Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97D9EFC27FD511EE832FFE694AD9E6FC.roa
File: 97D9EFC27FD511EE832FFE694AD9E6FC.roa (raw, json)
Hash identifier: QGzNOKs+hzj09wYOJV30qFERw8BD6q4aUtPYJMbMXW4=
Subject key identifier: 43:65:A9:37:CC:D9:3D:DA:DE:78:3F:52:5B:F9:88:CE:1B:03:91:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4628
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97D9EFC27FD511EE832FFE694AD9E6FC.roa
Signing time: Fri 10 Nov 2023 14:29:45 +0000
ROA not before: Fri 10 Nov 2023 14:29:41 +0000
ROA not after: Tue 12 Nov 2024 14:29:41 +0000
asID: 397630
IP address blocks: 156.239.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17960 (0x4628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 14:29:41 2023 GMT
Not After : Nov 12 14:29:41 2024 GMT
Subject: CN=654e3e59-e111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:c8:f0:3c:a1:75:55:18:fd:14:36:3b:e1:
aa:ab:4a:86:bc:bf:a3:9d:0b:e3:52:52:8b:02:f8:
66:ef:8f:f2:c6:27:c3:69:72:25:13:a8:e7:f9:64:
d8:61:c3:23:b0:76:b8:1f:23:9b:d6:d0:96:97:93:
c6:2e:6b:13:2a:16:80:8d:8b:4b:e2:e8:41:a7:4d:
81:cd:24:b3:db:22:ad:d0:89:cf:db:c5:35:f5:01:
35:ca:5b:27:af:e9:35:b7:11:2f:34:a3:eb:ca:f5:
ff:94:22:30:18:6b:94:5c:9b:30:0a:e6:80:b1:55:
b2:3f:ad:58:bb:83:12:76:18:08:24:95:4f:77:35:
eb:40:06:e2:66:83:89:21:c9:fa:4c:8c:ce:56:f6:
05:6a:73:f2:5f:db:01:fb:a1:5f:b1:24:8f:c1:d4:
b0:61:48:e4:82:f0:6b:9c:6d:ad:d1:4f:75:cd:a0:
dd:c7:0e:6c:da:27:da:d1:ea:f2:25:7e:ea:e4:05:
a3:56:df:6c:72:a2:cf:98:d0:1b:11:16:f8:5c:9e:
16:62:17:39:b1:b6:d3:c2:2f:8c:6b:ce:d1:fe:bf:
a4:ee:fd:00:98:7e:1a:23:2b:3e:fd:d2:89:95:5e:
f3:1a:af:ec:ed:ae:c2:42:22:92:7a:dc:c3:ba:ee:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:A9:37:CC:D9:3D:DA:DE:78:3F:52:5B:F9:88:CE:1B:03:91:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97D9EFC27FD511EE832FFE694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e2:f6:df:01:fc:55:36:c1:99:2a:d6:ee:72:14:4b:25:28:
83:c8:53:af:b6:36:5d:f8:fb:ee:af:c4:2c:ef:68:ca:55:fa:
c7:d6:2d:77:cc:0e:72:2b:bd:ee:79:08:b1:03:04:ed:42:2b:
94:30:e5:b2:d4:b2:6a:89:66:ab:b9:34:2e:ab:1b:d4:05:e3:
4d:b8:f3:3c:06:f1:91:14:b0:c5:f2:e0:c8:b4:bc:87:1f:ca:
eb:a7:c9:a5:5b:5e:a3:9b:0f:0f:af:6d:ee:68:13:94:b1:14:
05:76:b2:d8:94:fb:b5:6f:27:d7:cc:7d:44:46:94:d0:e9:c6:
cf:be:f4:b0:06:79:70:c0:ea:85:c6:f1:d9:1c:d5:31:9d:da:
e9:4d:e7:9e:f7:92:d8:b3:d0:f3:f8:ee:38:16:8d:03:00:35:
e5:97:c3:7b:d2:6e:9e:9d:cd:39:28:51:88:d4:f7:c1:93:b0:
f9:eb:bc:13:f5:e9:03:0f:05:97:18:5a:75:ae:d0:c3:e6:91:
17:c6:68:7b:05:29:6e:37:dc:85:c8:79:ec:6d:7d:11:b7:84:
08:d3:44:96:99:6f:0e:87:ed:88:86:43:cc:f9:80:93:c3:09:
3a:8d:d4:c8:55:31:02:12:ce:a1:70:12:8a:a3:82:98:2d:bd:
7f:34:e3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org