Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB56682AFD2811EE8B25AF33017001B1.roa
File: AB56682AFD2811EE8B25AF33017001B1.roa (raw, json)
Hash identifier: qLAVDYXmfvqC6tl4GgplCQEic8i3ZlLGqDDXD2g5qGs=
Subject key identifier: 4C:5B:C1:35:72:C1:BC:2F:9F:DB:82:12:DA:A4:13:91:38:B7:17:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82F9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB56682AFD2811EE8B25AF33017001B1.roa
Signing time: Thu 18 Apr 2024 02:09:21 +0000
ROA not before: Thu 18 Apr 2024 02:09:17 +0000
ROA not after: Fri 22 Nov 2024 02:09:17 +0000
asID: 211392
IP address blocks: 156.237.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33529 (0x82f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 02:09:17 2024 GMT
Not After : Nov 22 02:09:17 2024 GMT
Subject: CN=662080d1-d644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c9:7c:e3:dd:da:3b:e5:0b:bf:4c:53:80:e5:
6e:a5:35:50:da:a0:90:0e:0f:e9:17:36:fa:c8:ba:
77:98:1a:4d:5f:3d:f6:82:f4:d6:93:b0:e3:7b:93:
ae:6f:ef:34:c0:a8:f4:ee:f1:25:b0:ab:cf:31:db:
a3:90:c5:90:b7:05:1d:f7:f5:65:fd:ca:74:fa:ec:
68:81:11:ad:6e:5d:7a:c3:25:73:ba:09:25:43:ee:
fb:f6:39:aa:f1:d2:45:fe:08:8f:03:56:9e:df:b7:
b9:19:c7:bc:a8:06:7f:8e:11:4c:e9:dc:7d:68:12:
b9:01:36:ce:08:23:2a:26:79:39:42:c5:b0:1e:5d:
5d:b1:b7:7d:6a:5c:1f:76:4f:6f:80:7d:dc:0d:66:
40:9b:23:d8:0b:51:a8:97:18:89:c3:ab:be:6f:9c:
58:65:eb:0c:62:da:e2:26:96:18:83:59:51:85:f3:
0b:3d:c6:4d:8f:aa:3a:ee:32:ff:1f:d7:01:69:15:
f0:90:15:f5:93:c6:b7:97:5f:ff:72:92:5c:fc:f0:
d6:a4:2d:85:02:da:82:b2:61:76:1e:f0:ba:cf:e0:
93:a0:a4:d1:83:36:24:20:20:e8:65:25:dc:7e:4c:
fa:b4:07:0d:a5:e5:2d:ac:20:56:9f:43:61:e2:01:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5B:C1:35:72:C1:BC:2F:9F:DB:82:12:DA:A4:13:91:38:B7:17:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB56682AFD2811EE8B25AF33017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:fa:39:d9:92:d2:ca:e7:ee:ba:92:0d:bd:b2:66:f9:21:a7:
73:68:95:16:f1:d6:87:30:33:87:e5:9e:1b:08:ef:e1:d5:9b:
13:60:b8:b9:8a:57:ae:7d:f9:0a:f4:82:96:ee:d7:aa:17:0e:
df:b9:32:65:0b:66:b5:14:41:d9:7a:6d:e7:32:aa:52:3b:55:
d3:a6:b9:65:57:23:cd:05:50:9e:86:79:c1:a9:c5:d2:1a:c1:
5d:5a:ce:7c:ce:cf:2a:23:ab:63:0c:80:91:aa:ff:83:c2:86:
e2:1d:84:eb:1e:58:41:b2:c3:3c:b7:a0:80:f4:23:d8:36:2d:
ef:10:88:a5:ff:4f:7b:eb:9e:1b:d3:ab:2d:25:44:34:52:72:
69:1f:c2:90:7a:a2:0f:f2:bc:6b:bf:d4:ab:6d:53:6b:a2:34:
04:7c:8f:f4:bc:96:11:7d:74:a4:b5:9a:72:ce:8e:56:0e:c5:
db:8b:e0:d0:20:71:2b:e7:05:a4:11:9f:68:5b:a0:b2:e3:4d:
e6:ac:09:c0:86:3d:01:f1:88:1e:4d:52:e3:14:1b:35:89:d5:
5f:d5:c4:80:4d:4d:3f:a4:00:e0:c7:76:a3:34:89:4e:a0:b1:
19:97:b3:75:5f:80:49:55:54:17:33:a4:c3:a0:e7:08:26:d6:
b1:5a:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:14 2024 by rpki-client on console-fra.rpki-client.org