Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6D16308539E11EE92DA145C4AD9E6FC.roa
File: D6D16308539E11EE92DA145C4AD9E6FC.roa (raw, json)
Hash identifier: 9OavRp1iiZ4rqrkXQfZgIbYG0Gsa15Ad+yMM36mW0ew=
Subject key identifier: A5:AD:B4:1D:F6:FA:EB:B3:88:00:FA:A1:D7:52:26:0B:7D:48:CB:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 396E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6D16308539E11EE92DA145C4AD9E6FC.roa
Signing time: Fri 15 Sep 2023 08:06:57 +0000
ROA not before: Fri 15 Sep 2023 08:06:54 +0000
ROA not after: Sat 08 Jun 2024 08:06:54 +0000
asID: 142403
IP address blocks: 156.236.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14702 (0x396e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 08:06:54 2023 GMT
Not After : Jun 8 08:06:54 2024 GMT
Subject: CN=650410a1-c98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:cf:a6:b1:5a:9f:c5:53:36:69:cb:fb:75:
89:a0:f6:cd:19:6b:ec:a3:eb:b0:ed:42:a5:6e:83:
08:6e:e6:76:39:11:b1:51:38:f6:98:62:05:ae:87:
3f:24:34:7f:4a:a4:b4:2c:45:97:9c:c0:2b:8c:92:
63:b6:49:61:c0:62:01:2e:53:49:90:40:45:57:87:
24:87:a3:1d:86:e8:60:ad:83:81:5b:fd:44:33:6c:
9a:a0:5a:b4:b8:df:e3:21:47:23:8f:18:09:9c:09:
95:a0:3a:e4:ef:a5:be:65:64:6d:49:bb:1f:b1:cb:
f8:65:46:7b:c9:2b:15:17:49:91:40:2d:56:d7:73:
f0:9c:bc:f7:20:e9:81:aa:11:fe:10:fb:a2:de:1c:
e0:ec:9d:9e:b4:01:cb:44:72:14:50:e2:86:2e:97:
ab:a7:c2:d7:da:46:4c:e7:a7:e1:d2:43:cb:84:f8:
6b:e5:76:af:e7:0e:8a:8a:53:ef:79:14:a4:76:ba:
7d:ed:db:c5:a9:89:8b:c6:17:8f:55:3e:e1:a5:a7:
d1:6a:83:41:a4:55:8b:6c:91:7b:88:25:d5:9d:25:
db:fd:5e:25:12:ee:0c:f9:78:e5:ce:cb:4f:6f:89:
23:34:18:b2:4a:de:4a:01:67:01:61:19:88:56:26:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AD:B4:1D:F6:FA:EB:B3:88:00:FA:A1:D7:52:26:0B:7D:48:CB:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6D16308539E11EE92DA145C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a0:c1:4c:13:a1:59:92:4f:4f:18:7f:72:08:9f:89:32:98:
bf:bd:98:d9:bd:c6:23:b3:5c:8f:0e:32:f9:d4:91:e5:f4:da:
8e:bc:96:96:a2:e8:e5:33:00:b3:78:cf:00:05:aa:b7:69:1f:
c9:b1:2f:17:7d:b4:6c:0c:83:f4:dc:1c:3f:db:32:32:13:88:
3d:8b:71:e0:6c:ff:69:5b:63:2b:b3:36:8f:68:03:f8:75:05:
e3:be:f5:87:65:00:c4:23:13:61:e5:8d:ee:c3:ff:41:fb:5a:
dc:f0:dd:f7:e4:16:31:b2:d5:95:d7:49:66:e1:31:2b:8f:0c:
44:38:83:5b:af:39:cb:f7:39:13:9f:f3:2c:3c:05:db:dc:f1:
d0:a5:fa:10:24:ca:53:2b:f3:45:48:9e:8c:76:09:f6:0d:d0:
0f:1f:2c:11:e1:e8:79:a5:dc:0f:ba:14:5c:ef:89:31:e7:45:
d0:64:18:0f:80:3b:2d:bb:ca:4c:de:bf:2d:07:51:37:b7:1f:
ff:32:51:b8:95:d4:e4:47:0a:10:d8:e6:68:78:a2:8f:02:49:
5c:7a:f4:bc:ee:c2:f6:8a:58:fa:73:bb:cb:3f:a4:96:91:54:
e1:5d:29:62:c8:b6:b3:c6:f3:19:a3:0e:7b:d9:f6:00:aa:e0:
50:eb:e0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:08 2024 by rpki-client on console-fra.rpki-client.org