Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF7D71F2385311EEABA7341B4AD9E6FC.roa
File: CF7D71F2385311EEABA7341B4AD9E6FC.roa (raw, json)
Hash identifier: xDoV2aYf1q5PE8USLZPahPzyC23htygXm5fivADJ2ZU=
Subject key identifier: 2F:B4:1E:23:CB:C2:B4:71:A6:25:14:D1:1B:75:7D:E9:C9:FC:EF:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3477
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF7D71F2385311EEABA7341B4AD9E6FC.roa
Signing time: Fri 11 Aug 2023 14:31:51 +0000
ROA not before: Fri 11 Aug 2023 14:31:48 +0000
ROA not after: Sat 03 Aug 2024 14:31:48 +0000
asID: 136907
IP address blocks: 156.230.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13431 (0x3477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 14:31:48 2023 GMT
Not After : Aug 3 14:31:48 2024 GMT
Subject: CN=64d64657-fd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:8c:a4:6c:fc:cd:75:fe:6e:59:dc:24:2c:
e7:33:a7:19:0b:5e:23:bf:cd:fc:bd:74:0c:6e:b6:
e9:a8:15:ec:b6:97:10:bb:95:69:38:89:d1:16:69:
78:33:16:8e:6c:c2:34:9e:ac:29:e5:c8:7c:7c:79:
27:5e:9a:32:8e:33:da:75:4c:11:6b:ee:3a:cf:57:
e6:77:b1:27:8b:9c:26:5b:c7:0e:6e:b5:6b:f8:8c:
78:d0:39:be:07:c0:9e:57:cd:75:82:d6:a7:6a:49:
aa:52:3f:b7:07:32:5d:25:10:e5:f1:82:d7:26:31:
6b:bd:54:11:0a:27:8c:4a:d5:49:b5:7b:63:c5:72:
7e:c7:0d:3b:8a:11:a8:8a:a8:e6:13:70:18:e5:c6:
86:01:26:c1:50:aa:ec:4f:c1:a2:c3:a8:64:ec:d2:
0f:24:a4:56:76:8f:f8:f2:18:b5:02:80:40:60:ab:
2a:c4:ee:0d:4d:63:66:e2:ee:74:1a:a9:02:1a:87:
43:f1:f5:50:d7:02:fe:14:02:e6:2e:15:e7:d8:b3:
d1:35:e3:29:9d:bf:12:95:e5:52:3c:88:9a:64:eb:
d2:8b:bd:fe:6e:91:af:34:e2:54:1b:3b:79:5e:b7:
93:78:31:52:27:1e:be:a6:28:bb:26:56:bf:7a:98:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B4:1E:23:CB:C2:B4:71:A6:25:14:D1:1B:75:7D:E9:C9:FC:EF:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF7D71F2385311EEABA7341B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a7:6f:ac:11:8f:ca:ec:0c:5a:51:4b:77:e6:01:07:9b:45:10:
68:ba:d7:85:0e:71:37:d8:f1:47:47:f6:29:e1:93:ba:bb:0b:
a6:e5:46:c8:4b:f4:aa:f2:b8:37:7f:8b:01:13:66:3f:12:5c:
9b:ad:a0:73:e2:bd:70:71:e5:da:1f:23:66:43:67:e2:72:bd:
bb:34:82:95:b4:1f:ca:5e:ae:c9:cd:da:b0:ca:68:45:0d:fd:
da:1a:55:d2:b9:52:e4:f3:4d:75:64:5f:b9:d3:26:10:61:11:
8e:9c:ba:c4:a5:fe:7f:82:5f:ab:33:79:7c:56:e5:c5:6e:1c:
34:7e:19:5f:a5:8f:af:3d:b4:32:88:b5:17:bd:09:48:0a:dc:
38:c1:5c:1d:30:53:9e:bf:0e:fe:02:a2:3e:e4:ad:d7:59:f7:
e6:58:2b:83:c9:c0:22:cb:68:8d:1d:5a:68:7f:08:d7:40:4e:
2d:06:ab:5e:73:1e:0c:2e:4d:6b:0f:7b:30:f7:a8:0c:b9:ba:
eb:34:10:9c:b5:b2:46:fc:11:ea:61:f8:7c:d9:79:c1:25:09:
90:14:91:ad:12:33:b3:0f:61:23:78:59:70:1d:b9:f0:03:90:
7b:cb:b3:fb:c5:0f:a8:9d:15:42:8d:56:47:be:dd:cf:98:74:
1b:d8:52:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:34:21 2024 by rpki-client on console-ams.rpki-client.org