Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3DC68663B2311EEB6988B2B4AD9E6FC.roa
File: D3DC68663B2311EEB6988B2B4AD9E6FC.roa (raw, json)
Hash identifier: 04C2LJmSo2m/82zftQylN97bjXUbo3DX6pFXo8U4Ibw=
Subject key identifier: E8:7A:E1:41:5E:D3:25:EC:F0:DC:F8:44:8D:A2:F7:2A:CE:92:F8:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3571
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3DC68663B2311EEB6988B2B4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 04:25:56 +0000
ROA not before: Tue 15 Aug 2023 04:25:53 +0000
ROA not after: Mon 27 May 2024 04:25:53 +0000
asID: 140627
IP address blocks: 156.247.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13681 (0x3571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 04:25:53 2023 GMT
Not After : May 27 04:25:53 2024 GMT
Subject: CN=64dafe54-d3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:10:bc:a0:0f:7b:a2:61:c5:00:39:2c:18:
7a:1a:89:fb:33:3d:c1:48:55:8f:18:dc:45:23:84:
5b:5a:82:9b:c1:a6:97:62:9b:9a:42:9d:8e:79:a3:
16:87:a8:1a:3c:4f:b0:de:84:86:87:ae:87:d4:e7:
f7:a1:db:69:54:47:78:14:5a:97:6d:dc:f7:98:99:
52:7e:43:a4:f2:13:95:03:c3:29:2c:14:03:85:30:
ac:55:01:b8:1c:8c:1a:7b:c7:bf:7e:ae:b8:54:74:
20:ea:87:cd:07:20:cd:6e:89:88:e3:29:6f:d7:83:
5d:fd:4e:e3:0e:6f:92:3f:14:dc:b5:8f:b5:d7:8e:
a6:9e:e1:6c:06:f6:dc:42:f1:00:80:fe:23:ca:5d:
d8:9d:82:91:b5:f2:d0:f6:5b:80:de:82:7d:2f:d8:
b4:3b:8d:70:6d:a2:ef:69:f0:af:c7:1e:7c:89:15:
11:dc:97:39:95:58:88:00:cc:15:52:03:fd:6f:60:
b7:75:04:6f:ae:b7:77:78:8d:82:a8:3d:c2:dd:ad:
b3:5b:55:04:7d:27:33:36:e9:86:0d:95:7d:e8:e1:
13:6a:6a:46:1b:f5:c7:10:5c:f9:86:92:6d:70:0f:
27:12:c3:c5:55:94:ee:29:73:68:9c:36:5a:46:5e:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7A:E1:41:5E:D3:25:EC:F0:DC:F8:44:8D:A2:F7:2A:CE:92:F8:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3DC68663B2311EEB6988B2B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:9c:51:5a:59:ce:6e:32:bd:65:48:66:ae:bf:a3:b7:cb:6c:
ad:94:8d:7f:89:59:d1:85:71:6b:88:86:16:8b:a5:84:23:39:
9e:e6:53:5e:29:86:1b:af:fc:66:50:f3:b8:15:01:ad:c3:57:
fd:65:7d:9e:a3:e3:4f:a0:69:0a:56:c0:71:a8:66:22:2a:3f:
f5:98:0d:79:6a:79:a0:bd:ff:68:75:08:3c:16:7b:8a:78:31:
6c:50:e8:29:e6:36:83:d9:3a:d3:77:24:f0:73:a5:14:b1:e9:
c2:03:a2:12:34:1d:b7:e9:7a:f6:09:53:c4:2c:3a:4d:f6:e9:
a7:99:78:85:16:2f:f6:a3:78:ca:5b:1a:3d:50:d3:61:dd:1f:
5a:15:2e:8c:00:dc:3f:3c:0b:38:9a:b8:fb:5e:74:5f:f4:1f:
5f:44:4d:e1:ba:d1:70:f6:45:ea:b1:a5:56:7f:7c:30:af:6d:
e4:88:ea:70:a7:29:46:5f:13:61:95:6b:e8:5f:42:b8:74:cf:
68:a1:a8:5c:0c:73:03:68:5a:4e:04:02:7f:9e:eb:b5:9c:d4:
00:a2:b7:6d:6a:6d:28:55:49:2e:bd:1c:9d:7b:13:28:ac:5e:
15:4c:0e:ec:21:9f:0e:3c:ad:3e:23:e1:66:09:34:99:5b:49:
ea:4a:7c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:59 2024 by rpki-client on console-ams.rpki-client.org