Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FB1A0C63B2C11EEB92BFA454AD9E6FC.roa
File: 8FB1A0C63B2C11EEB92BFA454AD9E6FC.roa (raw, json)
Hash identifier: m4UMh89Xw48O8lge2Jj3s7qb/1TCn4raRcpUyqUK73Y=
Subject key identifier: 57:50:9F:7C:FD:03:B3:24:B0:12:F4:67:07:25:CC:75:CA:36:B2:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FB1A0C63B2C11EEB92BFA454AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:28:27 +0000
ROA not before: Tue 15 Aug 2023 05:28:24 +0000
ROA not after: Mon 27 May 2024 05:28:24 +0000
asID: 140627
IP address blocks: 156.247.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13817 (0x35f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:28:24 2023 GMT
Not After : May 27 05:28:24 2024 GMT
Subject: CN=64db0cfb-4b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:8f:eb:8f:90:ab:f0:bf:fc:a8:37:25:4f:
25:79:d6:88:ef:b0:52:fa:c2:83:9b:81:1e:86:d3:
35:e3:e8:4a:15:cf:25:15:14:f4:66:76:12:9d:2a:
27:2d:ce:dc:a0:0a:23:e0:d7:cd:31:78:a7:fa:55:
32:5d:04:82:36:5f:ac:a9:b0:d3:5d:22:4a:69:6f:
14:2b:e4:b0:41:d4:30:0e:35:de:39:2f:33:cd:09:
44:f5:45:31:7e:d7:9e:fd:40:19:ae:d4:b4:94:4d:
b6:dc:1c:fb:ec:71:b1:a2:b7:bd:89:f5:f1:f9:bb:
b1:73:11:07:c5:56:40:77:47:81:cc:6b:05:98:7e:
28:85:bf:0d:26:0b:e5:3c:8a:2a:88:de:f3:ff:4d:
e2:ff:f5:f8:36:e0:2b:4f:39:76:64:d1:35:90:23:
e7:72:0f:c1:92:c6:fa:cd:77:d7:52:8a:82:30:f4:
ae:b5:79:26:1b:ae:73:cc:e7:1b:56:08:46:0e:31:
f9:0f:8d:75:f9:1d:9c:da:66:e6:7f:7b:46:ac:3e:
f6:28:c6:1a:22:05:4c:cf:98:cf:d4:10:ef:ad:4b:
14:0b:1c:4a:fa:08:21:78:d8:ae:16:a8:80:13:38:
de:6b:e3:05:82:f3:4b:f3:78:01:d5:84:f6:bf:4e:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:9F:7C:FD:03:B3:24:B0:12:F4:67:07:25:CC:75:CA:36:B2:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FB1A0C63B2C11EEB92BFA454AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.155.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:33:ee:00:bf:a1:f2:88:36:72:46:2d:b5:eb:3e:c3:ad:cf:
cd:09:61:fd:bc:99:03:ef:d2:92:eb:df:c9:4d:a8:ba:7d:25:
61:f2:43:7a:27:c5:51:25:43:75:22:3b:3a:e6:bc:8b:bb:50:
86:cb:bf:fc:03:b9:46:1d:16:57:50:c3:91:4d:71:e0:2d:d9:
eb:6a:80:51:c2:a0:db:3c:0b:64:e6:72:6a:c9:e6:c6:d3:96:
c6:98:96:3c:87:3e:2b:69:71:9d:9a:f4:bb:a0:40:93:e1:7a:
dc:60:0b:b5:6f:a8:80:7f:7e:3e:dc:ef:32:6d:c4:b3:3b:ec:
8c:3a:8b:66:a5:61:62:f9:2b:42:97:f1:30:bd:94:5c:d9:63:
8d:90:26:d8:01:11:5a:67:1a:7a:de:e8:d0:da:19:d0:7b:2b:
b2:93:9a:5d:02:70:7d:f6:28:ef:b6:52:20:fb:e9:c8:67:d9:
5e:77:45:b1:08:73:48:1c:61:58:f0:6b:2b:f7:98:d9:04:56:
a0:17:bd:c3:69:1a:4d:e7:45:8e:f6:e6:6d:22:bc:15:33:16:
1c:fb:46:23:53:7d:7a:c5:d1:55:ae:36:86:55:d7:53:4c:bd:
a9:bf:dc:06:d5:26:f9:76:89:e5:58:ea:3a:bd:41:ec:76:81:
d3:75:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:13 2024 by rpki-client on console-fra.rpki-client.org