Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/943D808A3B2F11EE8AC3404F4AD9E6FC.roa
File: 943D808A3B2F11EE8AC3404F4AD9E6FC.roa (raw, json)
Hash identifier: vo6tTIynShCBDml8usuyLmh3nVTjfYujqwt4488L778=
Subject key identifier: 25:12:07:27:06:51:06:35:E2:8C:77:D0:2A:43:0F:43:1E:D8:DC:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3627
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/943D808A3B2F11EE8AC3404F4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:50:03 +0000
ROA not before: Tue 15 Aug 2023 05:50:00 +0000
ROA not after: Mon 27 May 2024 05:50:00 +0000
asID: 140627
IP address blocks: 156.247.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13863 (0x3627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:50:00 2023 GMT
Not After : May 27 05:50:00 2024 GMT
Subject: CN=64db120b-1544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:a6:54:41:5a:c0:02:ea:f5:7d:16:21:92:
07:27:56:1a:71:b0:57:91:ab:42:6a:7a:1b:1f:69:
09:76:a3:7c:ea:34:cf:0f:d0:63:ac:41:51:b7:a7:
44:96:e7:05:e2:1e:a5:b4:49:64:c6:12:43:13:46:
73:b2:d6:a4:eb:68:76:ec:a1:f8:5b:97:ab:fb:6a:
5a:1c:79:9d:3c:92:4d:ec:58:77:85:0d:0f:a5:4f:
ee:a8:53:21:b6:91:73:3e:a9:29:0f:94:c9:cd:1e:
cd:8e:b7:c6:5c:d3:af:6f:92:1c:e5:d6:65:af:51:
bc:9f:5f:cf:16:09:9b:8f:a9:22:fa:78:4a:79:bb:
1e:e2:1f:6d:e7:19:27:15:59:c5:8c:70:0e:4c:ab:
a6:02:a5:04:a3:7f:20:98:3f:b8:92:f1:f6:37:6b:
ca:a7:fe:6b:3c:6d:6f:82:00:07:12:ef:5f:b7:64:
e6:f8:b0:d9:2e:1f:6c:23:8c:85:fa:75:92:96:bb:
56:1b:79:a1:ec:33:83:f9:67:12:4f:ea:48:10:dd:
0f:bc:5e:e5:74:d0:da:a1:bd:bd:82:03:db:79:75:
82:7a:55:36:09:9d:f6:d9:ab:68:76:57:7e:f1:34:
8e:05:21:9d:40:56:67:cc:8a:94:60:98:5f:02:a4:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:12:07:27:06:51:06:35:E2:8C:77:D0:2A:43:0F:43:1E:D8:DC:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/943D808A3B2F11EE8AC3404F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.178.0/24
Signature Algorithm: sha256WithRSAEncryption
09:20:9b:8a:44:89:03:d2:7b:7a:bc:a1:0b:0e:d6:4c:dc:73:
1a:1a:6b:ca:f4:61:ea:fc:53:63:18:07:85:37:05:4a:57:10:
84:1a:7b:e8:37:72:f8:7f:87:3f:14:05:64:50:6b:f4:b4:75:
d0:cf:e3:eb:19:f4:5e:e6:66:43:f5:82:fc:1a:5a:84:aa:43:
f7:f9:18:41:7d:59:de:19:cf:bf:5c:96:0c:a9:79:db:d9:e1:
35:77:e1:f8:de:af:a6:08:a6:0d:17:49:00:c1:12:c8:fe:7a:
0d:2e:ab:13:b1:48:65:75:d8:e9:ea:95:51:fa:4a:14:c5:6b:
69:76:9c:d8:45:1c:a9:9a:3e:84:3e:92:30:70:25:d5:15:84:
42:ec:b2:bb:2c:e3:df:18:dc:b9:69:cf:2a:b5:dd:3d:36:42:
19:d8:6f:31:e5:10:bd:f7:59:b9:49:12:3b:a5:b7:13:71:4a:
3a:06:ad:a3:d0:e2:44:97:db:0e:ed:ad:86:71:dd:7a:3c:8e:
7b:0d:a1:23:01:62:96:43:75:fc:b2:74:5e:b2:96:3f:b9:50:
2f:1f:80:97:e6:91:81:13:bc:0a:08:5c:2e:0e:36:3c:f2:8e:
42:6c:c4:46:0c:39:a2:f5:09:77:06:27:fa:ab:e0:bb:e8:2a:
e4:e8:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:13 2024 by rpki-client on console-fra.rpki-client.org