Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE503FD8018511EFA05A6A46017001B1.roa
File: DE503FD8018511EFA05A6A46017001B1.roa (raw, json)
Hash identifier: UWJUucGuAbTuudYm/gkmmbIXf9NpRvRia06sDhlb4NY=
Subject key identifier: 69:ED:29:38:38:24:C2:2A:B8:76:FE:94:B7:AF:6A:13:21:2B:1F:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 846F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE503FD8018511EFA05A6A46017001B1.roa
Signing time: Tue 23 Apr 2024 15:26:34 +0000
ROA not before: Tue 23 Apr 2024 15:26:31 +0000
ROA not after: Mon 03 Jun 2024 15:26:31 +0000
asID: 142286
IP address blocks: 156.225.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33903 (0x846f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:26:31 2024 GMT
Not After : Jun 3 15:26:31 2024 GMT
Subject: CN=6627d32a-1f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c1:df:55:e1:da:c2:93:01:9a:d2:c6:ad:f8:
82:81:8c:de:ad:6c:e5:5f:55:78:64:92:48:45:76:
6f:77:1d:5a:2c:de:d6:6c:c4:44:09:da:4d:1a:d0:
c8:62:87:7b:e7:3f:43:ef:7a:97:6a:6e:f9:d3:c8:
6a:c5:3c:b8:65:c1:f4:0c:56:94:a4:c9:2d:ee:2f:
6f:42:b7:69:a8:6e:24:d5:5d:34:81:5a:df:e2:fb:
c6:96:14:bb:1b:95:40:c2:28:8d:11:58:39:46:64:
47:08:87:99:65:ec:df:1d:69:a5:a9:6f:5f:2a:40:
ed:81:f0:48:eb:aa:d6:22:59:b4:60:f1:00:92:32:
36:a5:e9:c3:2c:ad:6d:ae:32:e9:d8:31:9f:84:29:
63:04:9b:71:c2:c4:fa:d8:1d:dd:fa:30:50:69:d5:
ef:4c:ec:2d:02:d5:84:94:ef:47:81:f1:19:9d:3b:
c1:72:f1:05:ef:2c:da:ac:4d:2e:45:90:71:51:0f:
cd:00:49:d3:ce:1a:ea:15:93:33:b2:ee:c0:e5:1f:
92:3f:ce:f0:ab:09:58:8a:d1:ac:29:60:26:27:ca:
c1:38:c1:92:82:2d:ad:99:bf:31:a1:6c:1e:c8:27:
85:a6:9c:a9:a8:3b:e5:09:bf:7c:8a:fd:96:d8:e1:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:ED:29:38:38:24:C2:2A:B8:76:FE:94:B7:AF:6A:13:21:2B:1F:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE503FD8018511EFA05A6A46017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.144.0/20
Signature Algorithm: sha256WithRSAEncryption
39:c9:c7:3d:ce:a7:6f:6a:51:c2:dd:1e:0d:c5:8a:97:58:64:
9c:59:43:2f:37:9a:39:0c:d1:0f:89:09:e3:8a:33:51:dc:60:
a4:c7:6a:53:05:27:4c:18:c8:90:bb:45:df:d8:db:3e:e7:90:
85:c2:a6:7f:7b:a4:6d:4d:65:b8:9e:09:79:2a:55:2a:30:7f:
19:21:6c:c3:59:7a:d4:34:58:f8:bb:bd:e3:d9:6d:13:a1:23:
ba:3e:3e:f3:d5:76:b7:83:02:36:4b:b8:7e:86:39:2b:07:35:
71:fc:0a:b1:9a:d3:aa:ee:87:ff:55:d2:89:87:2e:ce:37:ef:
ab:99:27:e9:81:59:59:09:72:d4:82:84:91:ba:87:77:cb:69:
2e:d8:9d:db:52:da:2c:d5:76:36:2e:98:15:0d:1e:91:cf:41:
f2:74:be:5d:30:b9:8c:04:e4:19:6d:00:af:0b:1d:f4:85:42:
03:31:1e:d1:99:f9:85:af:35:f0:31:70:98:ac:fd:13:c6:84:
6a:71:53:32:69:2a:59:d9:b0:37:59:00:d1:de:b6:26:b6:70:
a9:6d:9c:ff:ee:e4:54:0f:09:0e:11:b3:08:cf:a6:8f:8c:0e:
14:18:6c:14:19:02:53:1f:ac:c6:68:2f:df:1a:4e:67:b6:5a:
a7:4d:89:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:59 2024 by rpki-client on console-ams.rpki-client.org