Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB0DFFCE022411EF81723F5E017001B1.roa
File: CB0DFFCE022411EF81723F5E017001B1.roa (raw, json)
Hash identifier: 7MxcHQqOf0DMj2XWQErj9V5+5G54cRKaTEGEkLKqvfk=
Subject key identifier: 47:6A:7F:F4:51:11:F6:40:8D:8E:B5:2E:74:A0:97:00:4A:0A:7F:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB0DFFCE022411EF81723F5E017001B1.roa
Signing time: Wed 24 Apr 2024 10:24:12 +0000
ROA not before: Wed 24 Apr 2024 10:24:09 +0000
ROA not after: Thu 12 Sep 2024 10:24:09 +0000
asID: 142286
IP address blocks: 156.225.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34008 (0x84d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 10:24:09 2024 GMT
Not After : Sep 12 10:24:09 2024 GMT
Subject: CN=6628ddcc-a219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:c1:39:22:58:ab:40:0c:a9:a9:ee:b7:7d:
47:bd:55:ef:55:87:c5:99:6b:b5:27:80:c7:86:00:
f9:c7:51:de:a7:dd:4f:65:56:35:c5:fe:26:43:45:
41:e8:14:56:4b:76:39:93:fb:92:57:fd:7d:40:ec:
9b:73:03:9e:8d:70:60:bb:8b:49:09:57:9d:07:02:
3c:ee:ef:c7:41:5f:17:27:51:69:50:93:0c:84:93:
5a:77:4d:91:80:f7:cd:a8:04:be:2f:fa:1b:1b:d3:
f5:c9:cd:fb:88:4f:09:ca:33:25:c8:be:be:1b:d7:
8f:9d:f0:e2:17:76:49:eb:4c:66:a2:ad:97:6b:7f:
fe:a7:29:58:f0:45:73:a9:e3:d6:eb:08:6c:dc:b0:
65:a4:da:c6:46:eb:81:22:78:59:9d:b7:05:e4:35:
29:e1:61:41:67:a4:fc:e6:ec:00:9b:4c:11:79:d5:
03:c9:65:6d:ea:50:d0:68:27:1c:99:55:77:16:f3:
2d:d6:3b:d5:5e:52:36:5f:f3:d6:12:50:90:27:cc:
55:1e:66:1c:97:01:35:fd:66:2b:2c:34:5b:f9:2e:
56:16:de:58:56:ef:a2:a0:11:b7:14:a6:f3:00:92:
d1:8f:9b:63:d2:9a:e8:d9:0d:ac:58:72:dd:41:11:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6A:7F:F4:51:11:F6:40:8D:8E:B5:2E:74:A0:97:00:4A:0A:7F:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB0DFFCE022411EF81723F5E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:af:5f:5d:fd:8e:7a:9f:81:84:a9:19:00:5f:6b:42:4a:7e:
b0:56:0b:69:61:7b:57:70:fc:36:f9:d4:a1:e5:0f:d2:a2:c5:
24:c9:c7:82:8a:70:00:99:e4:ab:7c:1b:98:a0:21:37:6e:d6:
09:14:86:87:da:73:58:85:c7:ca:b5:07:f0:0a:7c:97:b8:14:
85:75:df:40:b5:54:68:63:40:04:48:03:94:57:b0:fd:9d:c1:
bb:84:a4:9e:6f:26:7e:8e:7c:9e:71:77:b2:90:e5:30:95:1b:
af:e3:7b:04:02:3c:72:2f:2c:8b:6c:d3:b7:60:aa:86:8b:62:
fd:f2:b9:14:3f:23:32:05:71:48:57:d9:9a:c2:e1:d6:85:e8:
d2:b1:40:55:73:9a:4d:cc:41:b4:8f:2f:18:c6:92:db:63:b0:
64:d2:8e:6a:58:b4:f3:64:56:4a:9d:27:48:f9:56:d3:73:5e:
97:bf:96:50:de:7e:6b:c9:1a:66:f9:29:42:fb:f3:fc:ca:2e:
25:d4:69:83:36:c2:ad:9e:66:87:66:4d:59:b0:cf:23:7e:2e:
23:53:6a:89:51:93:e2:da:c3:7c:75:c5:79:3d:b2:f3:2a:e6:
60:0f:14:63:8e:1a:09:97:07:84:30:bf:0c:5d:59:cf:f6:ef:
b5:31:55:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org