Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B1A2DD209B811EEB6A1F27A4AD9E6FC.roa
File: 6B1A2DD209B811EEB6A1F27A4AD9E6FC.roa (raw, json)
Hash identifier: RyMjCkhZ2uDSSwWZ0JtTSdJ77h0fPg5pqapljxiERQo=
Subject key identifier: 3E:E8:F5:D3:40:EC:14:20:BE:E1:FE:23:0B:89:8E:6C:65:FA:99:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2C08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B1A2DD209B811EEB6A1F27A4AD9E6FC.roa
Signing time: Tue 13 Jun 2023 07:03:37 +0000
ROA not before: Tue 13 Jun 2023 07:03:33 +0000
ROA not after: Sat 15 Jun 2024 07:03:33 +0000
asID: 138995
IP address blocks: 156.227.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11272 (0x2c08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 07:03:33 2023 GMT
Not After : Jun 15 07:03:33 2024 GMT
Subject: CN=648814c9-d31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b5:48:fd:f8:4a:ba:00:5c:36:3f:43:89:4e:
bf:76:93:9d:11:db:17:91:95:57:2d:40:1e:3d:f5:
58:48:90:3c:3a:40:a0:fb:da:1d:c9:bc:1d:a5:00:
62:08:ec:e2:05:73:6b:27:71:9d:c5:9c:4d:4f:3d:
b5:a3:51:84:04:9c:84:45:fe:50:6f:29:68:e8:47:
e3:28:22:a2:c3:06:7a:4c:93:34:96:04:66:8c:9d:
c7:3b:04:fb:de:46:7c:c7:f4:3b:3e:46:a4:03:d5:
00:70:04:49:48:21:a6:a8:9d:a7:f1:6e:38:38:fa:
84:5a:50:86:d2:f6:38:73:78:59:5f:87:e8:76:51:
ce:0f:5f:3c:5f:7d:76:80:0f:61:c5:da:67:24:f9:
89:aa:4d:48:bc:fd:05:dd:c7:56:8d:87:27:93:62:
7e:d6:9d:97:5d:88:86:89:57:8b:e2:a7:ec:e4:24:
f9:56:24:45:78:20:2a:ac:7e:92:89:44:b4:5c:75:
37:99:a3:f7:8a:b0:69:4f:c5:33:67:15:be:4b:21:
ec:14:93:fe:c9:57:6a:3f:87:50:b5:60:f3:27:9f:
c0:8a:aa:7f:ec:c1:49:4f:17:c6:fb:ef:d7:70:0d:
f6:9c:55:2d:1d:79:0e:5c:3f:68:5a:17:f4:68:c5:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E8:F5:D3:40:EC:14:20:BE:E1:FE:23:0B:89:8E:6C:65:FA:99:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B1A2DD209B811EEB6A1F27A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.29.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0b:e6:dc:4f:7e:5f:3c:86:04:64:80:62:53:d7:f3:c8:12:
69:11:18:ee:b4:ec:1e:e5:75:c7:cc:87:41:6c:71:72:a8:56:
a3:b7:74:79:ee:af:6e:c8:40:cf:7a:98:b6:bb:44:c7:d6:58:
12:66:9f:df:d9:99:41:0e:ad:e6:32:94:18:55:16:b8:b5:45:
20:76:50:e9:26:9f:bc:e3:9d:a5:bc:36:55:a0:39:44:59:5e:
5e:d7:3e:34:41:98:b2:a6:ed:b8:24:af:26:72:68:29:16:3d:
44:cd:d9:44:06:cb:03:36:49:14:f9:c3:5f:ea:ee:e4:70:04:
63:5c:f3:90:b4:d8:df:31:49:d6:b1:4d:39:e0:91:cb:8a:3e:
89:57:64:7f:72:29:2f:b4:cc:7c:21:45:04:67:45:c2:45:aa:
03:d1:1b:e6:da:96:e0:d7:76:d7:1a:85:65:6e:8c:78:e2:35:
23:c9:15:b6:ed:9a:b0:ca:7f:60:26:b6:16:76:3e:62:13:d2:
9e:b8:9f:c2:c6:26:a9:d5:f4:4f:fa:7b:cc:9c:c7:bf:ba:e5:
d4:1c:5a:55:71:d6:b7:8d:cf:c0:36:52:e6:48:19:ef:d8:07:
89:9f:8b:76:2e:6a:cb:ca:0a:3d:27:8d:02:b5:a1:69:df:95:
09:b3:93:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:18 2024 by rpki-client on console-fra.rpki-client.org