Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C14D568038311EFBD55FD05017001B1.roa
File: 2C14D568038311EFBD55FD05017001B1.roa (raw, json)
Hash identifier: oK/bQKhYNiZctfhyQ9A2/lOadT5q3+TJr1+xMSfsZHw=
Subject key identifier: DD:6C:F6:D4:B5:DF:A5:C8:21:C0:3F:F3:DA:02:A1:AA:C4:88:23:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 857E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C14D568038311EFBD55FD05017001B1.roa
Signing time: Fri 26 Apr 2024 04:12:19 +0000
ROA not before: Fri 26 Apr 2024 04:12:16 +0000
ROA not after: Tue 03 Sep 2024 04:12:16 +0000
asID: 131685
IP address blocks: 156.226.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34174 (0x857e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 04:12:16 2024 GMT
Not After : Sep 3 04:12:16 2024 GMT
Subject: CN=662b29a3-8cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:28:b3:7f:9b:31:48:7a:0c:08:9e:06:ce:
32:fd:10:5f:5b:b9:e5:68:6d:33:72:51:8e:30:1e:
53:b0:02:79:3d:e6:b6:73:10:53:e8:e4:57:8c:a3:
6a:6c:b2:ce:47:f1:79:df:8f:6c:97:a8:0b:88:51:
e3:8a:ea:c6:e3:5c:e3:f7:bd:0a:26:ca:8a:41:3d:
f2:b6:cc:ec:85:fd:63:fb:ff:17:aa:9d:12:aa:f1:
88:1f:ad:e2:dc:62:29:b9:e1:7a:2c:8f:f5:4b:71:
11:54:8a:43:ad:c4:d9:9c:7b:14:91:c5:1e:62:a4:
37:82:06:7c:95:b1:22:5c:3b:9a:3e:6f:03:bd:63:
9c:85:5e:97:55:47:ca:7a:3d:ed:41:54:27:18:77:
24:67:8d:32:d9:ff:7c:37:4f:5f:d3:bc:03:3e:09:
6f:da:52:3e:32:81:04:c8:7f:8a:fc:4a:9b:f4:2c:
4a:32:dc:eb:b4:9d:39:a2:69:9b:32:c8:0d:0b:a2:
07:1d:fb:93:59:19:2b:bd:33:1f:31:ea:64:0c:ae:
34:eb:e9:83:02:8c:24:39:e8:6c:98:0c:85:20:c8:
f0:67:11:a1:4a:f4:7b:b9:53:e3:37:47:96:9d:23:
39:17:33:7e:fe:70:da:c8:15:d5:45:a6:af:ee:77:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:F6:D4:B5:DF:A5:C8:21:C0:3F:F3:DA:02:A1:AA:C4:88:23:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C14D568038311EFBD55FD05017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.170.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ad:cf:7f:80:6f:cb:e4:c8:76:77:45:78:36:a8:13:4d:b4:
79:d3:43:13:79:5b:aa:1e:3d:a4:f4:7d:d1:4f:4c:d4:a9:03:
ba:e2:5f:d3:88:29:4b:65:08:de:42:33:85:4c:c5:f2:6d:c3:
4a:7a:da:fc:0b:dd:30:38:a7:da:e5:eb:91:43:7b:53:bc:b9:
74:e7:31:d8:a3:8a:0e:a1:6e:77:fb:e7:98:5f:79:d3:16:b2:
2c:3f:b0:ad:ec:8f:63:32:98:4d:8e:6b:3d:4a:a2:c0:0e:37:
d2:01:d4:4c:ec:7d:ba:e7:a3:2b:a0:02:fc:e9:71:df:ec:4d:
cc:e4:e3:a6:7b:97:45:a3:33:77:2e:26:24:4c:18:f4:d3:6d:
ef:04:e0:43:13:a4:08:92:6a:d1:b7:bc:7e:61:d7:50:35:90:
fd:0d:b9:5f:80:41:a1:52:f6:58:df:e7:cd:6d:0a:a6:e5:34:
e8:9d:00:62:f4:b2:de:67:ba:01:6b:c9:cf:17:3a:f0:39:d7:
9f:38:2e:0c:97:51:23:a6:09:93:50:fe:8a:24:09:1a:aa:83:
f8:5d:13:87:03:8a:df:07:4e:1c:44:0e:8c:96:1e:7a:90:52:
60:b2:fc:69:fc:3f:2c:ab:a7:ae:74:f2:87:60:61:78:7f:37:
49:cf:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:50 2024 by rpki-client on console-ams.rpki-client.org