Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5696FDC018211EF9A45DD2E017001B1.roa
File: D5696FDC018211EF9A45DD2E017001B1.roa (raw, json)
Hash identifier: JjF8bcAWPck+NaeZfIpOjLxEgzlaZ1cRaS4iuGt9GgM=
Subject key identifier: F9:93:B3:C0:A5:D7:0F:77:47:66:67:D8:3B:42:14:59:62:85:65:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 844B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5696FDC018211EF9A45DD2E017001B1.roa
Signing time: Tue 23 Apr 2024 15:04:51 +0000
ROA not before: Tue 23 Apr 2024 15:04:48 +0000
ROA not after: Sat 25 May 2024 15:04:48 +0000
asID: 137547
IP address blocks: 156.245.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33867 (0x844b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:04:48 2024 GMT
Not After : May 25 15:04:48 2024 GMT
Subject: CN=6627ce13-b813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:77:f6:77:88:e8:82:96:4d:27:fe:4e:5e:
ab:48:06:49:a4:83:b0:24:07:be:d9:d9:c6:c2:a7:
61:ae:63:e2:85:d5:c4:db:31:ec:b0:5e:bc:3d:4e:
6b:41:d4:32:2a:7f:d3:8f:e2:89:8a:49:a2:6d:c5:
3e:4c:01:73:ac:5c:9c:ce:8c:09:5d:b5:77:65:1d:
fb:5e:52:5e:da:1d:9a:c7:1e:62:37:63:79:0b:c5:
ac:5c:32:6c:5b:4e:2a:bd:53:07:9f:fe:c9:1a:af:
95:65:dd:c0:35:bb:6a:13:8b:c2:81:b1:e3:62:7a:
5a:ae:42:67:5b:1f:f1:24:df:cf:1f:36:0a:63:d6:
3a:0b:61:bf:d5:d4:f7:d6:ba:7d:15:d9:51:c5:81:
20:58:85:0e:51:ce:b7:3d:f4:c2:12:c5:30:ae:b6:
5e:c5:54:78:95:92:cc:39:1a:3a:40:e4:56:f3:00:
e2:81:5d:14:5c:7b:27:f7:d5:0f:f0:6c:6b:7d:c7:
ac:0f:5f:60:6e:7e:4a:8b:74:3b:7c:71:49:e0:5e:
bc:d0:15:61:5d:17:16:29:36:34:31:d4:5d:34:a8:
80:37:b4:ae:a9:c1:6c:2f:28:96:32:c8:f8:ac:44:
4a:e0:fc:4f:67:cc:65:b1:cd:a7:e2:44:51:6c:d0:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:93:B3:C0:A5:D7:0F:77:47:66:67:D8:3B:42:14:59:62:85:65:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5696FDC018211EF9A45DD2E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
20:fe:e3:63:5d:2e:5b:95:8b:62:71:e9:eb:b9:df:b3:3f:59:
1b:e3:09:ca:c2:16:e1:12:d5:51:c0:08:d5:67:80:bb:c5:d1:
5d:1d:86:4e:42:0b:3f:27:db:07:d3:ae:b6:81:3b:ab:38:e6:
c1:49:c3:1d:cf:a1:6c:12:c4:3a:f6:dd:a3:f1:ff:a9:2a:e3:
66:40:e9:7e:b7:b6:6c:df:02:5c:83:82:37:96:79:f9:8f:02:
58:88:41:4a:c8:ba:77:fa:31:7d:d3:d4:49:87:c6:5b:78:cc:
ba:0f:24:21:72:52:44:af:e5:9b:bb:1e:e1:92:85:a3:6c:7f:
16:64:6e:4f:ec:3f:6e:de:5f:a8:95:89:3b:ea:e8:46:a7:a3:
71:43:47:a8:15:ef:8a:7f:ed:1a:e2:03:9f:be:76:71:08:70:
45:37:6b:06:a4:91:bf:a9:b8:51:d9:03:86:db:77:2b:b5:b4:
ba:ca:09:b5:fe:24:12:49:35:49:9c:6f:9c:ee:4f:86:55:84:
71:53:67:a4:c4:8c:80:9b:3f:47:fc:2b:e1:e8:50:4b:dc:7a:
83:97:46:58:7d:95:85:e0:fc:bd:8a:98:56:45:d3:48:7b:f7:
7a:7d:16:04:cc:9d:ef:e8:80:43:db:60:11:48:89:3b:bd:7e:
54:39:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:59 2024 by rpki-client on console-ams.rpki-client.org