Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F5F0EC0F91811EDA9DF701C4AD9E6FC.roa
File: 8F5F0EC0F91811EDA9DF701C4AD9E6FC.roa (raw, json)
Hash identifier: cwKHiYkeFayytlFbcxrmSjjUrvvHpJ8/YdOvTJS9pik=
Subject key identifier: 12:C3:B1:E7:60:B1:04:6F:66:21:6E:4B:97:DC:39:05:28:CF:8E:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 26DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F5F0EC0F91811EDA9DF701C4AD9E6FC.roa
Signing time: Tue 23 May 2023 03:19:00 +0000
ROA not before: Tue 23 May 2023 03:18:56 +0000
ROA not after: Tue 20 Aug 2024 03:18:56 +0000
asID: 399674
IP address blocks: 156.248.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9946 (0x26da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 03:18:56 2023 GMT
Not After : Aug 20 03:18:56 2024 GMT
Subject: CN=646c30a4-c301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:df:c3:1c:19:c5:c3:1e:a9:fc:35:cf:74:
39:61:b3:00:c4:22:fd:0f:5c:ab:f9:b0:38:ef:37:
17:a8:e2:4b:d7:f5:40:52:ac:77:27:eb:7f:9b:e7:
1d:0f:49:39:3b:c0:ce:1f:b8:cc:03:15:dc:7f:98:
a2:a9:1e:39:d5:17:0c:fb:a8:a5:29:b6:7c:f5:92:
aa:94:f0:b4:17:18:25:1b:af:57:b9:74:54:39:df:
d0:9e:a9:9a:d8:35:03:2c:1e:3e:af:52:8a:68:e1:
60:a8:0a:4e:ff:e8:60:eb:d3:f1:40:06:ef:0f:c5:
ed:23:a6:21:de:ab:d9:f9:9c:95:1a:18:d6:ca:38:
59:cf:5a:01:18:b1:93:3a:9f:a2:97:50:19:21:9e:
a6:22:5b:75:8a:bb:53:cd:f2:27:a9:ae:68:83:db:
0f:22:96:7a:ac:a6:c0:c7:9f:44:89:9b:30:0b:b2:
46:c3:7b:24:f1:56:9d:99:a5:7b:4b:e4:52:06:fd:
fa:d5:f4:4e:a2:39:b7:24:6b:29:12:c0:18:17:10:
e2:ff:fe:8b:b6:aa:fe:a8:32:43:37:91:75:e7:3d:
65:e6:11:12:a3:53:94:fa:27:49:46:a8:2e:50:57:
c1:0c:62:4e:c6:0f:9e:d2:e2:32:f9:06:6b:cd:a1:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C3:B1:E7:60:B1:04:6F:66:21:6E:4B:97:DC:39:05:28:CF:8E:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F5F0EC0F91811EDA9DF701C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.176.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:90:93:25:59:20:eb:13:7a:02:e7:62:84:9b:f5:0e:d3:a6:
ed:b0:e0:d0:c1:98:08:6a:1b:39:d6:1e:d1:48:43:5b:3b:86:
6a:a1:43:d4:3d:5f:9a:51:d5:66:3f:7c:c3:c9:4f:a2:65:dc:
1e:36:f4:c3:c8:3b:a9:6e:58:45:20:bf:2f:fd:d0:a0:b5:cc:
fe:40:f8:20:9d:bc:19:3d:67:e4:01:ff:68:30:24:27:1a:b7:
b4:f7:50:2e:f6:81:5c:bd:9b:57:d1:d6:93:b0:17:c3:ef:2e:
db:27:b0:e8:f8:b0:21:67:e4:b4:ab:08:a3:63:ec:52:f0:18:
c1:27:62:42:97:98:35:be:08:f5:61:e0:d0:c6:85:35:53:cb:
86:0e:47:86:f4:70:a9:e4:97:cc:7e:cc:a9:b3:63:7b:77:11:
64:00:d1:1b:96:4a:08:26:37:d2:a4:a9:7f:21:b3:a2:3c:5f:
42:70:6e:74:cb:f2:8f:2a:7b:36:5c:ef:33:ec:e6:30:9e:b0:
74:ec:d1:12:6f:5a:17:c9:14:02:11:90:9b:a9:b4:6a:1e:d8:
2c:c5:b8:f0:d0:15:17:a1:d1:c7:5c:dc:9f:d8:02:4c:f4:b1:
a2:70:6b:26:a1:5e:2f:ab:b5:69:d1:a0:60:17:c2:b8:66:71:
d0:28:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:48 2024 by rpki-client on console-ams.rpki-client.org