Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C30E0FC3B2C11EEA40AE3444AD9E6FC.roa
File: 2C30E0FC3B2C11EEA40AE3444AD9E6FC.roa (raw, json)
Hash identifier: xGQ3zKMD8Ky+OhLdvmpa93LtlMyx08aEpMKS3n8GjYo=
Subject key identifier: 77:D1:DD:5A:23:CC:D3:D7:02:BA:12:E9:6D:19:AB:1A:97:DA:8E:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C30E0FC3B2C11EEA40AE3444AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:25:40 +0000
ROA not before: Tue 15 Aug 2023 05:25:37 +0000
ROA not after: Mon 27 May 2024 05:25:37 +0000
asID: 140627
IP address blocks: 156.247.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13811 (0x35f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:25:37 2023 GMT
Not After : May 27 05:25:37 2024 GMT
Subject: CN=64db0c54-069e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:30:71:8c:a6:89:63:4b:57:0f:a5:8f:46:
f7:87:47:3d:e7:c7:88:92:70:42:77:7a:76:3e:58:
65:bc:fe:9f:ec:0f:0c:0c:5d:26:48:c6:8f:d0:45:
bd:87:a6:92:a5:e4:83:79:b1:0f:f4:be:df:ee:15:
41:70:b9:c5:ee:62:83:33:9b:a0:85:04:f7:ce:c6:
f0:d9:1a:8b:dc:84:6d:ce:a0:a0:40:aa:bc:c3:2d:
aa:47:34:82:52:6b:e1:7f:8d:5a:99:44:f5:f7:b6:
22:c1:63:6f:37:c0:b3:09:63:bc:d5:d4:77:da:44:
6b:42:79:98:b5:fc:9c:a0:5c:3b:e2:b6:f1:01:52:
6b:fc:40:eb:14:31:f3:ef:65:65:95:2a:32:75:40:
ed:7a:4d:ed:43:93:be:c8:ee:f3:08:33:e8:f2:3e:
ac:46:17:50:25:2f:cf:24:f1:0e:1f:a3:73:09:8f:
a5:6f:32:72:9a:79:db:12:e6:db:77:24:43:b6:34:
94:49:f0:d1:a7:48:5e:17:04:a1:05:6e:a6:f2:0e:
d6:d6:e9:3b:00:92:56:98:27:6e:62:c3:f5:30:18:
b6:15:d7:c2:74:67:37:46:36:52:9a:9e:64:63:c5:
5c:79:b6:a6:13:7b:d3:c5:29:25:d1:f1:88:cc:16:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D1:DD:5A:23:CC:D3:D7:02:BA:12:E9:6D:19:AB:1A:97:DA:8E:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C30E0FC3B2C11EEA40AE3444AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.152.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b5:32:f6:15:ac:d3:00:4b:ab:da:8c:81:fe:4c:ba:aa:60:
0d:d1:01:f6:b9:bd:3e:20:50:b6:1e:c8:6a:19:6b:46:08:af:
9d:fb:45:62:70:f7:45:49:a4:fc:24:54:c1:02:ba:10:d5:0f:
3c:9b:54:18:7e:f8:6e:90:ea:a0:bb:5a:7f:1e:ef:63:cb:ee:
df:05:0c:89:5a:10:e9:62:57:8b:31:a8:54:5a:fb:ec:ec:86:
d0:ed:dd:d9:a8:42:07:32:2a:31:c4:86:54:51:88:94:9b:88:
c3:8a:53:af:00:06:5b:99:78:cf:3a:3e:c2:0a:5d:dc:a2:98:
4a:8c:c6:75:86:b7:72:b5:e8:43:77:34:71:d1:f1:d4:b8:ec:
2e:de:1f:dc:0c:fc:61:66:0b:bf:3d:65:75:b2:d6:7f:bc:a0:
5e:f7:93:48:0d:ec:38:77:79:06:af:d0:3d:b6:dd:80:85:3d:
46:cb:e9:9c:4c:81:22:84:4a:2f:c3:b4:5b:c9:4f:24:31:1e:
b2:75:2c:22:f4:fe:a2:33:e3:d9:ce:0e:cb:90:51:76:e6:32:
60:65:b4:a0:9d:42:01:33:30:b8:78:a2:96:c3:e5:6e:d8:8c:
6a:a3:89:ab:b9:d8:17:ff:f2:33:5c:9c:c0:3c:2c:16:61:f7:
ac:ed:c6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:50 2024 by rpki-client on console-ams.rpki-client.org