Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D15C7FC539B11EE9CD18C504AD9E6FC.roa
File: 3D15C7FC539B11EE9CD18C504AD9E6FC.roa (raw, json)
Hash identifier: sytbQBo2EAxWURaoXFJpM44lQ+8rBVsKiXVISr5Svio=
Subject key identifier: E5:42:DC:D8:01:A1:31:E7:00:52:12:CF:9F:0B:54:E5:CF:76:46:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 395C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D15C7FC539B11EE9CD18C504AD9E6FC.roa
Signing time: Fri 15 Sep 2023 07:41:11 +0000
ROA not before: Fri 15 Sep 2023 07:41:07 +0000
ROA not after: Sat 08 Jun 2024 07:41:07 +0000
asID: 142403
IP address blocks: 156.236.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14684 (0x395c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 07:41:07 2023 GMT
Not After : Jun 8 07:41:07 2024 GMT
Subject: CN=65040a96-4fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:b4:e9:c8:c5:77:85:ad:97:77:6e:b3:5b:
5a:be:91:ae:7b:77:82:ee:88:d4:77:e3:58:0f:08:
b7:58:93:bd:af:d8:81:cb:d0:b6:f8:bb:15:2b:a1:
8d:46:35:e3:c6:cb:3e:27:c6:83:d6:2f:66:30:bd:
7b:67:6b:a5:9e:ec:7d:45:48:4d:f8:de:49:2b:a1:
7d:d2:44:55:bd:7a:ad:c0:a3:e7:ea:88:92:4e:00:
79:be:78:ae:e5:6b:6b:96:97:42:9e:4d:14:5e:66:
e5:74:4b:23:5f:f7:08:80:14:08:12:68:ca:1d:ea:
e5:db:25:53:89:e4:7d:10:96:7e:2c:43:c8:22:8d:
ba:25:9d:51:41:ee:44:67:78:a8:d4:06:f1:cd:99:
15:50:09:36:8f:b4:d7:58:c9:b7:54:bd:a8:ca:c5:
3b:4d:b5:8f:02:e2:d1:04:17:1a:57:97:40:86:cc:
7a:8f:a3:4a:29:e6:19:8b:d8:d4:f5:ec:d2:02:7e:
35:3d:63:85:6a:4e:5e:3a:f4:ed:4e:20:2f:32:f8:
a1:64:0d:b7:45:7d:e8:2c:94:dc:30:09:f9:5a:ff:
b2:82:f5:70:1b:b8:24:80:53:a7:a7:d5:2a:cd:70:
ab:aa:64:ca:81:e4:a8:c3:27:11:18:3a:22:60:3e:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:42:DC:D8:01:A1:31:E7:00:52:12:CF:9F:0B:54:E5:CF:76:46:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D15C7FC539B11EE9CD18C504AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.70.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a2:27:19:bc:c5:64:d6:d7:24:48:e3:95:7e:e7:df:88:66:
a6:dd:89:10:04:b1:7f:9a:d5:55:e2:50:58:66:ea:ff:68:3d:
2b:34:d7:6e:2d:48:29:5a:83:00:90:25:fe:42:ec:f6:70:d6:
c3:1c:70:01:ed:18:82:a8:44:73:95:0c:47:81:16:d6:92:5c:
73:03:73:3b:25:00:12:a6:31:44:6f:6f:be:51:7f:05:07:ca:
e9:03:b0:b9:d8:af:6f:85:40:26:5b:65:00:d3:6e:30:7d:c7:
a4:6a:d2:15:ed:46:31:ce:0e:28:19:2d:ee:a7:f5:88:fe:16:
95:2f:21:98:37:0b:5a:40:4e:8b:1d:fd:0c:54:9e:19:b8:5e:
3d:d3:74:51:53:28:d4:3b:1e:a4:cb:45:ca:39:22:78:77:f5:
d2:27:ed:24:58:9c:fb:73:c9:ea:7f:12:22:ed:ef:c2:b6:88:
b6:b5:61:e4:d3:15:8a:32:e5:8a:ba:a9:f8:06:ba:bb:c3:a4:
cc:bc:dd:31:89:eb:b1:61:cf:8f:3b:88:4f:06:db:2a:af:ee:
bc:9c:8a:29:de:06:3d:ce:76:94:65:c1:4b:33:1c:bb:00:6c:
64:03:cc:47:f5:89:3b:1b:d7:5d:61:f5:ce:cc:39:6f:d5:aa:
a6:e4:c0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:07 2024 by rpki-client on console-fra.rpki-client.org