Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35034C16F91811ED9B2B3C1B4AD9E6FC.roa
File: 35034C16F91811ED9B2B3C1B4AD9E6FC.roa (raw, json)
Hash identifier: qrMg4PogIx58Znxw+Itif5Fcba/syPBQYtRTf7WItTQ=
Subject key identifier: E4:57:C1:F3:D4:80:F8:41:95:8A:EB:3E:35:EA:7A:99:1C:9A:1E:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 26D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35034C16F91811ED9B2B3C1B4AD9E6FC.roa
Signing time: Tue 23 May 2023 03:16:28 +0000
ROA not before: Tue 23 May 2023 03:16:25 +0000
ROA not after: Tue 05 Nov 2024 03:16:25 +0000
asID: 399674
IP address blocks: 156.252.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9938 (0x26d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 03:16:25 2023 GMT
Not After : Nov 5 03:16:25 2024 GMT
Subject: CN=646c300c-7317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:5b:0e:1d:8e:51:99:45:d5:4a:a7:92:2e:
5b:94:3d:b2:a6:62:02:1f:df:ae:ff:41:72:c8:b7:
72:d2:5f:33:0a:77:7a:1d:2a:81:50:1b:61:57:36:
8a:6c:91:2b:dd:7e:db:3a:d1:6e:3c:06:33:ee:9d:
fb:b6:a2:69:7a:cf:da:58:7d:32:e9:4d:0a:bc:4b:
71:8a:ac:00:e6:b7:fc:22:95:44:c9:a6:a1:8a:12:
b6:d6:7d:64:fb:1e:e8:6b:1a:93:2f:f7:c6:9b:76:
5c:f9:2a:87:1a:d4:10:48:40:13:59:9b:9b:f3:f6:
83:df:bd:19:61:18:a0:0c:99:88:c5:b2:22:49:f1:
5c:60:c7:ba:e2:e6:c3:b3:0c:35:31:45:86:c8:6b:
ef:64:97:d0:96:e9:b9:f6:b1:f9:6b:b6:8e:d6:21:
67:a6:e9:cd:e8:3a:1c:89:87:1e:db:da:87:89:c1:
45:fa:7a:a2:77:19:cf:fe:e1:d2:53:cf:39:70:74:
68:70:fd:1d:06:ae:09:b6:6e:7a:0b:dc:b0:96:be:
0d:02:5e:6a:fc:66:16:81:f2:bd:62:64:da:a7:4e:
b3:25:c8:81:f5:15:1d:4e:3a:e0:85:34:0f:03:98:
7a:d7:a7:2f:22:b6:9c:c4:45:91:90:94:af:4b:63:
9d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:57:C1:F3:D4:80:F8:41:95:8A:EB:3E:35:EA:7A:99:1C:9A:1E:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35034C16F91811ED9B2B3C1B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:47:f1:e7:a0:7e:c9:03:c1:57:33:3e:59:25:e0:2c:43:2e:
24:1c:98:3b:fb:5e:cf:1e:48:5b:a3:ca:a4:00:54:32:89:91:
c9:60:dc:d2:de:0a:fd:ce:3f:2f:b6:0c:ef:b5:2b:c6:66:25:
42:89:6c:ee:de:ad:e5:53:a0:cd:c8:64:77:1f:99:04:29:ce:
03:c7:aa:8e:8f:19:0b:c1:ab:7d:29:47:40:9f:6c:24:d2:a4:
37:1a:a7:de:bb:db:27:35:25:9f:62:0c:41:ba:45:a7:c7:cd:
4d:ca:b7:0f:e0:8b:e4:d5:8e:53:e3:63:58:40:1a:cc:a8:e7:
ff:b8:70:34:ad:a3:9a:18:3a:ad:5a:1d:fe:46:89:71:cc:0d:
5f:cc:40:b6:6a:3b:46:d3:50:1d:6d:d1:12:48:23:47:47:46:
a9:76:79:f8:24:a3:7a:e4:bb:a7:50:1f:f6:58:3c:45:5a:33:
dc:ff:76:a6:2d:5d:5b:c4:6d:dc:4d:dc:03:e1:c8:67:b7:f7:
9c:df:ec:32:51:ed:09:9e:3a:e8:d3:5a:44:c7:e9:8f:b0:00:
07:ec:2e:98:66:cb:50:c7:23:39:e0:05:65:87:08:5e:be:eb:
25:21:66:30:3f:d7:68:60:21:5b:c9:77:3b:b0:ec:76:58:da:
65:fd:67:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:44 2024 by rpki-client on console-ams.rpki-client.org