Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/501ACAC63B2E11EEB93B454B4AD9E6FC.roa
File: 501ACAC63B2E11EEB93B454B4AD9E6FC.roa (raw, json)
Hash identifier: UjWBfuG5j1Sp3EFGixGHJK5uvE2lWnLNpWeCixWAwAI=
Subject key identifier: 3C:92:FF:D3:38:96:A0:CA:05:55:20:2F:25:2E:A1:A6:12:DA:80:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3613
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/501ACAC63B2E11EEB93B454B4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:40:59 +0000
ROA not before: Tue 15 Aug 2023 05:40:56 +0000
ROA not after: Mon 27 May 2024 05:40:56 +0000
asID: 140627
IP address blocks: 156.247.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13843 (0x3613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:40:56 2023 GMT
Not After : May 27 05:40:56 2024 GMT
Subject: CN=64db0feb-6e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:eb:f2:90:ec:97:96:e6:a7:92:8c:62:48:
9a:2d:f7:a3:67:3b:62:cf:d6:b2:ac:b9:33:74:7b:
73:bc:78:13:10:ad:24:a8:92:83:7e:6f:ad:e4:ce:
fe:3f:36:bf:d2:2d:af:8f:1b:1a:fc:9f:09:c3:15:
23:22:25:9d:a7:f1:5e:4c:f0:92:e9:11:6e:c9:9a:
01:cb:a6:d8:44:a3:37:d2:28:5c:17:51:58:a5:09:
c1:ca:2e:0a:1d:e6:8d:51:d5:e5:48:6e:2b:7b:a5:
6d:6a:7f:31:6d:96:20:03:a2:af:0f:79:ef:4b:6c:
48:d6:89:6d:4b:34:49:1f:74:a5:96:60:b3:09:f4:
1c:b1:b4:1a:29:d9:bc:b0:70:2a:a8:71:99:18:d8:
9a:ca:34:ea:a6:c5:34:d7:94:42:f6:76:7e:44:1b:
d7:ff:9b:8d:6b:91:cc:53:1d:40:81:91:a8:46:d2:
76:80:21:25:c9:1f:7f:7c:5d:cc:f9:49:47:3a:6d:
a1:41:fa:ca:23:0a:03:13:c1:42:a1:29:8b:58:35:
72:46:34:a9:5b:1f:bf:06:0f:9c:6d:a5:5b:ab:20:
6d:1e:da:36:3b:47:ff:c1:3e:bf:96:f2:cf:b3:7a:
b7:c5:7d:71:d3:06:39:ca:cb:ae:38:8c:9f:27:88:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:92:FF:D3:38:96:A0:CA:05:55:20:2F:25:2E:A1:A6:12:DA:80:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/501ACAC63B2E11EEB93B454B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:95:59:d2:d9:58:91:c2:26:14:b6:3e:61:47:04:d4:af:ef:
26:78:89:dd:34:57:6a:d3:ab:55:82:60:e0:f0:47:4b:90:1d:
d5:48:79:55:e3:c5:c5:d3:1d:89:4f:10:13:9b:30:b0:79:fd:
42:c1:39:a4:08:a1:31:b2:2b:17:f7:a6:24:d9:29:f0:89:2c:
92:1f:b9:12:61:25:49:8e:aa:82:81:ac:9b:5e:83:e6:b9:c2:
22:f9:e7:c9:5c:38:5e:27:07:77:b5:83:80:b3:dd:f1:31:03:
0c:59:4c:7f:8b:33:ba:fe:dd:08:e7:1d:01:5e:b5:7a:42:46:
cf:c7:c6:9f:f2:9f:16:d9:e7:85:d9:b5:bc:3a:0c:60:40:44:
55:c9:26:21:ae:5c:9a:04:84:e2:e0:60:36:24:51:52:8f:61:
ee:ad:d7:cf:09:d2:ea:81:19:cf:3a:14:df:3e:b3:a1:fe:fe:
02:f9:05:d4:fa:7c:fd:f5:f0:6f:b3:8f:75:8b:2a:c7:a2:66:
30:ad:7f:bf:a7:81:fc:f3:50:ca:e9:11:9e:02:da:b6:12:3c:
10:9a:00:a0:22:c6:a7:f5:ef:8c:73:2d:53:bc:16:9b:5e:3d:
41:30:80:42:31:2d:ff:26:7d:b8:a9:91:60:45:cd:27:f6:d0:
76:4e:c3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:08 2024 by rpki-client on console-fra.rpki-client.org