Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EB226603B2611EE857CC1324AD9E6FC.roa
File: 3EB226603B2611EE857CC1324AD9E6FC.roa (raw, json)
Hash identifier: wLphvU2dCqLyw0op67NW6aaRLTfrVI8lFoRyiQHUxzc=
Subject key identifier: AD:C7:40:6E:B2:AC:82:E4:7D:F6:17:D7:45:1B:AD:7B:DD:92:F8:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3597
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EB226603B2611EE857CC1324AD9E6FC.roa
Signing time: Tue 15 Aug 2023 04:43:14 +0000
ROA not before: Tue 15 Aug 2023 04:43:11 +0000
ROA not after: Mon 27 May 2024 04:43:11 +0000
asID: 140627
IP address blocks: 156.247.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13719 (0x3597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 04:43:11 2023 GMT
Not After : May 27 04:43:11 2024 GMT
Subject: CN=64db0262-9b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:eb:3b:95:21:3a:3c:69:7e:fa:f4:55:b7:
25:37:01:72:ab:24:d3:cd:72:93:17:69:a5:3d:9a:
4b:47:3d:a4:fe:a0:fe:8b:e7:bb:1e:98:e2:3a:66:
b5:7c:2d:df:17:7c:c6:d8:45:7e:4d:33:3e:ce:f8:
4c:e5:1c:64:6d:ff:f6:4b:2c:33:76:da:3a:b9:bc:
5a:37:ed:c7:d4:31:d3:a6:7a:06:43:ff:dd:6c:82:
27:b9:3b:87:68:e2:ba:f5:d7:cb:f1:c9:03:bc:58:
df:40:27:32:a1:f2:89:65:e0:b7:89:ce:21:88:fa:
10:24:9f:10:53:63:0f:1a:71:90:01:dd:e9:37:4b:
03:eb:84:64:29:5d:2a:1f:58:54:36:79:82:1a:02:
d3:5c:90:81:fa:c6:9d:29:83:55:5b:0e:32:d6:37:
f9:9b:8d:49:49:2b:80:fc:53:dc:a2:d5:79:6d:2a:
de:52:f1:7b:35:a5:5d:e0:9b:36:99:46:c2:e1:5a:
29:90:ea:68:1b:4d:65:93:88:34:a1:67:d7:ed:a7:
38:77:cf:23:27:a1:1b:7e:e6:16:e8:12:92:af:95:
ee:f4:f9:cc:ef:a9:56:36:87:3e:a3:e0:dd:93:0e:
f9:a4:6e:ee:11:43:60:ee:68:31:ad:1a:12:d9:e2:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C7:40:6E:B2:AC:82:E4:7D:F6:17:D7:45:1B:AD:7B:DD:92:F8:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EB226603B2611EE857CC1324AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.234.0/24
Signature Algorithm: sha256WithRSAEncryption
46:87:63:2c:d1:7a:fb:8f:a3:a4:5f:dc:b8:1e:8f:01:ee:5e:
3d:bc:5d:88:76:ee:38:36:45:93:c1:66:e1:89:9f:b8:aa:a2:
2f:ac:e2:f5:8f:9a:c6:fe:9d:ba:bc:97:b0:b5:67:34:72:ef:
4e:ef:a1:fd:58:e9:b8:84:f7:74:cd:0e:a5:f0:f6:00:7c:b4:
43:b0:b8:d8:42:8f:c2:3e:3b:26:72:aa:9a:3d:67:ea:c8:72:
dd:2e:97:59:49:ba:c8:6d:2c:21:1a:de:bf:a6:8e:0b:f0:f6:
64:09:26:c4:f9:cd:8f:da:6f:5c:a1:a2:28:24:4c:f6:77:29:
d5:38:61:e7:0b:45:32:96:d3:8d:14:cc:8f:6a:cd:33:07:75:
64:ab:33:27:a5:f4:9d:7c:01:ce:b1:79:33:54:c0:23:ba:72:
f0:77:98:cd:88:b9:83:64:d2:10:d8:ba:9c:64:f9:8a:71:7b:
12:a5:83:f9:cc:d6:31:c3:d4:91:ad:f7:9d:ac:9a:a7:aa:5b:
c8:8c:b8:42:2a:d1:b8:db:b9:5c:36:ac:34:96:21:b0:68:3c:
a8:ad:cc:91:eb:f7:ae:de:60:8a:1e:3d:35:37:d9:fd:3a:5b:
93:2a:6b:8e:8c:b8:ae:e2:13:5e:2d:3b:73:ea:fd:1b:f5:80:
37:36:2f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:00:48 2024 by rpki-client on console-ams.rpki-client.org