Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A1A5FDE155D11EEB082E94B4AD9E6FC.roa
File: 9A1A5FDE155D11EEB082E94B4AD9E6FC.roa (raw, json)
Hash identifier: wy9tlNIATIcXrariN0QtRRDV+6YZAuzBTmJrTJHcP+8=
Subject key identifier: 19:54:54:36:17:30:99:03:3B:E8:0E:49:90:26:F5:E2:12:FB:E7:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A1A5FDE155D11EEB082E94B4AD9E6FC.roa
Signing time: Wed 28 Jun 2023 02:43:46 +0000
ROA not before: Wed 28 Jun 2023 02:43:41 +0000
ROA not after: Mon 27 May 2024 02:43:41 +0000
asID: 140627
IP address blocks: 156.247.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11616 (0x2d60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 02:43:41 2023 GMT
Not After : May 27 02:43:41 2024 GMT
Subject: CN=649b9e62-618b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:74:c1:8d:bd:c1:b4:23:42:37:e7:93:a5:
79:da:5a:dc:59:94:31:2b:b4:25:96:93:17:93:29:
cc:eb:d3:b5:68:96:8a:2f:0f:17:73:14:62:f4:35:
64:db:7b:d6:d1:b8:83:19:1d:54:ba:8d:c9:8f:6e:
fe:64:0e:63:20:dd:4f:c7:b5:a3:79:ca:a5:e6:a8:
0a:ee:37:a8:c5:df:96:c9:fa:b5:68:39:4d:af:04:
5f:e7:d7:61:ef:5c:18:b9:15:d2:d4:6f:01:28:c5:
4a:34:6c:42:f8:66:be:43:11:3a:c0:4d:1f:0b:0d:
42:80:48:a4:18:fb:b7:91:87:63:2c:fc:d0:04:f0:
c0:ed:a7:63:cc:8c:94:2e:15:fc:75:4b:ab:d3:5a:
c1:d5:df:17:5b:1f:2b:f4:a1:e0:d6:fe:9c:67:07:
a8:7d:87:e7:01:47:cc:df:a9:c9:28:bd:c2:b8:6b:
df:d3:56:4d:05:54:fe:5e:10:e7:1b:4a:91:b8:59:
2f:fc:6e:66:2f:5b:06:cd:b4:08:33:50:ad:ff:6a:
c2:b8:d3:48:a5:e7:df:df:08:46:37:29:60:e8:31:
db:ab:70:1c:0e:82:e3:4d:14:a4:5d:33:e5:91:9d:
7a:46:20:7b:2d:93:7f:83:5f:f4:1c:fc:60:1b:09:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:54:54:36:17:30:99:03:3B:E8:0E:49:90:26:F5:E2:12:FB:E7:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A1A5FDE155D11EEB082E94B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.204.0/22
Signature Algorithm: sha256WithRSAEncryption
02:82:7e:dc:48:c7:4d:a8:21:b8:55:52:dc:3d:da:be:f2:c7:
a1:11:a7:e9:e7:3f:79:dd:0d:c0:5a:d0:9c:f1:56:a6:8c:f5:
c0:ca:fd:a3:24:ca:6a:4f:04:37:11:a7:4e:49:ec:70:b0:91:
b9:15:f2:93:1f:5c:fb:6c:93:6d:d9:e7:77:0f:fa:65:0e:05:
be:1d:33:21:0e:87:7f:1b:1f:d9:b1:21:26:08:81:cc:08:d7:
79:7d:3e:79:d9:77:ef:8b:9f:e6:72:3b:04:75:d3:df:b6:6e:
20:75:c2:95:64:3d:9b:e8:b8:ae:72:4b:8c:0e:98:a6:25:81:
be:dd:bc:aa:fd:9e:55:e6:9b:5a:bc:d6:19:7f:fb:ef:45:36:
c1:38:e8:82:98:54:94:4e:fd:9e:8d:c9:2a:11:50:34:c6:f9:
6a:c5:de:f6:b9:85:95:02:31:24:25:48:5e:60:2f:f7:e1:14:
19:cc:e8:ad:b4:f7:f0:26:74:d4:33:47:46:d9:15:5c:fd:e3:
94:75:24:0f:11:20:06:62:f7:dd:25:f4:af:fd:58:cd:3d:e9:
7a:c9:5d:80:8a:47:e7:f7:e6:49:de:df:ef:67:0f:6c:7e:e1:
18:d8:a7:93:bb:35:99:9f:c3:33:45:88:83:49:ab:a3:cb:2e:
c3:75:d4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org