Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/488B733EFDC911ED89F459594AD9E6FC.roa
File: 488B733EFDC911ED89F459594AD9E6FC.roa (raw, json)
Hash identifier: 5enSGYRRExOA2Q7OHyqpv5F3GzjBxRCNCCRe8/0PriM=
Subject key identifier: A8:86:10:99:B4:72:D6:FB:59:01:DE:72:41:C2:48:9C:58:67:3C:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 27F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/488B733EFDC911ED89F459594AD9E6FC.roa
Signing time: Mon 29 May 2023 02:34:07 +0000
ROA not before: Mon 29 May 2023 02:34:03 +0000
ROA not after: Wed 15 May 2024 02:34:03 +0000
asID: 63888
IP address blocks: 156.255.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10232 (0x27f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 29 02:34:03 2023 GMT
Not After : May 15 02:34:03 2024 GMT
Subject: CN=64740f1e-8635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:c6:2b:91:38:ae:6b:0b:f0:63:e2:7d:eb:
6e:e4:81:b1:64:cd:ea:1d:59:45:9f:59:f2:98:86:
05:3a:23:4b:d0:1f:5a:77:b9:af:18:e5:e9:72:f4:
b4:7b:82:f5:0f:6d:25:61:35:99:59:b4:96:78:55:
9a:f5:d0:19:1a:ca:c5:71:3f:55:12:41:24:91:22:
df:7b:8a:cc:72:6d:fa:72:e6:81:38:13:89:8d:d4:
a8:9b:dd:8a:22:ea:a1:68:8b:c9:b1:ff:16:61:29:
94:98:07:ce:51:b2:0b:6b:df:44:cc:1c:06:74:b6:
d0:65:1f:54:10:b7:ad:ed:79:6a:4a:65:3f:3f:cc:
1c:9e:e9:85:64:da:c5:b8:f3:a7:7d:ab:44:de:54:
a9:26:2c:a6:1e:4c:01:31:6a:41:ad:f6:c3:40:4a:
bb:68:16:fa:c3:9b:60:d8:38:95:f5:7a:c5:90:58:
2e:e1:17:44:c4:3a:e7:72:45:5a:4c:70:c3:12:94:
a8:4b:d9:bc:88:ff:a3:4a:bb:d4:9b:d1:ed:d0:87:
0e:11:52:22:08:23:42:7e:e2:13:e2:c6:0d:25:ea:
04:52:c9:d8:40:4f:40:ae:f3:69:7c:4d:9f:c8:e9:
24:87:07:0b:ab:cd:cf:6e:d5:a3:92:32:8d:0e:b0:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:86:10:99:B4:72:D6:FB:59:01:DE:72:41:C2:48:9C:58:67:3C:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/488B733EFDC911ED89F459594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.99.0/24
Signature Algorithm: sha256WithRSAEncryption
54:9c:1e:94:84:9e:77:04:6f:a1:19:49:3e:2c:fc:c0:5a:75:
a2:1d:3f:ca:d5:4a:4a:51:a0:e1:37:88:5b:88:0a:48:87:92:
df:ca:33:d7:8e:20:9a:e3:ea:ae:16:08:65:2f:93:e1:61:d6:
1c:9d:b2:06:05:68:7a:10:dd:ed:49:d9:89:f3:9d:0d:0e:db:
28:7e:28:ae:73:e4:3b:51:f7:5c:0c:3d:51:a2:19:a1:a6:91:
d8:77:27:a2:73:12:65:35:71:56:97:87:4c:a2:ea:7a:82:7c:
32:b1:2c:11:9c:09:2d:be:4f:fc:da:df:61:f5:11:3a:de:d1:
bb:91:d5:39:8c:2f:f7:f1:bf:c3:ff:e0:23:3b:c9:dd:e1:25:
07:a1:f5:b9:c8:84:dc:2e:26:41:a5:c0:da:b3:56:fc:bf:b3:
e1:9f:dc:ff:ea:23:e2:e7:af:69:19:96:fa:4b:e2:0d:e5:6b:
68:3c:94:83:d2:e4:71:02:ca:fa:ab:d3:15:59:8c:a7:ee:ed:
5e:a0:e5:93:56:19:f3:7a:8f:c9:4d:31:28:18:db:fc:bc:65:
29:31:dc:7c:7f:4a:73:c3:81:5d:a6:ff:68:8f:d1:55:7e:95:
bd:04:1c:51:04:55:5e:93:e7:a2:28:2a:e2:e2:67:04:2a:c3:
63:17:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org