Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C22E12FEFB8611EDAB344F804AD9E6FC.roa
File: C22E12FEFB8611EDAB344F804AD9E6FC.roa (raw, json)
Hash identifier: hc7AXNh5+m33qb5IlPnA97G97Q4hfPrfarZaqfeDKZs=
Subject key identifier: 76:29:79:09:75:68:79:B7:25:69:9E:E1:8C:69:B1:7D:D5:97:89:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 27CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C22E12FEFB8611EDAB344F804AD9E6FC.roa
Signing time: Fri 26 May 2023 05:32:52 +0000
ROA not before: Fri 26 May 2023 05:32:48 +0000
ROA not after: Sun 30 Jun 2024 05:32:48 +0000
asID: 984
IP address blocks: 156.253.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10188 (0x27cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 05:32:48 2023 GMT
Not After : Jun 30 05:32:48 2024 GMT
Subject: CN=64704484-5c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:85:2a:89:1e:bf:2a:5d:9f:6d:95:61:51:
81:b4:38:99:63:e2:e1:18:1e:fe:d6:28:f2:83:14:
81:4a:50:1c:3e:18:ac:c8:82:d4:f2:77:c2:01:66:
c4:4a:9e:70:b3:8f:0d:1f:94:9f:b3:c1:b4:ee:55:
79:c3:38:69:86:c1:a5:d4:c1:c5:bf:d3:28:30:fd:
8e:30:6f:74:02:01:12:f8:99:d9:eb:74:a0:c6:99:
3b:5a:34:1b:f1:fe:23:5c:66:dc:ab:a3:d1:44:02:
b7:a5:c6:8a:7d:e5:b5:77:3e:21:93:44:a5:08:3b:
a3:65:ec:93:80:f4:30:8c:16:fb:6c:c0:9f:47:46:
25:25:2c:6f:00:f8:6f:1e:b3:b6:1c:fe:3e:e2:36:
98:b7:48:54:d1:fc:91:d8:86:39:5c:81:38:10:8a:
5a:46:60:0d:15:54:71:38:bb:6c:94:d6:1f:90:f1:
91:01:49:50:a1:66:f4:57:bb:27:c9:67:c0:96:a1:
bc:1b:80:88:f0:b7:de:8b:06:d0:33:71:dc:ff:6f:
29:a0:87:88:60:97:ca:c6:d6:0e:3c:bc:1e:57:d9:
33:6c:0d:01:b1:95:1d:54:d3:12:e0:9a:cd:97:a9:
bb:7c:cc:c0:db:ce:5c:7b:d0:1a:38:d9:d4:92:37:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:29:79:09:75:68:79:B7:25:69:9E:E1:8C:69:B1:7D:D5:97:89:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C22E12FEFB8611EDAB344F804AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.128.0/17
Signature Algorithm: sha256WithRSAEncryption
08:96:2b:92:0a:b7:89:ea:e7:ff:53:8b:94:27:7d:3f:61:85:
b4:33:74:9a:58:8d:4b:f5:38:d5:f0:b2:7d:20:67:f6:f0:d0:
46:53:75:db:ce:f1:3d:be:f6:be:2f:c0:dd:b0:ed:a5:63:96:
cf:83:ff:f1:93:ed:30:4d:95:85:c9:16:27:d3:13:29:b7:2b:
c1:3e:f2:65:52:6a:e4:87:8d:73:27:e5:d0:66:bb:4f:0a:19:
c9:92:6f:77:c6:6f:b0:b2:31:5d:91:53:a9:7e:09:a2:d1:c1:
22:06:99:6c:5a:84:7d:1d:d3:c0:da:c7:4e:dd:59:c8:4e:83:
b9:a1:d9:bb:2b:09:50:3a:11:6f:d1:2b:1d:b3:a6:a6:b4:02:
e6:7f:e2:c0:e7:5d:24:4e:c8:1b:ad:a0:b3:6b:39:fd:c3:34:
e3:06:05:dc:e2:0c:0e:e1:9e:21:0f:d3:9c:c9:8e:cd:3f:5d:
f7:2e:1d:f0:72:57:18:16:d6:19:36:a4:5d:71:c4:ed:a0:35:
fb:cc:f0:ef:bd:e3:a6:9d:44:1c:8a:ff:99:83:8d:59:ab:54:
a3:75:80:a8:2f:7f:17:f6:46:16:df:eb:d4:d5:c2:32:bc:7e:
db:05:a1:a0:cd:fe:30:0d:a4:a2:56:32:fc:75:21:18:a9:69:
3d:9a:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org