Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEF33776585011EEA1D08C594AD9E6FC.roa
File: DEF33776585011EEA1D08C594AD9E6FC.roa (raw, json)
Hash identifier: UCefYToFHOAR15/HcD5pc2sZ+xUz6CHJG0fm5V5J5DQ=
Subject key identifier: 68:64:EB:A1:AB:F7:7B:CE:3E:2D:B3:98:CE:0F:42:6A:0D:2E:7E:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3AB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEF33776585011EEA1D08C594AD9E6FC.roa
Signing time: Thu 21 Sep 2023 07:31:26 +0000
ROA not before: Thu 21 Sep 2023 07:31:22 +0000
ROA not after: Fri 20 Sep 2024 07:31:22 +0000
asID: 16437
IP address blocks: 156.236.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15032 (0x3ab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 21 07:31:22 2023 GMT
Not After : Sep 20 07:31:22 2024 GMT
Subject: CN=650bf14d-b6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:5d:96:86:af:76:e4:36:70:e5:08:2c:02:
4c:0a:e2:66:88:d2:33:30:16:3e:81:c5:67:1e:58:
32:68:7f:b6:5b:bd:97:ce:11:06:4b:b1:94:53:76:
e5:35:2b:e2:6f:46:8b:09:d7:da:ac:ea:f3:30:1f:
9b:3a:c7:57:25:50:2d:c4:55:b9:01:0a:b0:93:6e:
82:62:86:b7:23:78:7a:f9:e7:d5:11:e7:85:0e:df:
26:c9:4c:32:96:3e:5d:1b:04:9a:83:ef:72:14:b7:
45:72:b2:2a:1b:3b:d8:ac:1a:c2:17:c8:58:5e:01:
7d:55:fd:7c:ea:39:e0:0c:c4:c1:e6:aa:2c:be:30:
f6:25:41:a9:bf:76:e7:b9:14:fb:98:0e:d7:22:13:
79:7c:c0:0b:00:84:95:66:aa:16:ab:6b:ae:e7:29:
15:29:00:8c:c1:76:ca:cd:55:91:4a:12:3c:13:a2:
4a:8d:17:ab:3c:5b:b8:84:9a:e4:8d:60:a8:f2:67:
10:6d:74:fa:96:f2:5c:1a:2d:ad:a3:98:01:4a:ac:
85:fd:6a:11:51:84:77:c7:ce:30:e4:ed:be:f7:f0:
d3:45:c4:c1:12:3d:a6:6a:79:1a:a4:2f:94:57:0c:
f4:32:de:1e:d2:0c:50:fc:8a:c6:30:cd:ab:7a:67:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:64:EB:A1:AB:F7:7B:CE:3E:2D:B3:98:CE:0F:42:6A:0D:2E:7E:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEF33776585011EEA1D08C594AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.80.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:3c:68:62:a5:ac:b4:44:60:15:bc:f8:cc:79:78:3d:05:1c:
b3:e3:66:6d:fb:83:ab:43:e7:d9:29:f6:42:e3:1c:3b:c5:dd:
65:16:a2:b0:cd:a9:ee:7c:23:3d:e2:46:fa:42:6a:b1:af:de:
15:28:d8:f4:a8:41:63:a7:e4:9e:65:b9:4b:75:01:37:fe:ac:
17:ef:b8:a7:9d:54:bf:a9:c9:09:52:0a:3d:25:73:7b:d9:c7:
53:35:79:e8:8a:66:b7:60:8c:bd:c3:8e:1d:8e:a1:ed:d5:48:
cd:95:24:7d:42:35:a7:8a:07:1b:63:90:c0:43:8e:7b:08:49:
b0:ff:b9:4b:27:03:4c:41:7c:fd:8f:66:83:4f:0b:f9:6b:7b:
fb:10:1a:da:75:3c:5c:a2:08:32:7f:17:72:32:1b:37:28:35:
da:47:32:d1:d5:05:ff:2a:9f:ea:69:0f:bc:c9:23:1d:cd:db:
f4:cc:46:70:3b:96:8e:51:7f:1b:94:85:87:d1:91:c3:1a:be:
e0:62:38:98:a1:b9:09:02:1e:e3:ef:c5:7a:20:65:c3:23:69:
dd:f2:10:fe:a6:58:c8:99:4a:fc:8e:c4:f8:b3:25:74:d9:25:
b6:fb:53:25:bd:f7:ee:46:81:2e:d1:b5:29:bd:b9:89:47:47:
2a:0b:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:18 2024 by rpki-client on console-fra.rpki-client.org