Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA6138F4FDC811EDAB0EAF574AD9E6FC.roa
File: CA6138F4FDC811EDAB0EAF574AD9E6FC.roa (raw, json)
Hash identifier: PpyKqsZY6t9zpq+mIAXn7IXWxoLrFw3apNbhDlUfEhM=
Subject key identifier: 44:35:9A:C5:4F:79:AD:41:71:02:A6:D5:B6:A7:75:FB:5C:7C:3C:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 27EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA6138F4FDC811EDAB0EAF574AD9E6FC.roa
Signing time: Mon 29 May 2023 02:30:35 +0000
ROA not before: Mon 29 May 2023 02:30:31 +0000
ROA not after: Wed 15 May 2024 02:30:31 +0000
asID: 63888
IP address blocks: 156.255.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10220 (0x27ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 29 02:30:31 2023 GMT
Not After : May 15 02:30:31 2024 GMT
Subject: CN=64740e4b-616d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:17:4a:b9:29:59:b9:f7:14:99:eb:75:05:0c:
40:a4:27:24:d0:20:db:29:90:af:ea:a3:8b:6f:b6:
90:5a:f9:46:48:77:e7:9a:b2:0f:1c:27:68:87:e0:
b9:19:c8:86:bf:d8:f9:68:88:7d:e5:95:ef:17:0e:
62:7e:8f:7c:c3:34:1c:e9:43:d8:79:e1:2a:31:20:
b5:38:17:e9:60:15:2e:e0:97:2f:76:b2:b6:46:0a:
d9:c8:3b:82:4f:70:0a:3d:c6:9c:8f:cb:b4:ff:25:
38:da:cc:9f:1c:5b:c3:17:8e:25:41:10:bd:67:21:
6f:f0:a4:78:1e:0d:52:e0:2d:7f:24:f5:67:8b:03:
0f:6d:dd:0c:dd:6c:b1:60:6a:2d:f3:a4:03:2e:d6:
16:c3:1d:e8:01:55:68:fa:e5:3b:5b:5a:08:f0:01:
ca:c0:52:77:17:79:dc:62:a4:9d:6e:97:9f:03:1e:
f6:a2:29:4e:1a:d3:9e:0d:db:c3:87:82:f7:a9:8b:
8b:05:38:8c:0b:3a:f5:fc:12:a7:33:46:75:a4:80:
56:16:45:e2:2a:a0:ef:69:0f:f8:27:b2:56:37:34:
78:fc:cf:88:4a:f2:48:bf:19:7d:e5:ce:39:68:5d:
b5:e5:fe:27:94:5a:08:a8:ae:66:1e:38:10:46:d6:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:9A:C5:4F:79:AD:41:71:02:A6:D5:B6:A7:75:FB:5C:7C:3C:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA6138F4FDC811EDAB0EAF574AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.101.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c1:2a:9b:32:84:a3:be:fe:48:b9:5e:29:22:f9:ef:32:1c:
eb:fc:0f:44:18:fc:a4:1b:42:81:0b:f4:0a:f3:5b:c1:ba:be:
10:ae:55:76:4b:15:87:4e:88:a6:3c:98:e7:ba:3e:e8:b2:cc:
c8:8c:7e:c4:71:e1:6f:33:41:06:c5:e5:7c:cd:11:f9:22:24:
60:7c:65:74:05:84:27:99:cd:98:bb:0b:f7:e8:4d:92:c5:53:
45:3d:b1:09:b9:ea:ed:82:36:68:af:93:49:69:7d:b4:b1:d1:
1c:2c:73:1a:f6:f4:4b:98:7a:92:3a:c4:3b:e4:9b:a1:ac:7a:
8f:8d:cb:d5:bf:d0:80:b0:48:7a:14:bb:a5:12:fd:eb:7a:60:
11:46:de:7d:6b:b6:67:f6:37:da:b3:78:7e:01:7b:8a:00:31:
a0:1b:15:db:20:d1:49:d8:d1:72:3d:76:3d:87:e4:49:6f:ac:
93:c6:19:a0:9b:df:91:66:c4:ce:c3:21:66:75:40:cd:8d:34:
1f:21:e6:e0:36:28:47:50:4a:75:f3:44:55:42:6f:bd:c3:c4:
ab:9b:88:9e:1f:c5:81:b3:52:fa:83:f6:f7:10:dc:e8:b6:97:
c6:cf:45:53:56:99:05:56:93:57:71:3e:44:b1:98:ea:a5:ad:
38:dd:f6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org