Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69B3E71C018311EF8C9C2F34017001B1.roa
File: 69B3E71C018311EF8C9C2F34017001B1.roa (raw, json)
Hash identifier: ZPXRcSqADMwRf3Fr4gg3OzmEJQNA2ic7LN46laOhGjU=
Subject key identifier: 47:CE:90:12:53:C9:65:F1:47:C8:02:3F:71:8B:42:E5:1B:2D:54:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8453
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69B3E71C018311EF8C9C2F34017001B1.roa
Signing time: Tue 23 Apr 2024 15:09:00 +0000
ROA not before: Tue 23 Apr 2024 15:08:56 +0000
ROA not after: Sat 25 May 2024 15:08:56 +0000
asID: 137547
IP address blocks: 156.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33875 (0x8453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:08:56 2024 GMT
Not After : May 25 15:08:56 2024 GMT
Subject: CN=6627cf0c-3e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:3a:79:13:18:b7:5c:3d:b7:af:60:10:b4:
e8:60:a8:a4:d7:67:77:0b:a1:ab:9a:d4:d0:9b:c2:
c4:ef:98:b9:29:7c:5c:19:b0:47:36:24:66:34:66:
16:67:34:4d:0f:ed:e5:6c:85:c5:83:46:56:95:fe:
78:3a:e3:b8:2b:d2:89:18:31:4d:90:39:8a:2d:1f:
9a:5c:3b:8b:be:55:0b:29:e4:a7:b0:e0:bb:ac:8d:
8b:9f:ea:3b:22:37:2b:06:99:69:9f:ef:4a:b2:43:
d1:85:a6:f1:e2:40:a9:46:a9:da:81:a6:86:a6:a9:
7f:e9:7f:62:09:5a:a0:4a:26:25:e6:17:01:5e:a4:
c5:33:3a:da:94:75:5d:fd:39:b0:ad:97:69:60:8c:
8c:6d:d5:81:46:ff:5b:82:a0:70:70:d0:34:9a:56:
af:ab:2c:09:24:fd:18:fd:eb:ca:5a:d5:8a:df:76:
d6:df:21:c9:0d:dc:c9:3b:7b:2d:29:c9:14:43:72:
7f:d5:3c:0a:db:cf:dc:41:39:ae:f4:3b:62:3e:01:
ff:2d:37:4f:9e:84:b6:d4:ff:dc:e1:b3:b9:58:4e:
bc:47:f0:4c:88:bc:bd:10:e6:60:b9:cb:a4:84:17:
b3:01:30:9a:08:32:f8:53:92:50:53:89:7e:a1:87:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CE:90:12:53:C9:65:F1:47:C8:02:3F:71:8B:42:E5:1B:2D:54:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69B3E71C018311EF8C9C2F34017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
18:ca:da:1f:eb:4c:9f:7d:ac:d5:f1:bd:52:66:93:78:f3:de:
31:8c:7f:ad:b0:61:0b:14:58:7f:92:b5:5c:a0:cd:55:c4:cd:
78:a7:a0:fe:29:9b:94:e0:f4:77:9c:20:49:57:23:9d:5e:cc:
30:1f:80:f5:15:34:97:93:e7:57:ab:8f:8f:5f:ea:b7:94:f7:
8e:bd:7b:23:37:18:ae:36:0e:33:56:92:f6:7f:02:c7:17:a0:
c2:41:65:3f:b1:86:13:19:91:e9:f1:c6:0c:ad:9c:3b:ac:ea:
c3:0e:04:53:c8:07:58:69:04:d9:59:00:96:13:1e:c3:68:22:
3b:08:29:9d:d7:5d:6d:ad:15:0f:c7:e6:63:fc:c9:ee:55:41:
c0:41:cf:6f:44:6b:f4:e4:83:58:1e:0c:e6:e9:88:f3:ae:03:
15:e0:5c:4d:87:3d:a1:4c:7f:0d:62:59:1f:49:e8:88:a6:d7:
f7:ea:f2:51:2e:78:e2:d2:f4:4c:71:d6:c7:d0:5a:29:40:e2:
62:9a:71:35:61:5e:ed:c0:e8:6e:5a:aa:92:78:4a:c4:04:81:
68:86:f9:ea:cd:87:86:c4:16:7d:b1:57:1f:1d:ad:28:36:ed:
8f:36:85:a6:83:2c:a3:c4:8a:1b:fb:1c:b9:45:a7:6d:18:72:
46:b1:f1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:00:49 2024 by rpki-client on console-ams.rpki-client.org