Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF63C9D0FE9611EDBC4950484AD9E6FC.roa
File: AF63C9D0FE9611EDBC4950484AD9E6FC.roa (raw, json)
Hash identifier: BpTBzRg/uHDpJqf35K4ruV5gCQJDaT0kXVJ7SegQmtI=
Subject key identifier: A8:AE:8D:2E:14:2C:6D:30:F1:53:51:90:45:8B:93:D2:7C:03:96:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2819
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF63C9D0FE9611EDBC4950484AD9E6FC.roa
Signing time: Tue 30 May 2023 03:04:26 +0000
ROA not before: Tue 30 May 2023 03:04:22 +0000
ROA not after: Wed 15 May 2024 03:04:22 +0000
asID: 63888
IP address blocks: 156.255.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10265 (0x2819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 03:04:22 2023 GMT
Not After : May 15 03:04:22 2024 GMT
Subject: CN=647567ba-3116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:43:20:e7:fa:dc:16:82:59:78:5f:db:f9:
2d:89:7b:01:1d:75:a2:bb:b1:c5:f8:c1:43:a2:ae:
49:54:53:16:8e:fb:5d:23:01:42:f0:73:51:58:c6:
3b:ea:29:5d:58:80:f6:80:6c:4c:c7:c6:63:4c:99:
97:12:aa:44:ab:cb:01:0a:49:98:05:50:c8:d1:fe:
fa:5f:02:65:28:de:99:5e:fd:9b:f1:ff:49:b4:06:
47:64:e4:7e:9d:13:bb:dc:19:db:60:c1:97:bb:08:
a0:5b:2e:7f:f4:26:9d:db:f2:a7:8a:6a:42:6b:74:
6b:48:c1:d9:c8:2d:df:6e:6d:64:46:2f:c8:75:af:
09:6c:eb:3a:e9:63:61:d8:0e:7f:72:b4:0c:f7:74:
54:6a:a5:78:4c:58:fd:ab:59:dd:25:40:bb:98:81:
75:c1:34:cc:94:c6:7d:47:57:15:e2:58:db:6d:48:
17:42:0b:35:5c:f0:a9:95:e4:fb:bf:02:e8:0a:b5:
5c:db:53:30:5b:93:2e:21:85:90:05:06:a8:be:00:
79:dc:4e:8c:5a:ea:07:4f:08:c6:80:ef:37:ba:30:
fe:c0:50:77:8d:08:56:9b:e5:aa:b5:76:12:ce:12:
e8:6d:8e:a4:3f:c9:87:74:51:da:f1:0f:b6:ec:db:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AE:8D:2E:14:2C:6D:30:F1:53:51:90:45:8B:93:D2:7C:03:96:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF63C9D0FE9611EDBC4950484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.115.0/24
Signature Algorithm: sha256WithRSAEncryption
12:05:b4:27:90:11:52:a9:9d:2b:38:fd:9a:87:c6:d1:e6:85:
2e:44:18:6e:74:0a:00:b4:36:4e:f0:0a:ce:49:cd:25:61:34:
2b:55:67:7d:fc:37:c1:f7:7d:ae:95:d0:fa:38:07:f6:96:17:
e7:85:c9:ef:9d:b6:ac:60:e9:24:1b:60:3b:dd:c0:4a:1f:81:
27:a3:9c:22:d8:99:f1:77:72:79:ca:ee:ec:9d:b4:06:b9:7b:
38:75:0f:f3:ba:03:29:b1:75:64:c3:d2:f1:40:7e:75:aa:ae:
f8:1d:bd:38:a2:cd:1e:3a:a1:79:53:90:d4:b0:8e:de:1c:d8:
6c:32:85:0d:a8:77:19:8d:52:24:25:fe:07:de:9b:21:4b:c9:
c9:d2:ee:71:4d:7e:c6:61:46:23:a2:a7:44:78:94:81:9b:17:
2f:bc:27:94:49:a2:18:c0:51:22:e2:dd:fc:4d:08:3c:b4:2a:
a1:36:b4:f6:77:aa:01:0e:a6:8d:6b:a2:dc:c1:48:0f:5a:aa:
46:6f:40:d1:2f:e0:6d:d3:a8:8e:ae:e7:95:a2:d8:40:e3:81:
f9:db:92:0e:1f:1f:7b:40:f3:3f:7b:44:fb:ce:91:e0:35:7e:
c9:d7:be:e0:91:1c:32:91:23:bc:d7:a3:55:f0:21:13:e0:e2:
fe:f9:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:57 2024 by rpki-client on console-ams.rpki-client.org