Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF58BE6E544911EE918234844AD9E6FC.roa
File: BF58BE6E544911EE918234844AD9E6FC.roa (raw, json)
Hash identifier: sokOY6lxYu/ZrEm4v9uSllXZDiWryBfesV9ywHcmhy4=
Subject key identifier: 1D:56:27:27:14:53:DD:11:D0:4E:4B:92:25:6B:A7:58:A6:CD:C8:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3A4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF58BE6E544911EE918234844AD9E6FC.roa
Signing time: Sat 16 Sep 2023 04:30:22 +0000
ROA not before: Sun 01 Oct 2023 04:30:18 +0000
ROA not after: Thu 08 Aug 2024 04:30:18 +0000
asID: 133199
IP address blocks: 156.245.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14925 (0x3a4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 04:30:18 2023 GMT
Not After : Aug 8 04:30:18 2024 GMT
Subject: CN=65052f5d-66e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:43:07:bf:c0:98:44:a5:fb:41:7e:28:9d:
16:81:7c:c6:fb:ac:06:d7:8a:be:5b:cc:e3:a4:06:
07:36:da:37:98:2e:6c:aa:ec:4a:12:b1:ac:03:04:
04:1f:6d:0a:85:6c:47:b2:73:89:be:a4:f9:3e:b2:
60:40:dd:6b:e2:22:5d:c2:bf:98:ce:72:ab:d1:18:
1a:07:18:93:6b:df:77:b1:5b:21:df:c7:f0:73:eb:
22:48:82:7a:eb:4d:2a:cc:ef:ab:1f:7d:f7:d2:3d:
95:92:ef:f6:ce:01:5e:83:26:2c:e0:c0:e5:f2:b3:
a9:d2:bb:b3:95:d3:cb:dd:7f:dc:13:d2:00:01:92:
67:3c:ed:d3:09:4e:c3:74:3e:df:8e:a2:0a:d1:d7:
8e:e7:34:d7:1a:33:fb:fd:2a:30:13:d8:57:40:a9:
8d:51:fd:a6:01:08:c6:3b:3b:82:c8:0e:c9:2f:ab:
81:f7:b9:ea:74:6e:79:5e:30:83:29:87:5d:e8:fc:
9c:6c:23:34:23:96:c7:5e:0e:5f:0e:54:c2:a8:a8:
ea:bd:ad:de:52:16:05:9e:22:9b:41:16:8b:0f:4b:
9a:73:3f:d1:2b:49:d7:3a:73:41:b8:5f:00:22:38:
be:c9:d4:3c:aa:3e:e3:71:c2:8a:6c:9b:b6:db:0d:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:56:27:27:14:53:DD:11:D0:4E:4B:92:25:6B:A7:58:A6:CD:C8:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF58BE6E544911EE918234844AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c4:23:3c:48:f3:fe:f4:08:00:cf:9f:72:a4:53:23:00:fb:
15:78:49:76:62:5c:ae:c9:c8:b2:f9:bb:34:0e:3d:4c:f1:4e:
24:5d:83:b0:ce:76:b8:bb:7d:6d:7d:0d:36:a6:a2:fb:08:76:
9b:ea:d5:1c:1f:05:51:1a:6d:e6:3f:4e:45:b0:7e:75:e2:f3:
29:5b:0f:a7:ee:7e:9b:7e:cf:37:40:a9:aa:ba:f5:31:01:f9:
14:b8:78:1d:f3:75:02:b2:e0:12:80:e1:4d:c9:8c:c8:1b:3a:
af:13:1b:0f:b8:44:c3:57:96:9d:a9:99:c8:8c:6f:19:78:f3:
fb:d5:ba:7f:27:02:60:d3:58:8c:36:06:3b:4f:71:bf:b2:e1:
a9:c8:b1:66:ca:42:d8:4d:98:25:2a:41:35:fa:ff:38:49:ef:
ab:b9:7f:cf:82:2c:68:b7:0e:84:3b:bc:b8:5e:fa:b4:ee:5a:
2e:20:8d:30:c1:58:5b:f4:20:dd:56:ae:5f:fc:dc:66:6f:03:
73:25:18:66:fc:c3:7c:25:8b:be:e6:5d:e1:b5:19:47:9d:cb:
8a:43:23:e3:05:bc:1e:23:17:fd:42:eb:20:13:93:22:0b:05:
d8:83:25:2e:c8:73:b5:eb:12:71:1e:d0:64:40:7b:d4:6c:a7:
b1:5d:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org