Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42FC15E63B2111EEAD4AB4234AD9E6FC.roa
File: 42FC15E63B2111EEAD4AB4234AD9E6FC.roa (raw, json)
Hash identifier: iEXUkagovCAeax6JuO6AydMqjd2AgqKZhuBD3TWeCAQ=
Subject key identifier: A5:A0:2F:A7:A9:FB:EE:E2:FE:9A:41:04:90:7C:9E:2B:E0:F3:4F:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3549
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42FC15E63B2111EEAD4AB4234AD9E6FC.roa
Signing time: Tue 15 Aug 2023 04:07:34 +0000
ROA not before: Tue 15 Aug 2023 04:07:31 +0000
ROA not after: Mon 27 May 2024 04:07:31 +0000
asID: 140627
IP address blocks: 156.247.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13641 (0x3549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 04:07:31 2023 GMT
Not After : May 27 04:07:31 2024 GMT
Subject: CN=64dafa06-5ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:8d:5d:fc:90:24:f0:ac:66:b0:9b:6f:be:
6e:30:a8:0d:73:1d:76:e8:93:55:39:28:3b:ba:fc:
ed:68:e7:cf:5d:61:b2:89:1e:3e:59:b1:7c:7b:af:
b4:cf:69:fb:cc:5f:09:97:38:5c:a9:35:10:07:37:
a0:3f:74:8e:22:3a:9b:76:00:e0:c4:97:f7:f2:16:
7e:8e:0f:22:4a:d5:82:73:6c:be:c8:f5:f7:3f:09:
9c:5c:85:b3:53:49:cf:ee:bb:ed:54:bc:e3:d4:88:
d6:8a:2b:54:b8:9f:23:94:27:36:25:89:73:d1:30:
ad:d7:5b:9c:7d:ab:c0:f8:e7:e3:a4:30:6f:e5:d9:
ee:62:29:b2:9a:16:65:b7:99:94:ad:7c:ad:f3:29:
5e:b3:68:14:6b:e3:d1:e5:9f:c5:a7:17:5d:d8:67:
6b:ab:17:14:d8:a9:84:49:52:ce:79:17:96:cf:61:
bd:f4:dd:81:d4:ef:af:f4:5e:e0:a2:89:42:0b:56:
d5:66:71:5c:a8:7f:c9:3d:2d:b3:65:a2:d8:75:c2:
db:47:49:a1:a3:84:41:59:8d:77:79:ef:1e:be:dc:
2b:f2:1a:11:ef:85:ab:90:9e:2b:2b:29:7c:a7:b8:
14:b6:d5:8a:8a:f4:1d:c9:c6:da:97:ad:b2:5c:6b:
18:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A0:2F:A7:A9:FB:EE:E2:FE:9A:41:04:90:7C:9E:2B:E0:F3:4F:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42FC15E63B2111EEAD4AB4234AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.193.0/24
Signature Algorithm: sha256WithRSAEncryption
06:19:13:35:e3:e2:f4:32:b8:d7:64:31:1e:1e:20:1a:b3:dc:
83:4f:da:47:7d:31:28:03:6f:81:80:bc:e2:20:69:8b:93:a3:
75:4a:c3:4f:b3:1c:1e:a6:3a:68:f2:dc:65:b8:d9:3a:0f:b1:
7b:65:72:32:ff:1b:b1:6a:32:bd:23:40:41:b1:8e:2c:7d:b5:
5c:71:da:7e:7f:91:7a:aa:2f:e6:85:dc:a2:ba:f8:9b:07:43:
d1:5f:09:cc:19:43:c5:25:31:e6:78:6e:d5:a2:a6:39:93:50:
21:30:65:7c:f2:48:7f:0a:48:7e:8b:18:28:c7:9a:99:f6:e1:
79:af:b7:ba:02:86:3c:3e:b9:47:8a:0d:f7:ae:38:67:74:75:
5f:19:9d:30:aa:5b:75:2b:87:c8:74:fc:f7:fb:19:3b:0a:f7:
47:5a:d4:ea:15:de:2e:e7:db:76:36:92:e5:b7:54:aa:8c:5a:
af:db:fd:b0:21:01:c4:83:07:37:a4:6b:e9:30:7a:72:ef:11:
4d:db:a3:26:3d:65:ab:f6:f5:4e:3a:1f:3e:a2:9e:27:bb:60:
3d:97:77:9b:24:ef:46:a5:ef:77:53:3b:5b:33:16:61:dd:71:
76:23:c0:1c:01:79:1e:57:7c:ea:67:23:27:31:61:c3:18:c1:
aa:05:3b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:51 2024 by rpki-client on console-ams.rpki-client.org