Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC66B270380111EE9B3C8A434AD9E6FC.roa
File: AC66B270380111EE9B3C8A434AD9E6FC.roa (raw, json)
Hash identifier: cZgCL9eTFynw7EsfmAYk/jkVehdTeCsLDxzkp8lLFVU=
Subject key identifier: 7B:ED:F4:D7:08:25:F1:72:98:D0:4D:A1:38:E1:C4:39:0C:FF:CC:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3473
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC66B270380111EE9B3C8A434AD9E6FC.roa
Signing time: Fri 11 Aug 2023 04:43:53 +0000
ROA not before: Fri 11 Aug 2023 04:43:50 +0000
ROA not after: Sat 03 Aug 2024 04:43:50 +0000
asID: 136907
IP address blocks: 156.230.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13427 (0x3473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 04:43:50 2023 GMT
Not After : Aug 3 04:43:50 2024 GMT
Subject: CN=64d5bc89-37b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f0:69:04:ca:b4:3f:96:9c:55:a1:82:44:3a:
f7:25:ee:de:d5:b8:97:35:fe:b4:e6:b2:78:c0:a2:
67:24:f2:95:70:be:88:ec:ff:e2:3d:3a:20:d9:c5:
7d:35:9f:d8:17:a1:35:e1:08:bb:9c:23:71:7b:57:
59:8d:41:88:ff:54:fd:9d:69:0e:d8:59:c1:98:69:
e0:63:86:ab:c0:31:ec:dc:d9:6d:e1:c2:1d:99:89:
38:69:19:e7:4f:1d:88:8c:fe:bc:ce:b8:a5:d0:ea:
aa:ca:2b:2d:df:7c:86:13:18:08:cb:be:8b:50:9d:
8c:a3:d5:ae:0d:de:22:44:cb:01:14:3d:40:61:3d:
30:3c:4a:b7:ef:36:a7:61:e4:12:36:7a:2d:52:9d:
ad:78:af:a1:e0:ac:ac:4c:a2:bf:23:87:dd:b1:25:
c4:e0:49:f0:b1:53:bc:e6:1a:87:07:d0:68:ca:69:
c3:aa:4a:e4:1d:4c:1d:f3:b7:56:57:85:4e:f0:10:
e2:93:0e:2e:b9:68:c0:49:5d:ab:f8:6b:c3:fc:70:
1d:29:a6:44:14:88:dd:af:fa:fe:95:63:18:d2:0f:
5c:9b:8c:b6:a6:fd:ad:46:d5:e5:8c:b3:73:80:3e:
86:02:9b:a6:69:36:62:91:82:98:d4:68:77:e2:c5:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:ED:F4:D7:08:25:F1:72:98:D0:4D:A1:38:E1:C4:39:0C:FF:CC:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC66B270380111EE9B3C8A434AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.40.0/21
Signature Algorithm: sha256WithRSAEncryption
04:10:73:52:cb:34:a1:d5:68:97:20:0f:d5:a3:c8:a1:4d:a5:
34:a8:54:ab:4b:a6:5e:49:ff:19:7c:f5:58:2a:4b:df:ac:94:
34:72:4b:2e:ea:49:80:db:78:ac:c7:cb:5b:07:97:2e:1b:fb:
03:c7:39:a7:1c:37:96:44:ef:20:b8:7c:4e:83:3a:22:96:d9:
b3:80:fe:11:97:ac:7e:0e:27:59:1d:28:56:66:39:94:0a:2e:
0b:db:4c:a2:c7:d4:66:5c:e2:d8:ca:5e:8b:50:83:36:45:ab:
b3:2e:de:87:7a:a8:7d:9b:9f:ea:b0:9c:75:3b:fe:53:54:c5:
82:3d:57:de:b6:0b:a8:db:93:c3:01:8a:bc:05:21:ff:9d:57:
8e:7a:b0:d0:42:76:ee:e1:d4:36:f7:12:7d:75:1b:35:85:d2:
d7:2f:c5:97:01:cc:97:c2:f2:f7:ab:d1:c0:18:52:ff:b6:88:
f9:72:78:ea:73:16:38:93:36:e3:72:af:30:e3:e0:76:71:67:
aa:ce:49:c7:a3:3d:a4:dc:4d:24:bf:26:96:44:74:55:22:2b:
86:b3:3d:7d:d1:e7:89:b1:bf:01:de:26:cb:78:10:02:df:06:
f5:29:6b:1a:49:17:2a:04:f7:64:6c:32:14:ab:37:b8:8e:77:
07:89:11:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:07 2024 by rpki-client on console-ams.rpki-client.org