Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7045B554022511EFBE589A63017001B1.roa
File: 7045B554022511EFBE589A63017001B1.roa (raw, json)
Hash identifier: 1wRv5blgrQonvpIRh472NHOXesswfwenSGArHBFFvBA=
Subject key identifier: 39:49:68:08:0E:90:3A:71:31:D3:4C:D0:BE:71:DD:89:94:DF:7E:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7045B554022511EFBE589A63017001B1.roa
Signing time: Wed 24 Apr 2024 10:28:49 +0000
ROA not before: Wed 24 Apr 2024 10:28:46 +0000
ROA not after: Thu 12 Sep 2024 10:28:46 +0000
asID: 135097
IP address blocks: 156.250.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34016 (0x84e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 10:28:46 2024 GMT
Not After : Sep 12 10:28:46 2024 GMT
Subject: CN=6628dee1-b748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:9b:32:e4:23:ce:28:6d:ff:26:8e:81:7a:
91:4e:d3:67:99:b7:09:34:21:31:b4:64:6c:a0:36:
9b:c5:2f:b0:c0:1f:bd:3a:ca:eb:30:a2:d4:af:b4:
d8:46:48:04:81:95:7d:6b:24:e7:5e:ba:a8:0c:e2:
90:a1:9c:46:c4:54:5d:82:c0:72:26:fd:7c:76:99:
14:2f:fb:70:cf:7d:5b:04:56:e0:9d:79:59:59:7b:
0e:a2:0c:e8:8c:e6:25:01:49:10:c3:7b:ab:39:24:
37:71:6c:40:8b:fe:15:ba:70:2b:5d:8c:ac:cd:01:
f0:66:22:4c:eb:0c:75:fa:1b:82:4a:40:1b:2c:92:
d0:06:77:59:20:0f:50:34:18:ae:7e:ab:b4:c7:6b:
54:13:a8:3c:7a:98:2b:40:3b:59:6a:64:8c:95:1b:
42:c0:40:37:c7:ac:fb:26:9e:47:c3:2d:45:3f:7d:
95:0f:c3:7e:00:46:4d:d7:70:f6:fd:72:13:4d:1f:
06:cc:ab:c7:6a:dd:39:ed:14:60:e9:d2:cc:7e:85:
df:c8:f1:15:8a:57:3e:e6:d7:03:1f:1d:f5:c5:ca:
cf:a4:5d:3c:25:13:0b:f0:c0:db:12:aa:d7:e6:4f:
ce:e3:aa:35:dc:4c:f7:02:83:b5:7a:7c:03:f7:e1:
7e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:49:68:08:0E:90:3A:71:31:D3:4C:D0:BE:71:DD:89:94:DF:7E:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7045B554022511EFBE589A63017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:f1:fd:9c:db:88:05:47:58:90:cf:eb:9f:8b:19:77:f9:20:
76:04:cd:b3:bc:e2:49:a0:a6:80:6b:63:f7:0c:94:b6:ac:33:
47:a0:b1:2a:cb:40:ae:22:96:a7:d3:e7:aa:30:3c:a6:19:71:
7b:04:5e:fb:2d:5d:a9:69:f1:73:bc:7f:d8:75:a6:da:ec:96:
e4:27:9a:d1:8d:76:4a:40:c2:ed:a2:96:d4:b1:56:46:31:65:
52:c6:ac:c3:2a:8a:5e:f6:76:27:16:e7:0c:5a:d7:a4:4f:39:
b2:e8:80:55:d1:cd:8c:5b:52:6c:b2:af:49:cd:33:3a:83:47:
41:4e:07:cf:77:fa:9e:02:e0:cb:c6:a6:ac:08:64:b1:0c:a5:
08:be:66:ce:3b:08:e2:53:2e:13:65:b2:0d:82:5f:c3:00:22:
62:11:c0:88:bd:5b:66:9c:23:0b:46:80:72:02:59:9b:2c:ce:
33:01:fa:cc:1a:d5:94:77:b5:91:a0:1a:52:27:d4:de:dd:45:
25:87:c4:0e:bd:72:34:99:f8:f8:32:01:80:9d:a5:d3:77:2d:
3b:9a:f2:05:c5:5e:8b:2f:3c:86:75:14:55:e2:7f:a6:3f:29:
c2:7a:4b:17:ef:f0:16:39:70:a4:02:c6:aa:67:34:56:16:97:
75:45:69:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:54 2024 by rpki-client on console-ams.rpki-client.org