Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D541472A3B2911EEB704E43D4AD9E6FC.roa
File: D541472A3B2911EEB704E43D4AD9E6FC.roa (raw, json)
Hash identifier: aBD91GJXtnrm4D7LvtRdetKO1dOPHdLU6Lti5cwp5vM=
Subject key identifier: 4B:BD:50:09:30:0E:D8:6E:AC:44:0B:65:FF:88:9A:90:68:B2:E9:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 35CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D541472A3B2911EEB704E43D4AD9E6FC.roa
Signing time: Tue 15 Aug 2023 05:08:55 +0000
ROA not before: Tue 15 Aug 2023 05:08:52 +0000
ROA not after: Mon 27 May 2024 05:08:52 +0000
asID: 140627
IP address blocks: 156.247.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13775 (0x35cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 05:08:52 2023 GMT
Not After : May 27 05:08:52 2024 GMT
Subject: CN=64db0867-e6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:51:e9:f3:cc:89:41:a7:21:87:48:78:be:
a1:e4:b8:c1:0b:1a:05:f5:bd:a4:fe:f2:3d:52:2e:
53:07:cb:b8:11:93:fb:e3:8e:ff:27:40:97:67:41:
3d:33:37:9d:dc:72:9f:87:b9:8f:c5:b0:a9:6d:46:
22:8e:fc:7a:f6:c8:50:63:9e:fd:92:6d:80:50:27:
a9:06:26:a9:39:d3:f8:59:00:18:7c:41:55:97:e3:
16:1b:6f:d8:61:a1:01:bb:b1:18:e0:62:af:58:57:
7a:b8:9a:8f:52:4c:bb:68:74:61:2d:ac:1c:78:ab:
61:73:d9:c7:8c:bd:27:e2:65:32:dd:35:44:3f:43:
4f:95:82:08:b2:8a:31:da:c8:13:4c:2e:f1:32:7b:
f6:d8:6d:a5:3e:90:20:01:c0:a0:8b:02:02:f9:d4:
eb:9b:0b:7e:18:f8:b1:7b:b7:cc:d2:a8:5f:87:92:
65:79:55:db:fc:ae:0e:71:2f:92:65:d2:db:31:9d:
56:ce:b5:e9:f8:fc:68:18:44:31:af:ef:6e:d4:66:
52:15:07:ee:e1:69:47:3c:39:7e:09:02:55:79:f5:
0e:50:29:6a:64:f2:e3:90:80:dc:8b:98:e7:91:fc:
3d:c3:8d:c6:a4:3f:c3:d3:b1:a0:e0:e8:dd:85:f5:
1e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BD:50:09:30:0E:D8:6E:AC:44:0B:65:FF:88:9A:90:68:B2:E9:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D541472A3B2911EEB704E43D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.134.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0d:52:a6:f6:bf:a4:36:27:38:a9:4c:4b:48:52:18:ca:be:
fa:99:ce:b3:f2:a1:10:3d:60:23:25:bd:e0:79:d4:e5:9c:1e:
a5:59:fa:79:f9:f7:42:82:33:b3:f1:2b:fc:9e:e7:22:64:e8:
c3:92:2b:2e:ea:4d:6f:34:b5:97:f5:4e:be:13:66:2b:56:05:
8f:c5:4c:79:f2:09:13:8b:36:47:04:3b:3d:bd:7a:9e:39:c6:
a7:60:24:15:51:3d:51:f6:b9:2d:68:2e:80:89:6e:00:e3:8a:
b5:b3:85:8a:38:f2:c7:1f:7a:39:e6:1c:d9:cd:d7:c9:b6:3b:
99:49:a8:35:db:a8:60:cb:5b:91:b1:af:4d:43:a6:18:44:25:
29:f6:fb:a7:6e:a0:57:23:ea:29:92:b7:3f:61:4a:83:a5:e3:
e9:59:a1:00:e4:ea:59:6c:6d:76:5a:5c:c3:77:f6:fc:d1:c9:
1f:63:6c:f2:dc:27:0a:3f:67:ff:d6:0d:4a:76:e3:e6:1f:12:
ae:99:e8:17:fd:9f:4d:60:df:18:f7:05:bb:2e:53:04:74:ae:
37:6f:44:b3:03:01:a4:b1:d6:3e:02:be:aa:4f:d5:1d:78:98:
4f:9e:3d:e9:ea:0e:60:b1:11:27:f9:2e:c6:9c:7f:75:35:8a:
01:49:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:17 2024 by rpki-client on console-fra.rpki-client.org