Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FA66872F70111EEA5A35768775412E6.roa
File: 4FA66872F70111EEA5A35768775412E6.roa (raw, json)
Hash identifier: uOq7DQhlykyd01emTYwMusGJsWBiSGO6Vkp5H8hQTV0=
Subject key identifier: 17:B3:37:18:1A:A9:20:C8:30:16:BC:F8:97:E8:5E:4A:D3:BD:B0:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 81E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FA66872F70111EEA5A35768775412E6.roa
Signing time: Wed 10 Apr 2024 06:12:30 +0000
ROA not before: Wed 10 Apr 2024 06:12:24 +0000
ROA not after: Sat 29 Nov 2025 06:12:24 +0000
asID: 134700
IP address blocks: 156.248.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33251 (0x81e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 06:12:24 2024 GMT
Not After : Nov 29 06:12:24 2025 GMT
Subject: CN=66162dce-33a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:74:c4:6c:1f:e8:0d:26:27:c4:a2:4b:89:
c0:0f:31:08:c1:22:8a:9d:02:56:46:64:7b:d7:8b:
8c:81:ab:b5:8d:4c:a7:92:ae:f7:1c:b1:d6:5d:de:
7f:ac:de:c9:f7:87:76:5e:5a:72:86:36:bd:76:29:
14:21:3e:17:9a:20:70:2b:93:c3:c3:a7:e1:1f:c5:
b3:08:bc:bb:e8:3a:64:c2:44:cd:3d:a6:5a:15:07:
d1:e3:de:e3:a2:2f:8b:86:11:24:44:46:f5:8a:59:
0a:98:3d:5c:01:0a:7d:fd:09:3f:36:47:82:f8:2f:
1c:c1:e7:a3:38:1d:6e:77:b2:89:44:96:38:cd:73:
8e:3b:ed:99:a4:43:aa:ca:c3:82:f3:18:0d:06:54:
d8:de:66:80:5f:83:30:86:52:30:39:0e:53:5e:80:
86:2b:8d:0a:bb:23:55:f8:a8:54:06:4e:49:62:c1:
de:a7:28:0e:2e:88:fe:6d:21:74:1f:c9:01:70:48:
b5:11:1d:f7:54:9b:97:48:96:10:17:d0:4f:7e:80:
d4:1a:17:92:6e:59:19:04:d5:94:df:71:ca:0c:0c:
55:d7:4c:31:6d:31:fc:8b:3b:d5:3b:93:a4:8e:af:
49:44:31:bb:92:41:94:7c:e8:b0:cb:c8:1d:be:cc:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:37:18:1A:A9:20:C8:30:16:BC:F8:97:E8:5E:4A:D3:BD:B0:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FA66872F70111EEA5A35768775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:42:19:78:05:35:d0:37:0b:5e:a6:41:f9:d3:6b:be:d2:6f:
20:31:13:62:56:50:61:82:23:4c:3d:fa:19:31:ba:38:77:12:
3d:4c:d9:b3:b5:50:fb:59:8e:fc:e8:70:44:bc:d2:c7:92:cf:
ac:41:86:90:d1:ef:38:42:ba:27:ca:90:6f:07:13:d9:bf:b6:
90:53:c6:85:ed:28:e6:b9:08:fa:7f:4b:e1:81:80:d5:ce:fe:
67:c3:cb:86:88:73:46:f8:66:1f:61:2c:64:d4:ff:5c:0e:89:
6f:4a:0b:d4:74:55:0f:2d:b6:6f:4c:72:f1:41:dc:0f:2d:e9:
72:97:b9:8e:6d:af:2d:c5:95:de:8e:d6:4f:ab:4d:3a:31:ae:
e9:19:07:ff:1f:85:86:38:bb:36:6c:67:49:14:89:b3:62:af:
68:54:f9:46:22:9a:24:5e:45:c0:63:21:c5:61:c7:d8:f9:41:
ff:fa:a0:f0:0a:6f:57:9e:e0:9d:d3:da:70:1b:54:1d:5c:d7:
02:42:cd:ac:00:d1:0f:e4:38:16:da:f2:bb:77:f0:f2:5a:77:
1d:09:32:75:fd:a9:ce:52:8b:6e:1a:37:70:79:cd:f1:54:48:
f1:90:c3:65:ea:70:e8:40:74:8b:fe:ae:99:f4:ba:6d:99:a0:
a0:60:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org