Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30B9392408FC11EEB9EB353B4AD9E6FC.roa
File: 30B9392408FC11EEB9EB353B4AD9E6FC.roa (raw, json)
Hash identifier: Vc4XYuFXJRqEYF2qldxU9M6PJfvtBkG+KFn3PpZ8HCg=
Subject key identifier: 90:96:F5:90:3D:96:BE:33:54:68:1A:08:D0:91:3A:B5:FF:8D:3A:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2B57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30B9392408FC11EEB9EB353B4AD9E6FC.roa
Signing time: Mon 12 Jun 2023 08:36:14 +0000
ROA not before: Mon 12 Jun 2023 08:36:10 +0000
ROA not after: Fri 06 Sep 2024 08:36:10 +0000
asID: 131618
IP address blocks: 156.230.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11095 (0x2b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 08:36:10 2023 GMT
Not After : Sep 6 08:36:10 2024 GMT
Subject: CN=6486d8fe-c594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:f5:12:ab:8d:58:f3:34:61:7b:ea:27:af:
05:88:c9:e6:d3:3f:ac:9a:64:52:a5:90:61:92:7e:
60:13:2c:6d:cd:9f:79:52:58:19:e8:63:1f:24:a1:
f8:b4:3e:17:75:24:04:e8:cc:b2:fb:f3:67:a3:a8:
3f:f2:db:73:f5:bb:57:7c:14:df:2d:ab:d7:2b:6a:
aa:a1:12:9f:64:f1:7a:55:c6:3c:18:22:7d:6a:01:
2b:7f:57:b2:00:6a:8a:38:6a:bb:17:95:6c:41:d0:
fc:38:78:5f:a2:22:ed:5e:50:d1:ee:8b:61:f4:87:
9c:af:d1:90:7f:f6:47:71:00:5c:4e:e4:fe:ec:ae:
38:00:62:e2:29:b7:4d:02:de:74:11:95:ef:65:d2:
ca:a6:58:41:71:ee:71:56:56:e1:a3:4d:42:24:b7:
cf:a0:f1:d4:d3:3f:8e:db:0d:4a:18:2f:c5:0d:72:
90:3e:b0:92:57:3d:f3:73:da:0d:27:28:99:d4:50:
bd:5a:fb:73:d5:5e:ac:8c:e9:10:88:7d:b6:94:2b:
74:1a:0c:2d:b0:c4:37:48:f5:c8:27:ac:a9:5d:c3:
ab:c4:1b:97:28:9f:85:c6:a1:10:5f:7b:ed:9d:91:
0c:dc:d6:75:8e:c7:f3:d9:21:19:78:93:82:11:7d:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:96:F5:90:3D:96:BE:33:54:68:1A:08:D0:91:3A:B5:FF:8D:3A:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30B9392408FC11EEB9EB353B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.14.0/24
Signature Algorithm: sha256WithRSAEncryption
02:64:08:6d:54:0f:dc:82:39:bd:75:fa:41:14:c1:46:a8:59:
f4:de:54:e4:62:73:1b:9c:8d:d1:17:bc:24:af:96:bb:07:f1:
19:e2:1d:20:c5:22:fa:dd:d4:ca:31:4b:75:a7:e9:eb:5e:c1:
0d:41:47:ba:ae:23:58:8b:79:d5:f2:25:9f:93:fa:97:22:2c:
b2:52:26:57:5b:95:b1:d1:64:e3:1c:c2:36:a5:69:0c:80:0e:
37:3a:0f:50:a4:a6:fa:35:35:66:8f:fe:82:03:97:37:f4:34:
1f:8f:e6:8a:d1:d8:b1:1b:68:fd:c3:ac:e3:b6:fa:3d:d5:19:
bd:6d:f3:0b:a8:a3:8c:07:37:86:54:e2:ff:06:9d:53:93:79:
ea:ef:e2:2b:c2:b8:ea:a8:ef:b0:88:b5:a9:ee:24:7a:68:63:
0d:22:50:00:af:1f:c0:6f:cf:fc:aa:1d:f1:b4:7c:ac:d1:3d:
9e:f0:e2:1c:d2:c6:f9:2e:f7:d8:b4:ec:c2:6d:b3:3c:d5:e2:
88:3d:27:60:ed:7c:ea:73:d4:77:ab:27:75:2b:f8:56:fb:63:
68:1d:5a:b4:7e:9a:d9:0f:97:aa:43:03:f7:27:e1:7a:48:44:
43:d6:c5:16:65:40:49:3f:ce:c1:a2:a2:8b:c9:40:aa:58:97:
f3:ba:4f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:50 2024 by rpki-client on console-ams.rpki-client.org