Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A9F97AA018411EFAFDC233B017001B1.roa
File: 7A9F97AA018411EFAFDC233B017001B1.roa (raw, json)
Hash identifier: Hm3sKseoA5ZYKaSgdCXpKY2J3MFN/NbEDcwM72/DHek=
Subject key identifier: BA:13:46:E7:5E:D6:10:ED:86:1E:ED:E1:A9:DF:88:16:13:E5:19:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 845F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A9F97AA018411EFAFDC233B017001B1.roa
Signing time: Tue 23 Apr 2024 15:16:38 +0000
ROA not before: Tue 23 Apr 2024 15:16:34 +0000
ROA not after: Mon 03 Jun 2024 15:16:34 +0000
asID: 142286
IP address blocks: 156.253.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33887 (0x845f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:16:34 2024 GMT
Not After : Jun 3 15:16:34 2024 GMT
Subject: CN=6627d0d6-025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:30:06:a5:d0:6e:8b:c4:0a:8e:16:69:ad:
ad:2b:7a:ce:81:96:3a:b8:6e:68:34:1d:b5:5d:3b:
a4:1b:22:06:10:35:6c:a9:7c:ff:6f:7f:b4:20:cf:
bc:32:b8:a6:b1:b1:07:8a:ce:77:ca:e4:3e:6b:1e:
28:ae:43:29:49:e6:a4:cc:cb:a1:53:ef:bb:d9:6c:
1d:20:a8:c7:9a:f5:df:63:8f:ce:03:2a:63:1f:7c:
a5:6e:41:df:ea:68:df:88:f3:05:35:c5:92:a4:1c:
80:b1:16:63:2b:e3:2c:75:94:31:97:a4:9a:3d:7a:
63:65:a2:b4:a2:56:42:f5:05:40:85:3c:fc:b5:3d:
69:33:6e:21:c5:f7:65:7b:d2:5c:c9:2b:63:ea:ee:
ee:fd:ca:80:49:c2:de:49:0d:79:5f:a1:ad:00:b5:
da:5a:e6:71:4d:0a:5f:62:e9:d6:30:92:2f:4d:a0:
40:2c:84:b9:54:1f:b8:11:d7:bb:67:5f:5d:bb:22:
de:79:c8:0d:5b:b2:7a:ed:6d:d7:75:87:77:07:68:
c2:54:4b:2c:dd:3a:36:8d:51:cf:14:ed:08:5b:97:
d1:89:2f:32:75:09:b5:d1:f1:95:80:86:e2:f1:62:
1c:fd:5a:0c:8d:ac:bd:2c:37:ca:57:28:34:30:1a:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:46:E7:5E:D6:10:ED:86:1E:ED:E1:A9:DF:88:16:13:E5:19:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A9F97AA018411EFAFDC233B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.64.0/18
Signature Algorithm: sha256WithRSAEncryption
98:11:99:27:f7:16:34:e8:3c:60:0d:dc:2a:44:72:64:c7:41:
b3:87:9a:4d:07:9f:da:90:d4:2a:d9:80:4b:ca:ca:33:93:3d:
33:d2:af:46:75:a4:70:63:eb:ec:b2:a6:07:7b:e1:f6:ee:ba:
59:22:f9:fc:8e:c0:55:9f:13:a7:65:be:a7:9c:6a:7d:9e:4a:
a6:ce:07:f8:cc:1c:dc:22:a1:02:e2:ec:c4:bc:a1:d9:89:40:
73:4b:b3:3c:01:db:1b:22:4d:ba:c1:27:b1:70:a0:14:a1:8b:
f9:cf:bf:1e:73:d2:01:39:53:07:5a:e1:a6:6c:0d:3b:85:6a:
30:0c:f9:09:38:06:8c:46:c6:75:f1:4e:d7:cb:01:58:0b:80:
0c:40:4c:8c:a6:10:a7:61:8c:7f:a7:7b:d0:72:e6:9e:87:e4:
84:5a:5f:69:ef:cf:38:da:3c:db:c7:a2:12:fc:c2:b6:b9:c6:
fd:a7:2e:82:43:d6:97:5f:e3:2a:2b:2e:7f:d5:1e:52:cf:34:
9b:3d:ee:8a:27:6c:8d:f4:b9:a7:74:0f:2b:74:2b:db:b6:2f:
7b:ef:b2:1f:c2:8c:70:cc:33:0e:2b:5b:61:bc:af:6e:b4:ce:
d9:4c:6e:ab:d1:8c:47:70:53:fb:7c:fd:c3:8d:3b:1d:c0:32:
5d:aa:af:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:55 2024 by rpki-client on console-ams.rpki-client.org