Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9041DDC3B2111EEB8F76B254AD9E6FC.roa
File: C9041DDC3B2111EEB8F76B254AD9E6FC.roa (raw, json)
Hash identifier: Ze/jqVzWX7F0ZG5nCqy17okxtNVOoaSlnJ17jYsMYQw=
Subject key identifier: 08:DD:4C:96:D1:9B:2D:9B:1E:27:42:32:32:9C:29:01:32:AE:00:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3551
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9041DDC3B2111EEB8F76B254AD9E6FC.roa
Signing time: Tue 15 Aug 2023 04:11:19 +0000
ROA not before: Tue 15 Aug 2023 04:11:15 +0000
ROA not after: Mon 27 May 2024 04:11:15 +0000
asID: 140627
IP address blocks: 156.247.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13649 (0x3551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 04:11:15 2023 GMT
Not After : May 27 04:11:15 2024 GMT
Subject: CN=64dafae7-2c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:6e:a9:97:fc:65:1f:92:08:29:b4:0e:37:
c4:bc:a3:86:79:af:75:3a:56:ec:53:8d:11:05:19:
12:e7:52:03:df:f2:05:1c:7c:c4:d4:8d:55:95:c2:
42:22:72:4e:b1:ec:97:e4:11:43:6e:56:1a:99:af:
16:77:0e:ff:0a:2e:14:b6:b6:71:f5:44:e7:ac:28:
59:15:64:c5:ad:f0:ad:1d:0f:01:c6:73:24:1d:e0:
c3:ee:7e:ad:b6:c8:97:3a:5f:c3:a7:7c:30:30:ce:
c1:ff:50:9a:1a:f8:e3:65:f4:13:91:e8:f4:e1:6a:
15:fa:30:6a:f1:6d:a1:5c:c1:df:d2:f2:82:41:ba:
64:1a:39:02:05:58:d6:3f:63:26:91:f2:43:37:ec:
85:84:a9:86:3d:6e:b2:5a:5c:27:f1:f1:1f:5c:dc:
5a:cc:50:2a:f1:5d:c7:f9:fe:0b:bf:0f:cd:61:e9:
b7:8b:ac:02:48:a7:6f:14:9e:b2:e2:d8:aa:49:57:
51:90:a0:18:ca:e8:03:ea:8c:17:dd:3e:0e:e0:d0:
66:2b:9c:80:a1:62:9c:75:47:ff:99:c8:b3:01:53:
75:8a:a9:07:29:c5:e5:a9:78:22:61:4a:66:12:0e:
e5:0b:8e:51:7f:88:3d:5e:38:dd:1d:2d:eb:4f:51:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DD:4C:96:D1:9B:2D:9B:1E:27:42:32:32:9C:29:01:32:AE:00:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9041DDC3B2111EEB8F76B254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.197.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:16:0b:be:0a:3d:52:2b:91:ba:c6:e5:1a:33:50:dd:8a:f7:
b3:54:22:47:63:2c:a1:b4:60:0f:50:b1:d7:44:49:79:c1:24:
b4:de:8a:cc:66:6d:3c:7d:14:7d:91:42:8c:e0:4b:d3:eb:75:
77:cc:10:e0:16:9b:24:68:6c:99:65:a4:81:cb:2b:40:d2:a6:
33:06:79:39:17:2f:de:dd:0d:db:59:2b:2b:13:a2:03:13:2b:
56:aa:1a:7c:63:1b:47:f9:0e:c9:f1:d2:44:b9:27:2f:7b:ce:
cf:bc:a9:99:c2:e2:32:ec:c0:61:9f:c3:b5:2f:1f:38:c0:d3:
ba:b3:11:78:56:33:70:b8:3b:c0:88:1f:ed:bf:71:2d:aa:60:
50:79:3c:82:c8:aa:4e:6f:e3:a0:88:d6:9e:3f:a6:b1:c3:b9:
79:31:57:20:96:3d:57:a1:89:10:08:71:ec:78:9f:89:a6:5d:
7b:89:74:cb:df:92:ee:fa:1e:fb:de:c3:58:76:2f:e0:d6:23:
bb:fb:60:bf:cd:11:4e:fc:50:6f:f6:82:ad:50:57:8d:35:1d:
df:f8:ab:d5:fe:66:99:0c:1e:54:1d:63:41:a5:64:2d:05:cb:
83:a2:80:9e:ea:cf:df:4d:56:4b:53:77:13:b9:58:08:40:df:
55:82:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org