Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A12C728F7BC11EE9D0AA307017001B1.roa
File: 4A12C728F7BC11EE9D0AA307017001B1.roa (raw, json)
Hash identifier: bvcZUS3jDTtSnkW2qXjw48BsvRvRz+mlAicog4buzJk=
Subject key identifier: 2D:08:67:58:A6:63:60:4B:60:22:16:AC:62:D9:B6:9B:7A:1F:A8:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 822C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A12C728F7BC11EE9D0AA307017001B1.roa
Signing time: Thu 11 Apr 2024 04:30:56 +0000
ROA not before: Thu 11 Apr 2024 04:30:53 +0000
ROA not after: Sat 18 May 2024 04:30:53 +0000
asID: 141718
IP address blocks: 156.225.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33324 (0x822c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 04:30:53 2024 GMT
Not After : May 18 04:30:53 2024 GMT
Subject: CN=66176780-dd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:37:11:d0:dd:1d:42:e7:d8:e4:8b:f8:18:
3d:cf:b0:7e:81:6b:1c:87:34:58:d0:91:92:28:5a:
4c:2e:12:78:72:33:4a:a4:a7:c0:4d:5d:ea:ca:9a:
ef:d7:44:03:72:8b:dd:10:62:5f:20:e4:c7:fd:d8:
1b:f4:a1:ee:01:94:fd:d5:ed:00:00:e2:02:43:73:
21:7e:6c:39:8a:bc:80:31:0e:15:57:3a:36:3b:fe:
b8:c8:d1:3d:42:00:68:7c:ab:46:c6:6d:10:7f:1c:
de:27:b5:d8:4e:b0:91:4d:2a:ca:9b:a2:4a:42:af:
48:f6:d9:2a:26:72:86:e9:da:5d:b4:44:8c:d2:9f:
2c:b7:00:15:3a:21:e8:75:8a:97:0f:44:be:b5:9a:
3b:1c:f8:7e:7e:21:f0:62:12:cd:e3:78:14:c6:1e:
58:59:27:b1:31:bf:65:ef:f5:5f:bf:06:24:84:51:
58:64:8f:9a:c4:22:51:43:b4:e4:07:c7:41:2a:79:
4b:ab:c5:47:db:2c:b5:49:39:b6:d5:4f:4f:7b:a7:
e6:d1:64:c2:fd:72:3b:15:99:6d:61:87:87:83:60:
1a:54:ff:34:de:58:6e:7e:db:5f:5e:17:b4:d8:d8:
39:14:3b:16:4f:f2:55:2d:5c:19:c2:22:7e:f4:65:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:08:67:58:A6:63:60:4B:60:22:16:AC:62:D9:B6:9B:7A:1F:A8:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A12C728F7BC11EE9D0AA307017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.68.0/24
Signature Algorithm: sha256WithRSAEncryption
50:37:67:ae:84:be:72:7a:4a:48:16:6b:5f:7f:d0:6d:69:9c:
2f:8a:e2:13:fc:ab:00:14:41:6c:d8:b4:0b:92:44:50:2e:b9:
85:ec:fd:d2:b9:b4:ec:2b:91:ed:e2:a7:f2:c3:7b:bf:d5:81:
7b:57:31:4c:e7:6b:88:3d:d1:19:a1:c3:60:e9:cd:c3:1d:17:
3d:a1:e1:90:6f:a8:39:1a:7c:1d:23:89:9b:74:00:fc:e8:aa:
40:e8:a5:be:01:58:ab:50:e5:69:cd:ff:b3:cc:91:74:b2:4f:
e0:15:b1:e6:24:67:92:08:05:88:8b:44:e9:b3:f4:89:1a:3f:
37:0d:bc:e1:9f:1b:49:66:4e:48:cd:01:f9:da:1c:1d:e3:6a:
ea:c9:88:d8:8a:c6:bc:4c:72:8b:52:41:f5:ed:b0:13:b5:8b:
99:e4:fc:1b:4b:56:b3:0b:05:39:69:c0:6b:dc:be:a1:66:44:
8a:e9:1e:39:80:93:d9:cc:f7:00:c3:b4:a2:38:04:8a:e8:8e:
71:5d:6d:08:e4:8a:60:3d:c7:a1:5d:23:e6:19:de:2e:6c:f9:
82:00:8e:55:00:08:8e:2c:0d:fc:ae:63:cc:02:71:9e:40:ec:
e7:bd:d5:5f:39:77:6b:c6:29:43:84:5e:1b:e7:ff:17:d9:e6:
02:40:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:03 2024 by rpki-client on console-fra.rpki-client.org