Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C05969F265B111EEA460F9714AD9E6FC.roa
File: C05969F265B111EEA460F9714AD9E6FC.roa (raw, json)
Hash identifier: WUQFvYIoFzEvze59WnW3twtGAaTh09qrdNVwWDLvDOc=
Subject key identifier: A7:BB:D4:F6:60:69:65:CF:BD:B0:95:40:88:33:37:7A:D7:C1:E5:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3DE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C05969F265B111EEA460F9714AD9E6FC.roa
Signing time: Sun 08 Oct 2023 08:07:41 +0000
ROA not before: Sun 08 Oct 2023 08:07:37 +0000
ROA not after: Wed 05 Jun 2024 08:07:37 +0000
asID: 137263
IP address blocks: 156.245.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15843 (0x3de3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 08:07:37 2023 GMT
Not After : Jun 5 08:07:37 2024 GMT
Subject: CN=6522634c-d98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:de:24:65:bf:36:29:20:e0:3b:b8:58:5d:
f1:79:9d:6d:3b:5d:10:08:93:ef:9d:76:11:8b:97:
fa:e7:ec:0e:bd:60:17:a9:02:c5:e3:9e:f5:ad:d7:
02:1c:02:5a:ce:49:5b:c9:9f:8f:b5:f9:f0:7a:a6:
9c:19:a4:0c:5c:69:9c:1d:21:7c:ce:8e:c6:e4:c2:
be:da:a7:de:b6:19:50:0d:2f:d9:3a:a5:56:37:0b:
a0:9d:27:e8:86:93:e3:a6:2d:40:b1:92:c2:81:93:
81:4f:57:7d:cb:ba:84:8d:27:eb:80:b2:a1:87:03:
a0:80:69:94:71:1e:50:cc:1e:72:ac:be:69:5c:4d:
de:6f:3d:20:7c:55:17:6e:46:b7:0a:9e:84:cc:68:
de:47:04:9e:3b:47:0c:dc:2c:8c:38:ff:4a:06:4c:
25:49:00:21:0e:2c:c5:3a:df:b1:1a:1d:74:18:03:
90:89:6c:05:c6:c9:2b:af:aa:85:ec:28:9e:67:3c:
9b:2c:b8:a0:c2:72:40:f8:4d:03:8b:e2:de:3c:9a:
b9:bd:8b:9c:cb:0a:bf:d1:ee:0d:4d:36:33:b9:c4:
7a:95:4b:ef:de:0f:45:e4:3d:eb:6c:f0:a6:21:2b:
99:79:05:4b:eb:13:d4:91:c5:97:a8:8e:a4:ce:79:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BB:D4:F6:60:69:65:CF:BD:B0:95:40:88:33:37:7A:D7:C1:E5:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C05969F265B111EEA460F9714AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.2.0/24
Signature Algorithm: sha256WithRSAEncryption
15:47:c6:8f:3b:b2:54:eb:40:c6:92:26:2d:e8:48:c7:94:b5:
ef:f9:42:fd:fe:06:71:d8:e1:42:d9:c1:4d:c4:66:1d:0b:95:
59:8a:bf:b7:73:eb:31:c4:68:d1:d4:a8:93:a8:4c:87:00:0f:
23:3f:aa:0c:b6:46:ed:ab:a9:5d:9f:21:55:92:c3:57:53:85:
f7:d9:43:4a:6f:91:2c:f5:e2:52:ce:39:b0:75:30:d4:37:12:
cb:f1:67:e4:bf:95:9a:a6:bf:82:bc:25:07:39:b4:90:e1:42:
62:57:62:15:d0:57:e3:a3:bd:9d:48:77:d0:99:15:46:c1:cd:
de:6f:28:fa:9e:bd:e7:45:5b:80:0b:e8:7e:de:4b:76:41:e2:
ce:5e:fe:c2:00:62:34:60:f4:1b:30:fe:51:19:b5:b7:53:64:
8c:ff:87:6d:f5:0a:e2:05:31:89:bf:f7:0c:b4:13:1e:6d:10:
42:78:7e:aa:49:0c:43:a4:4e:5a:0e:54:6e:4a:8f:49:74:37:
bd:8e:84:86:5c:70:73:3c:49:ec:a4:46:f0:11:e9:e3:76:40:
19:f3:37:6e:29:be:44:c5:f7:e3:57:07:b1:22:0b:aa:3f:96:
88:f0:97:bc:1f:5f:94:3a:96:16:f6:c0:ff:d4:79:e7:5a:3a:
ef:5b:3d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org