Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/280EB83C82C111EEBCF5B6454AD9E6FC.roa
File: 280EB83C82C111EEBCF5B6454AD9E6FC.roa (raw, json)
Hash identifier: 82b0GKZ6V92pOq7Bo7NKf902fnhYDb3djCYNbs7Dp4I=
Subject key identifier: 21:0F:98:10:5F:F8:E2:38:01:B1:5F:2A:B7:88:B4:98:BF:C3:DD:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4926
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/280EB83C82C111EEBCF5B6454AD9E6FC.roa
Signing time: Tue 14 Nov 2023 07:41:01 +0000
ROA not before: Tue 14 Nov 2023 07:40:57 +0000
ROA not after: Tue 12 Nov 2024 07:40:57 +0000
asID: 397630
IP address blocks: 156.227.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18726 (0x4926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 07:40:57 2023 GMT
Not After : Nov 12 07:40:57 2024 GMT
Subject: CN=6553248d-d5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:32:67:fb:7c:da:14:a8:ed:4c:e1:d4:ac:
a6:a3:15:67:4c:cf:cf:3b:79:3a:68:41:85:d9:9e:
9f:3d:85:10:d3:ed:6b:ff:5c:85:62:4b:cc:56:9d:
1e:4b:fd:78:5b:21:b4:2b:3f:9f:0a:ac:92:85:bc:
32:dd:b6:40:ef:3c:ca:6f:f6:b5:e5:af:60:ac:de:
96:fe:04:1f:09:8a:ac:45:8c:fc:4b:f1:7d:40:f3:
6b:43:87:01:3d:9e:74:ca:70:bf:3c:6b:44:69:ec:
4c:8e:fd:27:fa:5e:2f:c4:0a:ea:e6:87:95:a0:46:
cf:61:bf:93:a1:b5:25:2a:e0:d7:6e:98:1b:1b:a4:
bb:06:b7:e3:0b:e2:bd:53:b6:51:f3:23:2d:84:b3:
c4:16:9a:af:96:e5:3f:d5:0d:fc:d8:9d:fc:85:22:
af:77:80:b5:3b:b7:4a:3d:9d:67:8d:9d:03:bb:6a:
d5:42:8b:be:31:4e:bc:48:98:80:93:a7:16:f2:a8:
7a:e2:63:70:fa:5f:43:23:37:db:0a:90:74:bd:e0:
fd:5f:79:18:0d:f0:59:1e:08:df:b6:ca:9e:72:e0:
c3:66:4f:ba:9e:36:4c:87:d0:34:cb:7e:f9:17:1a:
47:d0:31:71:19:d1:20:59:78:0c:e9:6f:c4:ce:8b:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0F:98:10:5F:F8:E2:38:01:B1:5F:2A:B7:88:B4:98:BF:C3:DD:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/280EB83C82C111EEBCF5B6454AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:97:66:2f:45:36:cf:27:1d:9f:5a:14:b7:59:be:4d:b1:75:
0b:84:36:c0:9b:e3:cf:38:c8:8f:5e:61:b9:aa:d7:09:09:5d:
a5:95:b4:c6:0f:cb:59:14:56:fd:12:dc:c9:c7:32:c4:88:c9:
35:e5:54:1a:e2:ce:36:d2:9f:8f:73:8c:56:fb:a3:20:ba:da:
57:f4:b8:d0:fd:2e:24:c7:0c:b4:aa:23:f8:63:c7:df:99:9d:
59:a2:40:5a:e3:46:2e:ab:53:e2:36:aa:91:b9:c8:74:f0:9c:
ad:16:c5:dc:bd:8d:33:42:ac:81:2c:80:43:08:de:a6:60:8c:
b2:29:63:58:85:e6:39:9f:3a:6c:5f:43:b6:7e:8f:ea:f0:e4:
6e:16:32:90:45:cd:a0:30:79:59:d9:6c:bd:d7:9e:87:e5:6a:
d6:6d:73:5f:73:d1:c8:0b:34:00:fb:99:2e:f5:c7:d3:7a:87:
5d:d0:2a:a4:e8:bc:a6:28:d1:4d:00:9e:18:a0:45:c3:0c:5d:
c4:3c:f4:60:70:51:54:1b:a2:35:52:b9:59:31:4e:a1:a7:32:
42:99:4c:8f:ea:2f:18:e5:16:bc:09:ea:4d:52:e1:69:47:1a:
dc:48:7d:42:76:62:9b:2d:55:fd:77:5d:c8:04:79:6d:e2:81:
8e:0c:60:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:50 2024 by rpki-client on console-ams.rpki-client.org