Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A1FEC36039311EF956F100C017001B1.roa
File: 4A1FEC36039311EF956F100C017001B1.roa (raw, json)
Hash identifier: cKAOGAKjqTOiz2QwRaYvmojtc4f8Qrakg2KM1WyYhAE=
Subject key identifier: 98:2D:AC:FF:D2:D1:91:06:54:EC:75:F1:04:7B:9A:90:2E:B8:E1:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 863A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A1FEC36039311EF956F100C017001B1.roa
Signing time: Fri 26 Apr 2024 06:07:41 +0000
ROA not before: Fri 26 Apr 2024 06:07:38 +0000
ROA not after: Sat 07 Sep 2024 06:07:38 +0000
asID: 138195
IP address blocks: 156.225.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34362 (0x863a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:07:38 2024 GMT
Not After : Sep 7 06:07:38 2024 GMT
Subject: CN=662b44ad-618e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:25:2a:40:56:bf:7d:80:1d:48:47:71:30:
df:52:55:07:84:a5:d5:95:da:a6:7c:90:8d:6a:fd:
e3:41:df:6e:22:9e:f6:04:58:9b:f5:4c:c9:61:64:
06:7d:c7:32:60:83:c5:e4:bf:a6:31:e4:42:f8:bd:
14:53:d4:7e:c7:f4:fd:44:b1:4e:8b:e4:19:6b:fd:
34:27:2d:14:3d:ca:12:cc:1d:89:5a:c4:9f:44:6c:
2f:6a:44:7c:fc:2a:d3:28:fc:b3:22:89:c7:76:c1:
8b:2a:35:8d:d5:42:3b:88:b6:b7:bc:b8:7d:eb:07:
f4:80:d3:a5:69:ce:28:f3:01:91:4a:8e:4d:a2:8c:
24:d3:c3:2e:aa:28:59:02:f5:e0:65:55:eb:16:d4:
98:d7:02:89:ea:fa:e5:27:99:5a:ee:d2:da:5f:b2:
b6:61:2e:78:e4:1a:cf:ed:d8:d9:94:7b:94:ce:57:
1c:46:34:5a:8e:02:e2:72:c3:2f:b9:4d:78:25:62:
f0:e4:d1:a3:ab:a8:aa:38:ee:a2:0d:57:e3:3e:3c:
7a:58:20:44:3c:b2:01:70:0b:5d:d2:2d:68:4c:67:
8d:8e:b8:66:8f:62:a7:e8:85:c9:f0:de:67:04:90:
8a:95:c4:d6:b4:f6:39:fd:fc:58:2d:80:f7:3c:18:
55:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:AC:FF:D2:D1:91:06:54:EC:75:F1:04:7B:9A:90:2E:B8:E1:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A1FEC36039311EF956F100C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:df:ca:c6:54:10:c7:8d:b2:03:08:cf:19:55:db:23:cc:91:
c4:8e:44:93:57:14:92:16:33:4f:27:e9:f6:59:65:a8:3e:ab:
22:74:ac:f2:3c:fb:16:1e:88:1f:a5:16:68:74:71:1e:98:38:
6e:3e:93:f9:58:e8:66:53:14:d2:6b:3c:72:a8:8c:d9:f5:56:
12:d4:45:53:70:49:94:f1:54:4b:61:1d:f8:ff:8b:d5:1e:f0:
7f:a4:f5:44:51:f5:e7:a4:93:92:ea:82:e1:42:87:f2:e8:fc:
ff:36:3b:79:14:09:f8:c1:4a:df:66:8b:33:b3:80:45:e3:32:
2b:5c:da:9a:ce:54:e5:d5:a0:05:1c:22:52:f5:eb:8a:6d:00:
eb:2c:69:48:71:2b:5e:3e:e5:c7:c5:fc:f9:b6:83:97:99:94:
cd:ed:cf:2f:45:0d:b2:3b:fd:56:18:fd:32:4b:fc:36:1e:32:
c7:72:ea:cb:65:05:a9:52:1c:6a:08:ed:35:d4:c0:60:3c:d7:
f3:29:be:0d:41:e7:9b:db:91:67:f1:de:58:33:6b:69:eb:b7:
f0:7d:7b:1e:c5:c8:43:b3:3c:5c:e1:be:18:6f:92:4c:5c:9c:
a8:17:09:2d:7e:5b:1a:b7:74:ca:0d:fd:97:37:66:20:c8:49:
ea:0d:1e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:06 2024 by rpki-client on console-fra.rpki-client.org