Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/752AF6883B2911EEB6A3B73C4AD9E6FC.roa
File: 752AF6883B2911EEB6A3B73C4AD9E6FC.roa (raw, json)
Hash identifier: NXgzhPVY7HwgWY/ftDpmVMk2LTNWnDcEifZSq9FN6bQ=
Subject key identifier: 7E:31:60:CB:82:F2:72:55:89:6D:66:45:34:D4:12:3D:C8:26:F2:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/752AF6883B2911EEB6A3B73C4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:06:14 +0000
ROA not before: Tue 15 Aug 2023 05:06:11 +0000
ROA not after: Mon 27 May 2024 05:06:11 +0000
asID: 140627
IP address blocks: 156.247.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13769 (0x35c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:06:11 2023 GMT
Not After : May 27 05:06:11 2024 GMT
Subject: CN=64db07c6-7159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:f0:1b:00:c7:67:56:1d:9b:d2:5e:18:ad:
ba:fd:5a:0f:9b:a8:6c:f7:3d:be:a7:c2:2b:98:64:
d2:d6:34:44:6e:6e:3e:f7:7b:f3:15:fc:8e:83:df:
5d:df:38:00:c7:8e:98:cf:09:e9:59:82:c2:df:20:
51:33:c8:0d:ee:b2:4f:76:c4:97:06:5a:1f:1e:72:
dd:7c:51:4b:3d:12:ac:21:5a:16:75:be:1e:57:75:
1b:26:da:b7:79:ff:c1:6b:6a:af:74:5b:05:db:76:
43:b4:54:c4:02:80:84:f7:d7:c1:30:eb:a3:12:e1:
04:6d:5e:dc:26:07:5d:e1:b7:33:29:bb:a0:08:de:
24:fd:1d:6e:09:3a:f3:c6:58:c5:39:82:56:65:09:
1f:77:99:b1:35:52:8b:f6:57:c0:5c:b6:c0:cc:99:
7c:78:6e:de:15:92:99:63:b7:81:f3:af:4e:41:4d:
82:5c:c1:4c:39:90:a5:db:cd:8b:86:f5:d1:49:9e:
98:4c:27:11:af:32:31:e6:48:e9:f8:dd:44:cc:94:
38:c6:6f:6f:c2:4a:45:88:9a:57:28:a7:b3:d7:c1:
67:1b:94:e2:83:b6:83:f1:3c:aa:a1:f7:93:36:d3:
fb:83:53:b5:ec:0c:1d:03:35:71:ad:ab:b1:b9:bc:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:31:60:CB:82:F2:72:55:89:6D:66:45:34:D4:12:3D:C8:26:F2:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/752AF6883B2911EEB6A3B73C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.131.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e7:c2:89:d5:50:c4:66:2e:76:40:35:ac:70:a2:ec:3f:c2:
b2:07:37:23:f3:00:3c:90:a3:b0:3a:48:4b:55:83:49:b9:c5:
e0:69:6b:4e:9f:ea:4f:ea:ed:2c:89:e4:5b:25:12:f5:38:27:
c1:69:91:d1:7c:bd:2e:ee:b4:de:85:eb:5a:68:5b:0f:3f:bc:
7b:b2:d3:2b:67:95:7f:b9:de:ab:91:f7:7c:19:8e:41:42:ec:
bd:0f:e2:cc:8b:56:28:28:eb:47:4b:8f:96:b7:4d:2c:89:37:
94:c8:2f:17:ed:df:49:7b:ef:8a:9b:15:65:00:d7:92:5d:10:
e8:2b:d0:3c:6d:7e:59:79:6a:c7:d6:6b:ec:1a:57:a1:e3:1b:
96:c1:4a:3e:ab:31:aa:16:db:c1:07:07:f6:8a:80:6e:01:35:
10:b2:b8:25:47:9a:39:99:fa:91:42:24:23:5f:95:af:6a:4c:
35:b9:23:0c:a5:52:37:62:ac:b5:af:2a:78:de:ee:60:cc:fa:
99:e7:3a:35:97:a6:7d:1b:4b:ba:76:c6:d0:19:9b:b9:ec:af:
04:dc:93:01:55:ec:07:c7:e6:c7:76:dc:28:b8:16:f0:87:91:
e1:fe:97:bb:11:c0:22:d3:fa:96:06:c2:0c:4d:32:e6:58:56:
56:1f:87:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:54 2024 by rpki-client on console-ams.rpki-client.org