Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCA168167EB411EEADCC4A4C4AD9E6FC.roa
File: BCA168167EB411EEADCC4A4C4AD9E6FC.roa (raw, json)
Hash identifier: lN+CDqv02mzHMkOR6wXOg6iTByMV/VX2+UDGdYfwfFA=
Subject key identifier: 03:67:1D:9D:5A:AE:3D:36:CF:CC:04:26:A1:D0:65:DF:85:57:B4:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 44C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCA168167EB411EEADCC4A4C4AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:02:02 +0000
ROA not before: Thu 09 Nov 2023 04:01:59 +0000
ROA not after: Thu 08 Aug 2024 04:01:59 +0000
asID: 133861
IP address blocks: 156.245.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17607 (0x44c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 04:01:59 2023 GMT
Not After : Aug 8 04:01:59 2024 GMT
Subject: CN=654c59ba-fb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:6c:d4:93:ee:99:c4:3f:17:e3:b8:22:25:
14:f1:c9:80:7e:71:d9:56:00:d7:c2:c7:a1:15:24:
26:53:d9:21:f0:95:ce:02:51:41:56:9c:c4:ba:4a:
61:77:ad:8f:2d:07:60:e6:55:75:88:19:9b:b2:de:
59:31:48:eb:c3:54:42:6d:c5:01:c6:0c:da:09:39:
54:9c:3c:a7:c9:59:92:ae:a0:8c:fb:95:4d:9e:b0:
d5:26:8c:53:fc:e0:2b:5a:ec:4a:29:fa:b8:02:b3:
50:d1:ce:24:de:86:4b:48:e8:61:11:64:49:fd:6a:
ba:4f:02:50:a8:c0:23:97:00:73:b5:eb:de:c9:c2:
45:10:9b:cf:cc:47:7e:2a:1f:5a:14:dd:30:62:54:
2a:c9:36:d8:54:bf:90:f1:3c:a5:c4:24:db:3f:57:
21:1a:44:ea:a6:ce:5e:0a:42:0b:48:3c:c4:20:e1:
fb:6d:98:6e:17:a9:9b:3e:c4:74:e8:e9:5f:a6:8f:
5b:8c:c0:cd:dc:31:89:03:80:69:e3:d7:ef:c1:f1:
85:a6:0e:ee:e2:a5:71:69:7b:28:3e:e5:84:af:4e:
0f:16:7e:65:18:4c:d8:ab:9c:90:2c:4f:23:48:e9:
d4:10:c4:2a:24:78:f8:65:9e:78:d7:cf:fb:cb:ff:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:67:1D:9D:5A:AE:3D:36:CF:CC:04:26:A1:D0:65:DF:85:57:B4:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCA168167EB411EEADCC4A4C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:0a:5c:53:b1:ff:82:82:31:5d:ed:7b:0f:83:e0:39:b2:e9:
a5:c1:47:59:7e:bb:39:da:a7:3a:57:18:4f:0c:ba:1f:10:d3:
b7:c6:5d:1e:5e:a6:df:7d:13:77:e2:13:2d:72:54:55:0e:32:
70:35:10:c6:8d:14:ae:4e:cd:b6:91:2c:a0:0d:74:89:2c:81:
e6:20:d2:b2:e2:5c:8e:46:d1:38:ea:80:c4:6c:f3:42:8a:ce:
f1:59:7c:cf:19:e1:87:e5:ec:b9:a2:b3:b5:e4:d6:97:42:72:
b5:e8:97:fe:9a:12:fb:55:f0:be:e9:a5:10:d6:b0:2d:86:66:
f1:ee:d6:1c:72:6d:25:aa:ac:d8:fe:31:d1:fb:0e:c7:ff:69:
c2:1f:f5:89:08:5a:79:3d:31:bc:a0:0f:ef:03:f8:0a:aa:99:
6b:10:ff:5a:64:ee:22:ca:9d:c6:11:e6:34:96:93:10:f4:0c:
86:83:43:3e:cb:81:61:b4:cb:e6:11:6a:2b:3d:d1:e1:69:5d:
3f:9f:49:b3:19:72:8a:60:f4:81:48:1e:de:11:59:e2:6d:69:
3f:c9:d0:c2:92:89:4d:e2:a2:db:bf:c6:63:67:1b:a6:70:14:
2a:e7:48:c1:3d:46:71:7b:b9:2e:2c:09:c4:57:7a:d7:19:8f:
b4:26:1e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:16 2024 by rpki-client on console-fra.rpki-client.org