Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B65E140C278111EE8FF8E21C4AD9E6FC.roa
File: B65E140C278111EE8FF8E21C4AD9E6FC.roa (raw, json)
Hash identifier: IzgRjegaZJzv6AT0XYVHPGzwX1hRNRYnOR9D7bEb/7c=
Subject key identifier: A6:49:B0:2E:14:84:53:E1:42:1C:11:50:40:58:29:A8:92:CC:8B:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 31CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B65E140C278111EE8FF8E21C4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:47:36 +0000
ROA not before: Fri 21 Jul 2023 04:47:32 +0000
ROA not after: Thu 13 Jun 2024 04:47:32 +0000
asID: 5065
IP address blocks: 156.233.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12749 (0x31cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 04:47:32 2023 GMT
Not After : Jun 13 04:47:32 2024 GMT
Subject: CN=64ba0de8-49e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:34:1a:be:be:4b:01:fd:92:a4:19:25:0d:
8f:94:88:94:6c:f6:8d:4f:b9:d6:df:09:57:08:1e:
e8:26:59:3b:31:8e:6b:cd:cf:b7:49:b4:52:14:15:
57:90:03:9b:58:c8:69:83:f5:b1:68:9f:b4:e1:95:
6a:93:68:16:df:d3:9a:cc:c0:62:02:0f:0e:fd:47:
cc:c1:e8:a7:a1:d1:45:58:d1:ae:12:8f:ad:c1:28:
db:ac:07:fe:c9:85:9c:0a:af:b8:4c:30:9b:2a:e5:
f9:c7:ae:fc:f2:97:a4:c4:1a:11:93:79:73:67:25:
a4:d2:69:f4:c7:c3:8d:54:c3:76:c8:79:07:50:1f:
05:76:84:00:a9:87:be:8d:45:e4:61:1e:be:a8:0c:
bb:e3:91:65:ce:81:14:f6:00:a9:8f:1e:13:cc:16:
aa:14:40:e6:33:35:03:54:27:c8:cf:c8:97:5d:c0:
d1:8d:3b:7c:25:35:46:5d:0a:d9:d2:41:55:53:22:
51:71:78:68:fb:a4:fc:dc:6f:99:16:ec:7f:1b:8b:
6b:ff:49:e5:3e:eb:28:81:42:07:9e:a8:0a:2b:e4:
98:81:14:8b:6d:1e:19:f8:99:b1:e5:51:7f:25:87:
97:03:66:3f:34:29:7e:69:3f:9f:35:cd:ec:68:d0:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:49:B0:2E:14:84:53:E1:42:1C:11:50:40:58:29:A8:92:CC:8B:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B65E140C278111EE8FF8E21C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a1:29:3a:a1:61:8b:47:64:92:20:af:46:6f:f2:e6:b1:26:
0c:31:1e:eb:bb:d5:42:4e:e9:35:f0:46:4f:f3:a5:44:cc:fe:
35:5f:e4:2d:52:54:2d:e9:15:94:bd:fd:bd:50:d3:5b:df:fc:
4e:b9:5f:17:66:92:f5:76:79:62:15:85:ad:7a:70:fe:eb:57:
17:79:17:01:cb:c7:21:bd:68:62:05:9c:5d:66:16:75:98:da:
4f:e8:89:f6:e7:aa:9b:3b:39:96:89:78:58:b0:60:56:54:70:
47:1e:64:37:9d:1f:63:52:52:07:08:4d:88:af:76:51:d9:60:
91:d1:a3:cf:f3:e9:ea:fd:94:5f:3b:0a:83:d5:83:b2:2c:66:
2d:0c:50:3b:e6:e3:34:d6:7a:8d:5c:c6:d2:84:3a:e4:6d:c4:
54:27:1a:be:c6:4c:a4:d7:7d:a6:10:7d:79:30:a0:b1:e3:02:
4f:74:cc:8b:e9:bf:d9:59:22:a6:c4:30:bf:75:87:2a:92:08:
2f:cb:41:33:70:e1:83:0e:3f:5c:6c:96:eb:29:5d:a0:46:8a:
ea:e4:d9:05:f4:f0:0a:20:b0:96:a7:1e:eb:bb:12:b7:a4:62:
68:fe:79:2c:98:6e:40:fa:98:bf:71:75:35:c8:a6:9e:a3:27:
26:c8:37:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:50 2024 by rpki-client on console-ams.rpki-client.org