Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B53EB7DC3B2911EEABBA3C3D4AD9E6FC.roa
File: B53EB7DC3B2911EEABBA3C3D4AD9E6FC.roa (raw, json)
Hash identifier: d/1zbqg58wsPR6eThinh6BJStDfwMU4Te7ThSywoc30=
Subject key identifier: 12:FF:DA:17:75:1C:05:40:E2:49:C2:64:21:96:CA:23:54:B4:07:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B53EB7DC3B2911EEABBA3C3D4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:08:02 +0000
ROA not before: Tue 15 Aug 2023 05:07:58 +0000
ROA not after: Mon 27 May 2024 05:07:58 +0000
asID: 140627
IP address blocks: 156.247.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13773 (0x35cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:07:58 2023 GMT
Not After : May 27 05:07:58 2024 GMT
Subject: CN=64db0831-d4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:55:82:6e:f7:6a:0e:8f:1f:50:dd:ff:8e:
09:6b:96:8d:d1:e7:89:5f:b1:fa:52:7a:d1:4f:22:
3c:10:7c:97:69:e0:a2:c2:dc:57:8b:28:1a:14:0f:
cb:cd:e7:ed:da:a4:0d:6c:c1:8f:d1:20:ba:f6:4d:
2e:51:c9:d3:a0:f2:bb:18:7a:1c:2b:58:5d:b5:7d:
38:03:66:45:d7:88:61:d0:fb:a6:c4:df:43:be:2f:
47:1c:73:3c:ec:66:61:cb:e2:ee:38:57:f1:61:13:
25:d8:80:b7:26:25:fb:06:3b:5a:6e:6a:63:86:06:
c4:5f:23:51:f8:17:14:2a:bd:af:4e:74:aa:03:e1:
92:e9:32:a1:3f:dd:f0:13:24:79:c4:06:9a:6a:65:
28:89:40:9e:f9:a6:c8:85:e6:08:fb:19:83:a6:04:
31:1c:5e:50:34:b6:cf:9d:0d:1e:1e:16:7b:58:a6:
c1:3c:27:63:e2:44:44:09:c4:32:3b:e2:80:d2:25:
68:f7:70:b6:b1:9d:49:5e:60:4c:32:2a:c2:fc:d7:
bb:90:72:bd:5d:fb:57:fb:8f:ec:9a:8e:7e:9c:67:
7f:9b:02:f9:48:df:b2:dc:38:fd:26:83:0d:8b:34:
8e:ca:78:c2:98:9e:5f:46:e0:a5:54:f8:06:ff:64:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FF:DA:17:75:1C:05:40:E2:49:C2:64:21:96:CA:23:54:B4:07:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B53EB7DC3B2911EEABBA3C3D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.133.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:90:f2:ef:09:9d:dd:54:d2:4c:a0:7c:dd:0e:f0:86:f3:7c:
a2:f4:83:00:03:8f:52:27:1f:76:52:fe:2a:bd:22:b1:56:12:
1a:1a:36:a1:49:2b:a8:7b:04:18:b5:79:ec:61:20:f1:b1:53:
32:1f:34:a0:70:ca:fc:e8:42:e0:df:bc:06:dd:b2:a1:38:9d:
73:f6:5e:e9:dd:2f:e4:b4:27:23:9a:86:df:43:13:11:72:ef:
f4:70:ab:33:68:58:9a:d6:e0:7a:3a:00:e1:bb:ac:2f:89:00:
be:fb:e4:7c:09:d8:b3:24:87:ae:2e:e1:35:b7:3c:a7:5d:58:
f2:d8:5d:b5:e3:e8:c7:5f:67:44:0b:8b:05:4c:d1:9c:a2:cf:
84:9d:73:6e:90:c8:38:d7:b0:a1:c6:4e:9b:ac:94:43:6c:3b:
04:b2:b2:07:f1:c6:b3:bf:4d:83:99:98:8a:4a:8e:68:d8:8c:
bd:23:f3:b2:08:76:d8:65:04:b0:4b:97:cf:f7:1f:54:90:d3:
c5:8c:d8:74:f6:8f:7e:b9:2a:a1:85:d3:e0:68:51:30:66:da:
6d:1c:34:75:c3:22:a3:23:bf:c6:d8:df:25:fc:01:91:de:b3:
83:b9:03:75:4a:c5:8b:1b:10:41:f2:00:ee:76:f8:02:4d:80:
7a:85:7e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:57 2024 by rpki-client on console-ams.rpki-client.org