Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCCC599A037F11EFA902DB6B017001B1.roa
File: BCCC599A037F11EFA902DB6B017001B1.roa (raw, json)
Hash identifier: zjwkm0nDqfsi3GFUCmFeJOivqXojFZujgWkDGN2Wpg4=
Subject key identifier: 0D:5B:86:38:FF:FB:FA:EA:FE:95:7A:A9:87:69:25:FD:FA:3A:11:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8572
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCCC599A037F11EFA902DB6B017001B1.roa
Signing time: Fri 26 Apr 2024 03:47:43 +0000
ROA not before: Fri 26 Apr 2024 03:47:40 +0000
ROA not after: Tue 03 Sep 2024 03:47:40 +0000
asID: 136800
IP address blocks: 156.225.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34162 (0x8572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 03:47:40 2024 GMT
Not After : Sep 3 03:47:40 2024 GMT
Subject: CN=662b23df-bbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:20:f0:1b:10:74:0a:dc:62:cc:03:7f:1d:
9b:5d:60:5f:aa:da:2a:07:7e:10:ca:47:c8:7e:3f:
ae:1f:fa:bb:8f:ab:58:8b:d6:ff:46:e7:a4:64:82:
af:bb:1e:dc:38:b5:08:44:3c:f9:f4:2e:46:7c:87:
84:32:e4:94:8a:5a:98:ea:32:f2:01:b3:22:6a:ff:
a0:c1:47:a2:f1:67:5f:ef:ca:83:57:a4:87:9c:80:
7c:f6:db:8d:ad:c2:56:4c:ff:ca:11:e1:96:88:75:
3d:16:fd:a4:e7:6b:d8:a3:6d:f7:40:2e:e4:e0:1c:
bb:d7:62:4e:fe:d9:10:f1:7b:a4:ab:35:c4:a2:98:
ad:d1:14:7f:a7:30:6c:a9:6c:ea:0d:f3:c9:dc:0c:
e8:29:e0:10:66:d1:ae:23:69:1d:22:2b:2f:f0:fc:
4d:91:05:85:f6:12:bf:44:fa:ec:f3:79:d2:c7:f4:
be:65:01:b3:fe:11:30:7f:2d:5f:7e:09:eb:7d:95:
11:a7:a2:6f:60:32:1b:ba:39:f8:af:42:b7:9e:b9:
b2:b9:e2:dd:b1:49:1a:eb:8d:57:d1:32:0f:56:d7:
53:87:55:e4:88:e7:44:c9:ec:96:80:d8:c0:3a:1a:
59:0c:2e:97:74:c0:a4:d8:c3:51:bf:db:98:59:28:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5B:86:38:FF:FB:FA:EA:FE:95:7A:A9:87:69:25:FD:FA:3A:11:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCCC599A037F11EFA902DB6B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.32.0/19
Signature Algorithm: sha256WithRSAEncryption
69:21:c5:f4:8d:90:3b:22:df:40:e2:a7:1d:a5:fd:6c:e3:13:
75:bb:85:ec:d7:88:8c:53:c7:c2:f6:18:1c:e4:67:f1:ed:b4:
bf:cd:4f:0f:3a:46:7b:c2:10:45:e0:98:7a:c4:fc:2c:ee:64:
96:0a:45:66:04:f4:a2:dd:5d:2e:d0:07:c2:fb:6d:f0:9b:9e:
b7:e5:00:02:10:53:d1:d6:c8:32:5b:8e:19:28:09:59:33:5d:
ea:c8:ec:ad:5a:05:0f:76:ee:6f:3f:2a:ae:c9:4f:b6:54:3e:
78:f9:08:2e:78:6e:fd:68:8b:c5:76:79:af:30:6e:30:64:53:
71:d4:3d:ac:fe:11:9b:a1:ab:45:16:5b:24:e0:93:11:ee:46:
36:0a:22:07:92:fe:f4:d5:2f:82:bc:2d:c8:64:73:a1:d6:e4:
0f:24:9b:77:83:43:c1:af:a4:09:e3:ae:2f:19:93:b3:52:ce:
3f:05:dc:d0:eb:fa:64:01:24:62:38:e1:21:2d:27:ce:dc:dd:
ae:a8:30:07:69:90:61:98:03:12:48:16:17:2e:21:89:fb:14:
06:b3:d1:f8:ec:d0:99:2a:bf:bd:be:a9:44:b0:e0:d5:a6:42:
6c:ae:d4:e9:ef:a3:86:88:3b:de:c7:b2:56:10:0d:27:52:f8:
04:1c:49:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:16 2024 by rpki-client on console-fra.rpki-client.org