Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/738508363B2F11EE8C8DF14E4AD9E6FC.roa
File: 738508363B2F11EE8C8DF14E4AD9E6FC.roa (raw, json)
Hash identifier: Ajp2AihSbMpiocjIPCqqYVRVJqZdnkHmnYtruOEj3y4=
Subject key identifier: 31:62:E6:59:D9:B2:04:96:9C:24:D3:BC:34:58:DD:06:70:82:6F:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3625
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/738508363B2F11EE8C8DF14E4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:49:08 +0000
ROA not before: Tue 15 Aug 2023 05:49:05 +0000
ROA not after: Mon 27 May 2024 05:49:05 +0000
asID: 140627
IP address blocks: 156.247.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13861 (0x3625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:49:05 2023 GMT
Not After : May 27 05:49:05 2024 GMT
Subject: CN=64db11d4-ea5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:3b:d2:0a:d8:40:01:a9:21:b0:54:de:e8:
ab:26:80:2a:9a:20:ad:31:b4:97:ef:4c:25:6d:21:
1a:21:d6:cf:09:6b:54:4f:04:e2:00:ba:b2:9f:e8:
ea:da:c8:87:27:7b:a4:57:d8:36:1f:0d:2e:70:fd:
fe:c5:80:bd:3e:c6:d3:10:12:03:66:b6:d9:bf:2b:
0f:9e:c4:e7:60:0f:47:ed:f2:d6:1b:81:db:6a:e1:
3d:67:97:8c:b6:c4:28:bc:21:df:0e:8a:94:bb:48:
57:13:69:84:42:72:b6:0a:e4:7c:58:83:46:3e:ff:
2d:a8:3c:59:f2:d1:6f:b4:12:8a:7a:3e:e2:1c:6d:
84:3a:87:89:b0:55:69:2c:b8:a5:a5:99:68:8d:13:
f0:06:ab:35:0a:d0:b6:11:3b:6d:7f:5f:25:fc:0d:
ad:da:e9:b2:26:03:29:55:eb:66:80:ff:83:5f:89:
c7:7a:43:5f:63:df:2f:80:30:05:f2:86:8c:c4:5c:
79:f4:af:85:25:d3:d3:94:40:3b:fa:6d:b0:cb:c3:
1d:ce:82:30:0d:5c:c4:d2:1b:b4:b9:b9:aa:8a:83:
0d:21:90:bf:e7:14:6c:e2:fe:bc:0b:7d:95:e7:01:
b3:74:ad:98:b4:82:17:e7:47:ed:a3:f2:54:56:f8:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:62:E6:59:D9:B2:04:96:9C:24:D3:BC:34:58:DD:06:70:82:6F:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/738508363B2F11EE8C8DF14E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.177.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ee:f7:0f:66:88:d0:ad:af:4b:c4:bc:d2:01:a4:ee:af:23:
8a:5d:d6:d4:48:af:40:f2:e7:17:1d:5b:b6:54:54:64:f1:fc:
f5:d3:af:b4:eb:f4:f1:61:c6:a2:70:2f:fa:34:97:31:a5:3a:
1c:b7:c6:b7:21:ce:51:71:40:78:48:b6:08:75:16:a9:ce:09:
34:7f:fb:11:00:84:01:a4:c5:58:0e:55:35:cc:c9:49:18:03:
ed:e1:76:d3:ac:a9:08:e3:e4:8e:6e:88:a3:b2:8c:de:31:20:
28:c6:e3:d6:b9:cc:a3:b1:bf:d3:4b:ce:22:5b:c0:43:47:74:
b5:c5:40:9b:01:e6:74:7f:f3:d0:01:8b:a1:98:7c:21:40:79:
6f:fb:90:b3:9f:cb:b1:76:e5:5c:90:50:89:af:1e:84:96:83:
23:1e:d4:26:92:50:a2:2a:1e:e1:3a:58:a1:19:cd:08:b0:df:
3e:e9:9a:b0:c1:91:5c:ae:04:b5:c2:8d:bc:03:a5:e6:e5:52:
37:58:55:a3:46:43:70:7f:1c:68:c0:0f:a3:83:39:3f:d6:23:
4b:6c:13:4f:18:b5:91:ff:82:9b:4b:ee:72:f1:78:3a:14:e9:
aa:e2:1b:3e:34:42:39:b3:b2:19:b8:1e:c1:4e:c8:68:9c:94:
0a:0d:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:11 2024 by rpki-client on console-fra.rpki-client.org