Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EE214703B2611EEA62EA4334AD9E6FC.roa
File: 7EE214703B2611EEA62EA4334AD9E6FC.roa (raw, json)
Hash identifier: Rdi85vaxvI4fLnnZ1X8cfvFhB8F+3eh35oKj44B32Dc=
Subject key identifier: 81:1B:31:EE:20:B6:E3:1A:35:1E:F9:99:41:84:EC:D4:97:51:4D:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 359B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EE214703B2611EEA62EA4334AD9E6FC.roa
Signing time: Tue 15 Aug 2023 04:45:02 +0000
ROA not before: Tue 15 Aug 2023 04:44:59 +0000
ROA not after: Mon 27 May 2024 04:44:59 +0000
asID: 140627
IP address blocks: 156.247.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13723 (0x359b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 04:44:59 2023 GMT
Not After : May 27 04:44:59 2024 GMT
Subject: CN=64db02ce-cd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3b:74:48:4a:8f:f4:95:d2:b1:7e:e2:89:30:
23:ce:e4:c2:b2:da:7d:44:f9:6c:5a:d1:bb:38:5e:
65:8d:60:61:1f:7b:2d:ee:6e:3e:31:c5:ad:60:0f:
5e:52:05:52:77:41:60:a5:13:af:8f:08:c0:de:ae:
fc:4d:74:dd:bf:5e:d1:46:ad:ec:c0:8f:34:a8:a0:
33:15:1d:88:f6:e8:3a:95:8c:05:4f:67:89:2c:cd:
c0:13:e6:6f:c8:a3:c2:ed:3b:75:ef:6c:8b:86:ac:
25:cb:59:76:f9:98:20:1f:4a:fb:f2:a8:68:8a:1d:
81:71:f5:4c:e5:14:79:6d:d1:cd:5c:1e:fe:5f:11:
e1:8f:82:a7:0e:48:a7:2d:3e:cb:3e:11:0e:7e:17:
ea:d9:0a:60:de:65:f0:fd:d4:f1:39:78:6b:d8:a6:
ef:62:dc:af:da:79:ed:5e:db:11:a4:35:66:0c:4d:
db:83:93:84:45:42:26:e1:c4:14:06:76:65:4b:fc:
d5:b9:37:44:33:a6:d6:a9:33:9a:30:f4:d1:e1:ab:
17:98:a5:35:52:5c:89:38:0b:d3:c0:ad:6a:28:8c:
54:1f:96:2e:d8:a0:0c:39:75:00:ca:ae:2d:f5:16:
92:c2:c2:02:e3:a1:cf:42:0c:14:57:5a:a4:02:cd:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1B:31:EE:20:B6:E3:1A:35:1E:F9:99:41:84:EC:D4:97:51:4D:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EE214703B2611EEA62EA4334AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.236.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2e:97:a7:c9:c2:76:e0:da:20:bb:17:8d:60:da:ea:2a:f0:
d0:9e:12:bc:6f:75:7b:3b:62:34:13:ec:2b:8d:7c:c6:b6:e8:
30:11:a5:03:d0:1d:6e:48:ed:c6:f0:b3:80:76:6e:4d:71:fd:
d6:a3:fe:4b:e0:ae:8d:04:d8:28:47:ac:d1:73:0f:2e:fb:b6:
8c:62:ef:6a:5d:11:15:1f:00:55:b7:ff:e2:ba:ff:f3:6e:9b:
25:93:bd:80:da:58:e3:03:e8:19:c2:f9:65:a8:76:2a:72:f1:
8b:88:60:2e:88:f0:96:26:89:8c:db:53:7c:de:04:9e:6d:81:
c4:56:56:2d:ea:d4:6a:5a:4e:15:60:53:58:ef:cd:ea:d0:f6:
c6:79:2a:dd:26:8b:88:bb:77:48:ca:48:7a:9c:73:e0:f2:21:
c3:68:b9:53:e6:a6:0a:30:5d:ec:dc:6f:9d:5b:d7:d8:f4:37:
46:ee:e1:32:dc:f3:c2:83:67:39:4f:5b:fe:73:0c:5f:0f:f6:
7f:f1:ef:63:8e:b1:e5:d8:6d:ce:cb:a7:91:26:03:e7:bc:ad:
6e:22:35:47:76:93:de:14:e7:5f:eb:5f:60:14:9a:2a:c2:9e:
7f:79:c7:c8:8b:91:d0:9d:f8:6b:9d:22:c6:da:6e:cf:8a:8c:
31:06:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:12 2024 by rpki-client on console-fra.rpki-client.org