Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8E6710038711EFBDAB5E2C017001B1.roa
File: DD8E6710038711EFBDAB5E2C017001B1.roa (raw, json)
Hash identifier: B4FmMVtktdPj9I3Zry68XJBw1DfMJ54MdYyPwWlhmL4=
Subject key identifier: 61:F7:33:E9:99:A7:AC:E4:DB:F3:34:79:62:73:BE:A7:82:49:5B:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 85B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8E6710038711EFBDAB5E2C017001B1.roa
Signing time: Fri 26 Apr 2024 04:45:55 +0000
ROA not before: Fri 26 Apr 2024 04:45:51 +0000
ROA not after: Mon 03 Jun 2024 04:45:51 +0000
asID: 135097
IP address blocks: 156.241.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34230 (0x85b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 04:45:51 2024 GMT
Not After : Jun 3 04:45:51 2024 GMT
Subject: CN=662b3182-8fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:5f:a6:bd:1a:88:6d:45:8b:bd:bc:aa:bd:
e2:1f:13:2b:08:ab:de:86:9f:b3:76:49:ba:ef:0f:
ed:a6:20:35:60:4e:9c:13:e5:67:98:52:c1:af:02:
05:3b:96:32:aa:e1:7b:29:32:43:ee:f8:17:83:26:
b5:38:87:46:b2:0e:e8:7f:e1:fe:75:b0:a7:39:ca:
3b:eb:f7:70:ed:c2:00:b0:08:66:95:5d:9e:23:53:
20:f0:bb:52:01:ca:15:32:17:17:f2:a5:65:8a:0f:
8c:da:4b:c8:97:73:ac:e5:0b:34:a8:ef:7c:27:64:
fe:6b:80:81:54:f6:14:31:4e:6e:d0:4f:75:42:93:
5e:91:15:12:8a:08:95:bd:f1:32:0c:ca:ee:c8:a8:
3e:c1:28:63:b0:2b:b8:97:89:57:e2:d2:d9:c9:6f:
17:7f:5e:e5:b6:15:ad:ee:52:e7:5f:df:7a:4a:e0:
5a:b5:d6:63:88:2b:cb:f2:3f:89:3e:79:4c:b1:72:
12:dc:a5:ad:9d:49:3a:f0:2b:bf:7e:76:c2:b1:92:
f8:95:9b:a6:4e:bb:a6:30:55:a0:2e:38:72:99:d8:
3f:78:40:8e:72:7f:a8:8a:5a:06:09:12:ff:f2:33:
2c:3b:da:02:87:b5:9c:ea:bc:e5:65:45:f8:ea:c8:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F7:33:E9:99:A7:AC:E4:DB:F3:34:79:62:73:BE:A7:82:49:5B:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8E6710038711EFBDAB5E2C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6e:9f:57:f5:1f:15:da:1c:9b:82:dd:d1:b5:ee:91:8e:82:cf:
58:9b:22:f9:ce:21:8b:bc:78:ad:f6:e7:40:65:ac:fc:93:b2:
94:a4:75:5d:45:af:e6:5a:bd:d1:d3:df:38:f0:ad:63:3e:fd:
e0:85:6d:52:06:16:03:20:89:9c:8e:ed:ec:2c:c3:25:16:0a:
62:94:c5:c3:d1:be:33:1d:0e:1b:70:d7:88:f7:b2:12:97:ea:
32:0d:4e:9d:78:2d:30:7a:ff:71:e7:81:5b:7e:09:1d:5c:75:
75:30:da:6f:3d:0a:8a:62:07:6d:8a:6f:53:72:49:e6:5e:f0:
2d:dd:57:aa:0b:24:ff:04:13:26:44:5c:8c:c9:fb:89:6c:63:
41:b6:07:89:3f:88:88:d5:9f:f7:98:55:f7:49:06:5c:07:59:
8f:27:06:3b:17:49:2a:e2:77:74:14:44:cd:d6:f9:bd:4e:59:
76:19:76:48:18:c0:ed:23:5a:bb:1d:b2:49:7f:09:db:1d:e9:
b6:93:84:87:de:ec:c8:b9:70:cb:59:ec:47:b7:39:54:7d:c1:
15:21:8e:ef:7d:71:97:91:26:ea:b6:e2:e5:c4:19:40:de:1e:
78:b2:1b:2e:12:84:84:a3:e3:d3:78:4f:fb:29:e9:b0:0d:cc:
42:a4:ea:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:59 2024 by rpki-client on console-ams.rpki-client.org