Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90FD44DE277D11EE94F077104AD9E6FC.roa
File: 90FD44DE277D11EE94F077104AD9E6FC.roa (raw, json)
Hash identifier: ApB0mlG1J9JxITe8Htf4Cifhti8T2MLPxJlgrNJZMuo=
Subject key identifier: C0:99:CD:54:EC:58:1B:47:D2:7C:7E:B0:C1:A0:14:50:02:24:13:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 31A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90FD44DE277D11EE94F077104AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:17:55 +0000
ROA not before: Fri 21 Jul 2023 04:17:52 +0000
ROA not after: Thu 13 Jun 2024 04:17:52 +0000
asID: 22773
IP address blocks: 156.238.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12705 (0x31a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 04:17:52 2023 GMT
Not After : Jun 13 04:17:52 2024 GMT
Subject: CN=64ba06f3-ef32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:b0:9a:f9:8f:c6:6e:20:bb:79:77:04:a9:
e9:60:ad:1f:e8:84:a6:02:5b:80:8c:ef:65:28:d4:
91:88:4b:3b:f0:26:c3:1d:03:da:f7:70:a3:11:c6:
ea:25:b4:16:89:ac:19:50:ab:ed:54:bf:a3:1b:9e:
9b:6a:53:91:e2:81:6d:d0:b2:95:60:81:3f:9d:ae:
10:58:a8:69:e5:27:bc:5e:03:35:a5:54:d0:b8:0f:
a6:a0:5f:ef:10:d4:f1:3f:62:e2:9f:b9:91:47:12:
97:18:6b:f0:41:ff:81:11:55:c2:45:97:97:7b:e4:
99:16:f4:f9:e8:bc:97:8b:aa:3c:bc:c3:29:bb:b0:
1f:09:a9:f3:80:5c:80:fa:4b:bc:2b:35:d4:5c:cd:
c8:cc:36:4e:14:45:eb:3d:a5:07:46:90:5c:9e:75:
40:57:c9:be:31:12:e7:e9:e6:59:d2:80:87:ca:d8:
42:c7:1b:39:f5:12:46:3d:54:de:f4:5f:d3:61:cb:
e1:c7:c2:7c:14:fd:00:66:39:2e:79:98:2a:cf:1a:
b9:39:f9:5b:1b:17:42:c2:bf:29:f8:02:f6:ea:a5:
44:4e:f2:dd:c0:5e:a4:ed:e3:5d:0f:77:e8:85:19:
c6:31:c4:dc:6b:0a:dd:db:62:02:4d:4c:b4:1a:fe:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:99:CD:54:EC:58:1B:47:D2:7C:7E:B0:C1:A0:14:50:02:24:13:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90FD44DE277D11EE94F077104AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.28.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:e2:15:e4:72:46:5d:d8:09:d8:c2:df:0a:9c:7f:df:85:93:
ec:35:ec:7f:b4:53:74:8a:ae:50:78:9d:01:6d:0d:31:d8:32:
89:d1:d6:b1:5f:e7:03:e2:bf:0b:60:cf:56:8a:8d:4f:e4:4d:
36:43:ae:1e:9b:de:cb:f9:d9:bc:a0:aa:e9:97:7a:89:94:64:
91:b3:c4:5d:8b:10:d3:83:1c:d7:f8:47:86:39:7d:51:4a:3f:
d6:0f:47:5e:c0:7e:0d:df:ee:74:1b:58:19:a4:7f:7b:b0:90:
98:25:c1:03:66:e2:b8:a9:bf:54:a0:0c:f4:b3:9f:a1:52:68:
f2:de:61:5c:74:c8:01:b8:2b:f7:3b:0d:0a:43:28:7d:49:bd:
c1:5b:0b:65:b0:64:2b:d5:4c:68:b0:29:05:04:ce:f6:60:b1:
f5:f7:30:cc:02:65:a8:93:73:81:f3:56:90:81:0f:a2:48:0a:
6d:d5:09:fe:90:6d:fb:f0:92:6d:54:99:dc:1b:2e:b7:7c:90:
cf:c0:a7:35:25:a7:b9:d2:4d:db:47:32:ea:7a:97:f1:a5:4a:
60:16:8a:99:17:fe:5a:ce:d0:4c:b6:0d:30:9c:eb:49:22:56:
6e:16:eb:f4:33:e8:df:43:49:01:6f:79:1d:da:c3:44:e4:94:
dc:c3:c1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:20 2024 by rpki-client on console-fra.rpki-client.org