Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7562E77E3B2311EEB63E4F2A4AD9E6FC.roa
File: 7562E77E3B2311EEB63E4F2A4AD9E6FC.roa (raw, json)
Hash identifier: 0pXSFvBo6H46BtlRD6/+HGAiTHqI+np8YM2JgllcbX8=
Subject key identifier: A1:5E:86:6B:86:F1:08:E8:73:72:EE:97:DC:FB:DE:16:B0:81:E6:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 356B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7562E77E3B2311EEB63E4F2A4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 04:23:17 +0000
ROA not before: Tue 15 Aug 2023 04:23:14 +0000
ROA not after: Mon 27 May 2024 04:23:14 +0000
asID: 140627
IP address blocks: 156.247.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13675 (0x356b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 04:23:14 2023 GMT
Not After : May 27 04:23:14 2024 GMT
Subject: CN=64dafdb5-e49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:aa:7f:05:da:49:39:cb:14:c6:8d:50:db:
79:ec:73:55:68:0a:07:a1:4b:b2:98:77:56:bd:2c:
f3:71:74:f7:fb:ad:06:3d:d0:5a:c1:5a:9a:52:78:
73:60:64:91:f7:29:06:22:3d:3d:86:ae:92:09:7c:
10:c7:ca:1f:5f:83:8a:a8:bc:32:b1:3e:d3:c6:ac:
d2:71:1e:8d:6e:a8:c3:d9:e4:a2:d0:79:ff:6e:b4:
51:12:02:db:5f:79:50:3d:dd:49:16:b0:1c:43:91:
20:a8:03:79:9b:3b:a6:41:a6:b7:ad:b2:dd:e7:af:
8e:c8:7b:13:b4:b4:9c:fa:36:7b:87:28:fa:0e:04:
ff:92:08:2e:e7:0c:99:5b:55:50:b0:c1:a3:3c:0a:
33:87:6b:79:40:b0:28:00:5c:96:ed:2f:c7:0a:87:
83:9b:35:a2:21:02:3a:2a:13:0e:f5:8d:22:bb:fd:
4e:1b:29:88:22:fb:20:2c:b0:af:59:e7:16:69:c7:
b0:9f:fc:28:eb:88:2c:ca:b8:66:28:bf:2b:76:d7:
12:d0:3a:5b:f3:62:8d:8a:73:8b:e7:c6:06:1e:d6:
47:c0:eb:9d:d9:ca:1b:6e:73:ba:6a:30:86:fb:01:
e4:d4:d6:70:27:22:ff:44:65:80:35:03:5a:11:e8:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5E:86:6B:86:F1:08:E8:73:72:EE:97:DC:FB:DE:16:B0:81:E6:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7562E77E3B2311EEB63E4F2A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.212.0/24
Signature Algorithm: sha256WithRSAEncryption
90:df:df:15:5c:60:3f:b7:61:84:dc:04:cc:47:b0:4e:7e:63:
a7:cf:4e:a4:cb:e0:e9:48:70:0c:25:5a:a3:19:95:05:19:ce:
d2:ff:a2:d9:ca:80:81:9c:7d:b4:59:d8:1a:7a:50:9f:4e:fe:
84:64:c8:88:2b:61:2f:0d:87:17:4b:20:eb:2d:cc:53:fe:d0:
76:3a:54:55:9b:6b:f1:60:08:53:71:92:98:c5:ac:ea:b2:ed:
9f:76:a5:a5:c0:ac:37:da:52:1e:1a:f5:62:87:71:d0:60:43:
5c:69:8c:f7:5a:c0:14:fd:1b:c6:c5:5a:bd:f3:1f:1f:33:4d:
9e:06:26:4a:b1:03:bc:51:1f:bf:42:46:85:00:56:ca:2e:30:
77:91:b9:5d:ad:c5:40:a5:5c:4a:d4:84:e5:f3:5c:31:86:fd:
63:e8:99:5e:da:ff:ea:1d:33:a1:0f:3d:39:07:ac:9a:60:a9:
29:f9:a6:91:8c:e8:fa:6a:29:f9:1c:66:81:e5:82:ea:cf:3c:
cc:34:22:3d:04:7f:e5:cf:89:95:05:8b:c1:7b:9d:53:e1:42:
5d:57:ad:48:eb:8f:c5:da:5b:3d:1e:6e:28:57:ff:f8:72:89:
69:25:3a:67:18:01:5c:43:78:0d:02:dd:fe:3e:be:53:fe:b1:
d6:36:53:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:54 2024 by rpki-client on console-ams.rpki-client.org