Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D5B3288F91611EDBBF573154AD9E6FC.roa
File: 6D5B3288F91611EDBBF573154AD9E6FC.roa (raw, json)
Hash identifier: Cv8NGdhB8epAsCgWnc1gChF+JyMqlwggK53Uh9uBxog=
Subject key identifier: D3:A1:AD:F2:0D:89:77:E4:46:91:46:CC:60:28:C6:C3:F1:E3:3F:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 26A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D5B3288F91611EDBBF573154AD9E6FC.roa
Signing time: Tue 23 May 2023 03:03:44 +0000
ROA not before: Tue 23 May 2023 03:03:40 +0000
ROA not after: Sun 05 May 2024 03:03:40 +0000
asID: 399674
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 03:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9896 (0x26a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 03:03:40 2023 GMT
Not After : May 5 03:03:40 2024 GMT
Subject: CN=646c2d10-4454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:ee:f2:6b:ea:d9:26:f0:3c:36:b4:8d:ee:
38:a6:1e:bc:d1:5c:28:33:2a:09:26:70:6d:19:fc:
6a:28:8b:df:73:e7:bb:4c:0b:55:0d:f7:02:d8:09:
c0:eb:ec:da:f4:fb:11:b5:bf:9e:ec:f8:9f:5d:87:
8a:3f:6a:38:d4:09:ad:48:2c:3d:22:98:e8:73:a5:
6d:4a:9a:4b:de:c9:36:2b:36:d2:9e:98:24:05:e2:
e8:77:62:75:e2:d0:94:99:5c:eb:ed:e3:85:8e:d1:
45:d8:95:e8:ea:c0:87:70:63:77:ce:e9:42:1f:15:
69:09:4f:17:cb:be:21:a6:6c:42:67:4d:de:dd:82:
11:49:4f:01:e2:c0:37:0c:25:c1:25:12:28:7a:ed:
be:9b:b5:16:4d:21:df:53:61:45:ec:34:de:74:1d:
d4:8d:1b:2a:79:d7:2f:97:68:3b:b1:2b:8c:e0:9f:
dc:0b:91:a5:95:a7:bc:8a:06:92:cc:1c:7f:79:6f:
cb:36:69:85:08:df:8e:f1:ff:80:9c:7a:0d:1f:e1:
e5:dc:89:6f:c8:10:6c:69:03:25:56:a9:00:33:f3:
14:c4:cf:14:c1:b7:51:40:6b:ce:19:da:0a:29:95:
fb:4b:e9:b7:65:8f:bf:e6:79:bd:6c:51:46:28:14:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A1:AD:F2:0D:89:77:E4:46:91:46:CC:60:28:C6:C3:F1:E3:3F:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D5B3288F91611EDBBF573154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
af:fc:4c:06:1c:90:c8:83:ce:1d:e6:24:06:04:cc:6c:eb:e2:
3f:2f:64:54:e2:cf:fb:6e:1d:9c:2a:4a:c8:df:ca:b3:c7:69:
fd:2a:0d:3e:81:7d:b3:e7:7b:13:4a:cf:5d:89:8c:ad:80:3e:
da:97:a6:e9:17:10:b2:33:1d:33:4b:a5:ed:10:56:9f:10:82:
91:1b:33:b1:38:8c:1f:21:1c:c1:14:40:1c:44:81:e0:5a:cd:
9e:98:c4:91:31:65:21:75:7c:76:09:39:60:26:63:f6:7d:16:
61:4c:f1:b0:a7:20:4a:2f:15:1a:34:5d:c7:e6:2b:14:7d:7f:
84:62:d4:89:69:44:a1:8a:d9:c4:8d:04:b5:fd:ea:92:f2:e8:
34:cc:8f:28:67:3c:9f:e3:88:04:ce:4a:15:6d:82:fc:db:c9:
ca:11:72:ab:17:00:bc:09:56:68:c1:c3:8a:6f:d2:a8:9a:c2:
bd:4a:34:1e:4f:5e:6b:86:26:20:e6:6c:bc:d1:cc:8f:f1:42:
e2:a4:cf:0d:b9:96:81:3a:a6:3f:75:eb:2d:c6:92:53:85:c3:
86:38:f6:77:27:9b:05:67:50:4f:ec:48:50:0f:ac:cf:7c:57:
cd:25:ea:59:26:e6:e3:be:d2:4a:ac:35:b6:ff:ae:16:d2:47:
f5:f9:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:46 2024 by rpki-client on console-ams.rpki-client.org