Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E9A27C83FBE11EEB0D6457F4AD9E6FC.roa
File: 6E9A27C83FBE11EEB0D6457F4AD9E6FC.roa (raw, json)
Hash identifier: MeX0z5GMjqHP6lygvBM1CkFlr2uh/wC4YYvf66UsMZ0=
Subject key identifier: 1E:AB:79:DE:AF:EE:A4:01:C8:97:61:2B:6B:BF:73:A8:79:3F:AA:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 369F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E9A27C83FBE11EEB0D6457F4AD9E6FC.roa
Signing time: Mon 21 Aug 2023 01:02:43 +0000
ROA not before: Mon 21 Aug 2023 01:02:40 +0000
ROA not after: Sat 29 Nov 2025 01:02:40 +0000
asID: 133012
IP address blocks: 156.248.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13983 (0x369f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 21 01:02:40 2023 GMT
Not After : Nov 29 01:02:40 2025 GMT
Subject: CN=64e2b7b3-0101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:29:d8:10:fb:a5:ac:b6:c5:d6:f0:d1:c7:
d4:92:81:17:14:bf:e8:56:b0:78:d6:7b:c1:04:2e:
0e:7d:49:7a:48:88:65:13:d7:90:09:97:39:71:e1:
c6:f6:f9:fd:12:0e:79:07:c5:d5:3e:fb:91:d8:95:
aa:5c:54:f4:2b:bb:17:bb:7c:af:50:cb:08:f7:f7:
51:98:ae:ff:47:f3:c3:34:81:4c:dd:84:43:8f:d3:
3d:d4:4e:63:6b:69:fc:03:2c:8c:56:bd:b3:cb:98:
97:fc:bd:ba:60:ec:7a:c7:30:78:ea:53:71:d7:06:
fd:74:3c:5e:74:91:a6:f3:99:c1:0c:d8:61:be:18:
24:89:95:9d:16:ec:a2:e7:0e:e0:9d:1c:70:5e:f1:
12:14:2f:37:11:9d:a6:db:37:8f:ba:6c:af:31:55:
ef:18:23:cd:b1:d0:3f:78:db:38:be:e5:b7:0f:40:
0d:c4:74:73:59:c9:89:08:e1:01:b6:51:fe:a6:57:
a6:67:0a:5b:ce:9a:b4:b9:f4:f3:ba:eb:83:56:92:
51:f7:ee:23:29:55:08:6d:9b:da:f8:91:2f:69:b6:
17:50:e1:f6:e1:a5:0a:21:21:66:1b:77:b3:bc:73:
0f:e6:cd:0c:0a:2f:dc:18:2c:e1:7c:f6:6c:8d:96:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AB:79:DE:AF:EE:A4:01:C8:97:61:2B:6B:BF:73:A8:79:3F:AA:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E9A27C83FBE11EEB0D6457F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.1.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3f:99:b7:6e:9a:b2:58:d8:0c:c1:72:b1:5d:f3:ac:d0:32:
7e:cf:79:8e:14:2a:50:97:5d:b8:1d:aa:1f:1c:f7:10:71:e9:
91:93:b9:11:6d:00:43:c8:0b:ed:a0:42:99:1f:9c:3f:90:dd:
33:98:55:31:d8:e1:27:df:16:0f:f9:0e:6a:22:95:cb:63:4d:
1b:88:43:9a:b4:d8:8d:d6:d3:28:23:f6:57:87:de:5d:9e:93:
66:dd:3b:c3:3d:7f:8d:2e:47:91:6c:06:83:4e:25:1d:78:4e:
86:76:a9:31:07:e8:6a:83:65:60:c7:91:37:53:c8:9a:b7:88:
0e:ef:04:58:ab:c4:0e:f3:b6:90:83:78:95:86:85:68:73:f8:
13:ea:a2:c4:d5:b8:34:b4:c5:75:70:65:4b:c0:ab:ef:d6:13:
2f:53:72:c5:30:97:13:a4:39:03:fb:27:b2:ed:01:7b:20:c8:
f9:4d:51:46:31:75:60:27:12:2a:03:e2:8d:28:fa:69:37:3a:
ec:de:8e:ea:68:ce:82:68:f6:92:cf:2d:3d:a8:00:a5:98:a0:
3d:89:bb:61:22:9d:51:1f:73:ab:9b:7b:7b:91:12:e8:8d:d8:
2d:2b:01:80:f5:26:fc:1a:07:b8:72:4b:86:f3:7a:20:1f:7a:
0c:9e:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:11 2024 by rpki-client on console-fra.rpki-client.org