Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD3C304014D11EF8D92D6FF007001B1.roa
File: 4DD3C304014D11EF8D92D6FF007001B1.roa (raw, json)
Hash identifier: obF2Md1Ef3gJNZskRNODjHdOtXxctXzT6LobjncR2TI=
Subject key identifier: 6F:68:2F:81:79:11:64:16:B6:43:7D:BE:A6:34:30:B4:73:FB:A3:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 843D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD3C304014D11EF8D92D6FF007001B1.roa
Signing time: Tue 23 Apr 2024 08:41:40 +0000
ROA not before: Tue 23 Apr 2024 08:41:37 +0000
ROA not after: Sat 11 May 2024 08:41:37 +0000
asID: 22773
IP address blocks: 156.238.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33853 (0x843d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 08:41:37 2024 GMT
Not After : May 11 08:41:37 2024 GMT
Subject: CN=66277444-0b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:5e:f4:05:e9:fc:e0:38:26:0a:de:76:10:
7b:a8:87:dc:f9:e2:f9:15:c1:94:42:75:ad:0c:b3:
50:f2:3d:49:a8:45:03:45:98:fd:f6:4c:1f:e6:57:
cd:0a:ec:3b:3c:57:5a:fe:d8:8a:d7:db:be:e0:ac:
be:3a:c0:f5:fc:59:77:c2:3a:3e:84:16:03:b3:05:
70:5e:50:b0:0a:df:c4:5b:65:ba:6d:b9:3d:8f:bb:
a9:6e:d5:25:d2:37:c4:d1:6a:61:6b:8b:e6:f2:95:
db:e5:16:59:52:03:76:ea:58:cd:fe:f2:02:d0:f2:
f6:41:e0:dd:e6:43:85:b7:ed:55:d2:26:8a:b7:08:
41:b3:24:a7:f1:1d:60:1c:bc:5e:30:28:6c:1c:09:
7e:e6:c1:ef:a0:dd:80:f4:b9:a1:f4:19:4b:4a:8e:
f2:96:fe:95:c9:18:da:1f:2b:04:03:99:4c:ed:a0:
2e:0b:bf:ae:40:d8:42:3b:32:d5:cd:3b:69:d5:4a:
ae:f0:f5:74:de:91:20:84:64:69:ca:ae:d6:d4:8b:
d0:e5:e5:b7:59:4a:be:c8:dd:c2:90:1c:fb:fd:06:
66:67:99:53:01:2b:d7:51:59:73:72:71:81:f4:6d:
c9:19:72:a5:99:08:c6:80:7f:a7:48:22:4e:fb:e2:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:68:2F:81:79:11:64:16:B6:43:7D:BE:A6:34:30:B4:73:FB:A3:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DD3C304014D11EF8D92D6FF007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:28:b3:2b:88:5b:85:bc:b8:20:5e:12:a9:fd:38:6a:53:54:
1d:6e:e1:c4:e3:6d:5a:1d:06:eb:a4:eb:78:cc:d5:9d:c8:a3:
71:57:27:b7:ea:80:3f:19:66:d6:d5:1c:01:ec:4c:09:cf:74:
01:33:60:22:1c:26:8b:85:38:cb:e5:21:eb:a9:77:33:34:fc:
20:c5:48:8a:ed:7c:30:35:6a:80:dd:59:0b:81:69:16:06:8b:
fb:d2:66:40:5f:d3:9e:bf:f5:ac:a1:94:ae:cd:07:5e:3a:7e:
0f:53:e8:56:31:ff:a7:34:e7:b7:ec:26:63:09:c6:60:45:ad:
a7:db:6b:12:ef:0a:f0:80:46:fe:89:d9:24:a6:c8:97:ae:8c:
dd:20:d5:a3:21:76:bb:f1:8d:1d:76:0a:51:ca:a2:38:4b:08:
cd:48:ca:26:de:95:0b:4f:eb:5d:47:0b:9b:f3:df:ee:01:55:
ce:74:66:7f:0e:6a:6c:1d:92:4b:3f:4f:81:1b:de:f4:bb:3f:
42:c4:58:f6:70:47:59:d2:f1:5b:95:bc:b7:7c:43:14:38:31:
ee:96:73:24:aa:71:03:1e:9f:1c:b2:14:32:b1:ee:f9:92:6b:
7f:04:1b:5e:1e:01:56:38:9a:79:5a:f1:fa:ea:66:31:62:0e:
32:8e:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:50 2024 by rpki-client on console-fra.rpki-client.org