Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35B4A9C2018511EF86B0DB40017001B1.roa
File: 35B4A9C2018511EF86B0DB40017001B1.roa (raw, json)
Hash identifier: 6cmyLFYra2ZxGnVwqXyLeRk5gCV0AuuA8KjimGtcRnY=
Subject key identifier: 7D:C1:27:9E:94:34:09:B6:F3:4D:25:ED:DA:49:CD:48:88:8F:26:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8469
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35B4A9C2018511EF86B0DB40017001B1.roa
Signing time: Tue 23 Apr 2024 15:21:51 +0000
ROA not before: Tue 23 Apr 2024 15:21:48 +0000
ROA not after: Mon 03 Jun 2024 15:21:48 +0000
asID: 142286
IP address blocks: 156.250.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33897 (0x8469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:21:48 2024 GMT
Not After : Jun 3 15:21:48 2024 GMT
Subject: CN=6627d20f-f60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:31:76:ac:ef:9a:bc:29:c8:69:39:85:c5:0b:
b8:ab:1a:01:fc:7f:9b:23:ff:4d:9e:d3:f6:69:c3:
81:e9:9d:f3:f0:87:76:e8:25:06:a0:bd:1d:e6:6a:
ee:b0:22:bd:3b:95:ad:2c:6f:6c:96:5a:b8:58:ce:
fd:6a:3c:b3:7a:e7:27:d6:87:81:e2:56:de:3c:98:
6a:f7:14:51:c4:00:23:5b:1c:94:81:04:4c:8c:5d:
55:4f:ba:ca:39:ea:da:0b:e3:84:fe:0c:7f:ba:f9:
d2:e1:3a:2e:c6:02:21:ad:8d:88:7b:ba:69:49:53:
95:28:9b:2f:6d:73:0f:8f:4d:2d:45:b4:dc:2f:1d:
28:8b:27:4d:a6:32:a5:bd:8d:e0:ab:ec:9e:58:ac:
e0:3a:27:f4:07:2d:67:fb:39:f8:64:ff:20:28:5e:
07:e0:1f:e5:18:7c:6c:1d:54:2a:42:25:d9:9d:f0:
5e:bb:a7:7e:43:8b:a6:6d:a7:e5:5b:ad:e3:3c:b7:
09:85:98:50:6d:ac:f1:28:be:49:7e:18:08:0b:6b:
bd:27:f7:08:27:9c:31:c2:a7:d8:5c:aa:d7:8d:03:
3f:04:37:62:42:67:f8:10:07:d2:1d:6c:55:66:06:
de:ae:44:02:ad:44:07:9c:b8:c9:c1:40:f5:21:99:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C1:27:9E:94:34:09:B6:F3:4D:25:ED:DA:49:CD:48:88:8F:26:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35B4A9C2018511EF86B0DB40017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.64.0/18
Signature Algorithm: sha256WithRSAEncryption
19:73:85:d9:91:10:9d:ea:13:47:27:22:c6:db:df:35:b7:2a:
81:8e:f8:18:b8:24:f6:7f:65:2c:57:9e:c2:5e:c4:3c:3d:7e:
c0:e2:45:e0:9f:89:32:8a:6a:fe:b3:eb:af:52:1f:32:3b:15:
ef:d7:2e:05:2a:7a:84:cf:9c:a3:86:8d:0d:26:4d:f1:43:c7:
b6:25:41:c0:86:d4:75:e6:b5:fc:48:76:a1:fe:58:9a:db:69:
ef:f4:e2:3f:08:0e:16:9c:b1:62:85:ef:ca:44:34:3a:e4:47:
94:48:66:bd:80:77:2a:bb:27:3a:fa:00:eb:47:3c:2f:af:50:
a3:44:7f:6c:df:8f:86:9d:f0:3b:26:04:10:9b:81:d6:91:b3:
76:e4:27:41:e9:d2:d6:b1:20:35:49:fb:c9:3a:e1:89:8e:82:
fa:00:44:10:b0:32:b3:46:c5:44:76:0e:02:02:30:9d:69:bc:
c9:7f:27:4e:bf:42:4a:b0:8a:d1:ff:30:01:9f:5a:29:7f:94:
14:d1:cb:e9:68:56:50:bc:d2:17:b2:3c:66:2a:2c:ef:6b:60:
da:5c:36:26:3b:98:ba:06:48:70:52:0f:11:41:45:4b:be:93:
5a:77:15:44:24:01:f7:0a:04:03:39:3b:01:c6:6b:13:1e:e2:
20:9f:09:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:06 2024 by rpki-client on console-fra.rpki-client.org