:ef:2c:91:a1:4d:dd:
57:b2:4a:73:9c:ad:f9:22:ad:65:bd:46:a5:e6:96:
9e:f4:b5:95:5d:f9:3f:b8:78:76:22:bf:06:c1:d8:
1e:47:f9:dd:59:09:4e:1e:0a:f2:68:12:87:3e:4a:
79:06:ad:3a:99:b7:34:ac:fe:f8:cb:df:bb:dc:98:
91:c3:fb:e6:88:a4:fd:b5:78:cd:c8:36:98:92:c3:
f3:da:fe:54:d5:c0:de:82:d5:92:14:96:ff:99:49:
43:d2:c6:4d:42:a8:26:62:74:5e:ca:9a:87:d0:3d:
3c:32:9a:8e:e7:57:41:35:de:51:b5:54:94:41:41:
2e:61:09:79:e6:28:7d:73:e9:97:c0:ca:94:24:df:
46:89:d9:d6:1e:0f:1c:71:95:cc:79:f8:f1:dd:4a:
00:9f:49:ca:f0:62:48:98:33:de:66:dd:41:dd:9f:
00:14:a9:bc:bd:c5:d6:ac:c3:87:7e:76:5d:ac:02:
d8:d5:ea:95:d9:e6:86:a9:d0:fc:db:7f:b1:b8:d7:
e8:02:f8:46:50:5d:f4:aa:44:3b:18:c8:82:3e:18:
25:96:9f:08:a4:43:46:52:fa:2a:21:58:2c:2c:1b:
92:f6:83:d9:06:e3:1b:06:7b:5b:25:9a:25:78:2e:
e4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CF:EF:B8:5F:70:EA:BE:68:22:17:8B:B5:E3:A2:4C:6E:DE:D0:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/236D8EA47EB411EE930D394A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d5:7e:8b:c4:b4:8f:3f:de:b5:a9:06:cc:9c:0b:ff:a6:0e:
2f:29:ed:51:f9:e8:e8:54:ff:6d:b0:7e:7c:d7:a6:42:58:cf:
31:35:5e:d9:e6:db:ac:71:3a:1f:07:02:4f:e2:4c:65:36:f7:
e7:85:64:79:d1:49:e1:fe:fa:c4:0b:3f:0c:06:a9:ce:df:2a:
a8:27:a2:04:44:0f:02:74:c8:03:71:e9:a9:24:c7:f8:7c:31:
90:fb:bd:2f:3c:97:42:0a:42:c0:9f:3b:d0:45:0b:c5:17:7a:
1e:c6:e6:1f:65:79:f2:01:25:d0:94:ed:47:3a:99:d7:25:b4:
46:c6:aa:9b:c9:93:47:fa:e6:77:da:fc:a5:eb:a3:10:a9:ac:
13:71:a8:1c:af:61:cf:89:e9:11:be:52:81:a4:c7:c4:cd:4f:
58:a4:24:25:05:61:17:ae:15:27:05:b7:b0:72:6e:64:af:4a:
5c:43:76:36:96:e7:f5:b8:78:e9:ef:62:e3:48:6f:75:97:cf:
73:f1:1f:5d:1a:76:50:0a:c4:1a:0a:4c:ef:e3:55:0d:3b:f8:
78:33:b5:f4:66:aa:9e:b7:0d:f6:72:b4:32:a3:00:67:a5:19:
a5:e2:e3:74:71:9a:85:a8:16:7c:30:88:50:72:43:32:b2:8c:
64:77:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:03 2024 by rpki-client on console-ams.rpki-client.org