Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C9FFEACFEA011ED80742B674AD9E6FC.roa
File: 6C9FFEACFEA011ED80742B674AD9E6FC.roa (raw, json)
Hash identifier: 2KCqqZusbIs+PqiZWyfuy3zTx95mlo0qOUmgiJoqHKE=
Subject key identifier: 79:3C:3F:DC:A2:E8:17:AD:54:36:9B:7B:A3:0E:9F:A4:B1:73:A2:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2831
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C9FFEACFEA011ED80742B674AD9E6FC.roa
Signing time: Tue 30 May 2023 04:14:09 +0000
ROA not before: Tue 30 May 2023 04:14:06 +0000
ROA not after: Wed 15 May 2024 04:14:06 +0000
asID: 63888
IP address blocks: 156.255.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10289 (0x2831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 04:14:06 2023 GMT
Not After : May 15 04:14:06 2024 GMT
Subject: CN=64757811-f2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:d7:ad:99:d3:a8:5a:2e:65:bc:7a:15:65:
cd:f9:43:85:d3:be:e4:85:70:d3:42:80:97:f6:a1:
a3:45:c2:9f:35:8a:d2:8a:da:c5:cd:ba:b0:a4:72:
ae:9e:f8:7b:00:a8:83:1b:cd:49:61:e0:fd:d7:f4:
e0:b0:00:85:af:7e:4e:d3:5f:70:1e:8f:d5:1d:bf:
23:3f:0d:14:bf:d7:26:76:04:ab:ce:84:0d:c5:b8:
51:a1:f6:95:de:25:00:17:ce:94:8a:2d:bf:32:b1:
09:e6:3c:d1:6b:21:95:05:af:58:a0:51:22:5e:18:
1b:5d:9b:4e:25:7a:c9:22:ea:41:15:a6:ca:89:37:
b1:e6:c6:ff:80:3a:1a:3d:d5:a6:e1:a4:b3:64:9b:
b9:c4:a9:64:f7:88:02:1e:ac:ca:b1:34:01:e8:a5:
27:49:8f:07:34:f9:dc:d3:04:23:cd:a2:b8:69:97:
6f:c4:2a:35:c1:ef:f4:11:90:f5:87:d8:70:c3:e0:
f7:f8:bd:33:c9:ff:40:fe:27:c8:47:86:9e:c2:f2:
bf:dd:d5:2e:ed:12:5d:c6:1e:85:df:fb:c2:04:70:
d3:f6:05:ca:c2:48:88:62:bd:7e:28:8d:3e:9c:e2:
a4:d1:0b:80:59:1b:0f:0c:58:87:e7:ed:35:47:a4:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3C:3F:DC:A2:E8:17:AD:54:36:9B:7B:A3:0E:9F:A4:B1:73:A2:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C9FFEACFEA011ED80742B674AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.91.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a1:5c:20:c7:c6:2a:d8:25:fe:45:b6:65:2f:dd:0e:22:e7:
64:3d:bf:0d:2c:b1:74:30:49:ce:8e:04:ce:00:ef:1a:5c:10:
27:69:58:b8:1f:db:09:22:a7:14:6e:b8:ca:eb:b3:ea:6f:03:
25:a3:39:64:75:1a:9c:04:9b:fd:aa:1e:37:16:c3:7d:c4:db:
3f:cd:37:b3:97:28:ce:fe:c2:33:d6:e6:c4:70:f8:35:cd:29:
80:92:9c:f8:36:32:09:aa:48:3f:ac:9d:d9:ac:4b:a7:ae:76:
33:39:f3:3a:2c:dc:4b:2b:98:9c:b5:47:d9:b3:53:6f:a7:2e:
9f:8f:63:e4:51:ed:03:b9:89:fa:53:00:4a:53:28:08:9a:87:
4b:4c:f9:16:32:09:51:76:88:25:a6:09:76:77:af:82:00:6a:
a9:c3:0d:08:2b:f4:af:0a:c1:f1:3b:9b:74:19:5a:ed:43:82:
89:4e:55:b5:07:f2:01:3f:70:a1:35:f1:13:7c:6a:36:5a:e7:
de:66:f7:1b:e8:fa:8f:62:23:9e:09:f5:7a:aa:22:6f:8b:e9:
bb:53:ec:f1:81:3c:d6:b6:e4:06:d7:fd:8d:1b:d6:48:58:b2:
ed:f5:18:d6:c5:bc:04:19:0f:10:6f:c9:ce:c4:0a:e1:24:1e:
a0:89:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:11 2024 by rpki-client on console-fra.rpki-client.org