Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A431BC16014211EF9CAFC228017001B1.roa
File: A431BC16014211EF9CAFC228017001B1.roa (raw, json)
Hash identifier: r2cRBr75/wRuq0asT1kJv9l6t+cR9ah1YYedHlFjJ0s=
Subject key identifier: 6F:31:CE:70:EC:5A:EF:19:01:0D:7A:29:2D:D9:E4:86:D5:AA:12:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8402
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A431BC16014211EF9CAFC228017001B1.roa
Signing time: Tue 23 Apr 2024 07:25:21 +0000
ROA not before: Tue 23 Apr 2024 07:25:17 +0000
ROA not after: Sun 12 Jan 2025 07:25:17 +0000
asID: 211392
IP address blocks: 156.238.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33794 (0x8402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 07:25:17 2024 GMT
Not After : Jan 12 07:25:17 2025 GMT
Subject: CN=66276261-dc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:20:8b:76:ac:dd:75:95:5b:25:73:29:e6:
ac:a6:5d:d6:9b:d9:3c:b3:c9:78:48:7c:1f:d4:91:
23:f6:db:4b:c4:f3:4e:de:d2:fd:c5:ac:dd:81:fe:
6a:dc:47:ff:20:9e:65:52:70:f0:61:a9:a4:a4:40:
b4:82:b4:d3:68:fd:ac:2f:ac:d7:c9:4d:fb:b2:a9:
61:fe:82:a8:71:e8:ee:7c:39:e4:7a:25:6e:7e:7d:
ff:88:19:3d:cb:0c:b1:1f:54:b1:cd:a8:3c:ae:0b:
a6:69:81:e2:57:ed:dc:4a:99:17:6e:b7:20:52:07:
45:5f:e4:bd:ce:01:21:7f:03:5f:f6:b2:6f:9d:d4:
62:31:9d:96:70:6c:99:11:b4:58:3a:3f:ee:dc:c0:
45:d0:46:b1:5e:27:20:5b:73:cf:7b:16:9e:07:c8:
4d:45:6d:f6:68:0b:17:d6:a8:68:44:80:62:66:a4:
f9:cc:d0:7b:ae:e6:15:77:60:49:bf:93:2c:2c:fe:
01:b8:20:15:8d:c7:0b:ea:1b:a2:6c:d0:c0:aa:8f:
3e:87:d1:70:ab:c6:96:d5:8a:60:4c:6d:3d:90:91:
b5:57:ff:ef:ab:d9:ad:21:52:06:30:57:0c:12:8f:
84:17:c1:27:c8:81:1d:2f:50:f8:43:28:14:43:68:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:31:CE:70:EC:5A:EF:19:01:0D:7A:29:2D:D9:E4:86:D5:AA:12:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A431BC16014211EF9CAFC228017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.15.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fe:e3:13:11:bb:e1:53:ea:b2:b1:16:e1:c0:60:b1:6e:42:
4b:c3:c2:77:06:9a:66:9e:9d:48:0f:c5:cc:6f:07:24:55:fd:
60:8a:26:84:3b:50:00:82:d5:86:7a:93:ed:3d:2f:96:c5:4b:
b3:49:b0:e8:3e:8b:cd:76:9d:48:6a:c1:b1:97:3c:a8:aa:06:
d1:47:15:45:b2:5f:2e:86:81:3d:af:ff:9a:5e:ad:b0:25:41:
fd:6b:97:66:a7:ac:dd:82:d0:2f:97:52:c1:0d:fb:97:96:71:
db:c3:09:fa:38:e2:67:5e:a8:7d:04:04:a9:35:9e:a4:94:00:
6e:21:46:eb:bf:21:71:18:9c:8c:91:d7:b7:66:72:60:1c:12:
5a:68:9e:90:3a:c3:82:43:86:ea:5c:9f:17:89:50:0c:fd:a8:
10:f0:22:66:9d:4d:88:0e:dc:1b:6f:88:82:77:40:4e:81:ec:
e5:75:bb:03:be:20:e3:43:b0:95:70:e2:d3:70:0c:fe:2f:c0:
9d:a7:49:59:50:59:76:84:9e:91:47:98:6f:f7:c3:09:6f:55:
58:26:42:5f:93:3a:dc:b8:b4:9d:10:7e:95:c0:5a:2f:9c:24:
96:53:84:34:4a:0a:e5:74:fd:2d:4d:2b:0a:5e:bc:b0:fd:29:
81:0d:66:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org