Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D525D73C689D11EE92BBE03B4AD9E6FC.roa
File: D525D73C689D11EE92BBE03B4AD9E6FC.roa (raw, json)
Hash identifier: 3znuwT/SKfPtbzeJqm5LmiFhI+3lMrmaklyh8pc/piY=
Subject key identifier: 60:11:50:41:C6:9B:C8:F5:2E:78:D2:3E:5D:84:4F:7D:43:57:6E:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3E47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D525D73C689D11EE92BBE03B4AD9E6FC.roa
Signing time: Thu 12 Oct 2023 01:22:39 +0000
ROA not before: Thu 12 Oct 2023 01:22:36 +0000
ROA not after: Sat 05 Oct 2024 01:22:36 +0000
asID: 132839
IP address blocks: 156.250.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15943 (0x3e47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 12 01:22:36 2023 GMT
Not After : Oct 5 01:22:36 2024 GMT
Subject: CN=65274a5f-a019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:08:07:fa:23:5c:0b:e4:7f:1b:ca:99:1f:
df:3e:e6:47:83:f6:a9:01:de:f4:75:ec:08:df:e9:
78:fc:66:75:39:87:8b:8d:1a:6b:c6:01:3b:c3:30:
cb:86:7c:5b:9b:fd:8c:3a:a4:1a:10:1f:fd:0e:a0:
b7:62:ed:df:cd:cb:db:9a:7a:27:a5:a9:aa:ce:b6:
75:4b:e5:15:be:13:de:a3:b2:80:55:49:d3:b5:d3:
b3:90:06:80:a6:89:7d:e8:74:f1:30:2b:d7:08:72:
06:c4:fe:63:41:80:08:2d:ba:dd:4b:7b:21:57:f0:
78:83:fc:70:cd:ff:23:83:00:98:ff:ae:68:fc:08:
f3:2a:60:7d:77:3e:76:25:28:69:b3:35:bc:de:5a:
c2:a0:d9:6b:01:c3:21:61:ef:a2:ec:c9:45:d7:1b:
9e:a9:45:21:77:ab:70:98:f8:d0:74:43:63:ec:3e:
61:7c:b0:4a:8f:78:71:4a:be:42:76:f5:56:39:c2:
6e:5b:a4:eb:cc:62:e4:77:50:0d:83:0f:4d:ab:dd:
b1:a5:35:34:28:47:d0:67:e7:1d:d2:6c:20:5d:3d:
ba:ae:e4:33:b2:19:f5:38:0d:f6:4b:d8:85:c7:55:
da:b6:b7:9c:79:e6:25:e6:7e:34:87:29:3b:df:14:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:11:50:41:C6:9B:C8:F5:2E:78:D2:3E:5D:84:4F:7D:43:57:6E:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D525D73C689D11EE92BBE03B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.208.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0a:2e:b4:9a:12:db:48:d1:63:3e:c7:67:bb:b4:22:91:74:
24:a0:e8:12:20:5c:29:db:62:2a:83:5e:c5:c2:0c:a0:d2:4b:
2c:e0:ef:14:4c:71:e0:e9:c0:72:7b:0e:ff:07:d4:02:59:de:
d9:42:a5:92:71:c8:35:48:92:df:7e:b0:1d:64:25:ce:a8:4d:
a4:45:f0:98:85:7b:0d:08:d7:94:a6:f0:1e:4f:16:0d:f4:e8:
fa:5d:7a:01:60:04:fd:52:c1:04:43:39:07:b2:a5:e1:84:13:
2f:1b:af:72:bb:82:9b:e9:55:3a:13:ab:47:b6:33:62:33:29:
06:3f:81:40:a0:e7:1e:75:99:bf:95:9f:04:a0:ac:1b:ae:70:
2d:d0:39:ca:ec:b5:41:62:70:24:48:b7:61:66:e5:4e:4d:f4:
ba:07:db:cd:58:f0:56:77:8a:ff:88:2e:11:2b:69:90:67:d8:
28:65:1b:c2:1c:9a:a9:ca:1e:4b:e6:ba:e1:5e:0b:84:ff:a0:
ae:c7:7d:ea:95:12:2c:70:dc:15:8a:42:a1:86:0f:46:de:0f:
30:ff:66:5f:19:f5:2d:79:5e:92:77:24:87:47:1b:b0:5b:08:
86:87:72:60:e0:ee:97:d2:49:be:27:c0:47:ed:cc:a1:be:6b:
17:70:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:30:10 2024 by rpki-client on console-fra.rpki-client.org