Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFC04978226211EE979F5D634AD9E6FC.roa
File: EFC04978226211EE979F5D634AD9E6FC.roa (raw, json)
Hash identifier: AIBprsYfqgfAzWqiFeI2hKfPIbj4ohhgKrDAGmf7uJc=
Subject key identifier: 88:E6:41:10:D8:66:A5:9A:D9:61:77:B9:04:1B:BE:47:03:32:E1:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3092
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFC04978226211EE979F5D634AD9E6FC.roa
Signing time: Fri 14 Jul 2023 16:24:42 +0000
ROA not before: Sat 15 Jul 2023 16:24:39 +0000
ROA not after: Fri 12 Jul 2024 16:24:39 +0000
asID: 209242
IP address blocks: 156.229.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12434 (0x3092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 16:24:39 2023 GMT
Not After : Jul 12 16:24:39 2024 GMT
Subject: CN=64b176ca-ccff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:f0:5f:4a:8e:b8:0c:14:7b:16:4c:06:5a:
f4:ae:96:99:a2:90:81:34:36:25:3a:49:7a:c3:49:
2b:be:40:f7:85:ff:03:10:dc:8f:e0:84:c4:a3:7f:
48:92:60:f9:de:d3:6f:a3:b8:6b:f1:20:1f:3e:02:
e4:64:0c:7d:fc:0a:05:b6:08:c5:dc:e9:57:07:0b:
b3:f8:01:13:7c:7d:6e:61:c2:cd:5b:1b:97:f1:13:
0e:25:c1:e6:8b:98:f8:4b:0b:19:bf:f5:0e:88:14:
cb:0a:c5:39:06:38:b4:4c:09:ce:61:61:55:08:aa:
fd:59:13:71:85:35:5e:c0:7f:e8:88:80:f0:5a:b6:
ee:5e:51:11:a0:9d:ff:1b:21:fc:73:d5:aa:ce:0d:
af:7e:b0:71:c9:43:61:dc:7c:b8:9f:78:00:e0:4c:
a2:39:ea:26:49:01:97:00:b7:ed:89:cc:d8:c2:de:
d5:76:fd:2f:08:61:37:d4:be:2e:5f:81:ba:93:2c:
72:d9:4f:ea:07:4b:2e:0c:bf:3c:6e:f9:ed:84:c8:
98:d0:df:89:cf:9d:4e:f8:f5:82:12:a2:ce:77:a9:
48:bb:18:6b:1e:b2:e5:01:83:6e:fc:f0:56:ee:b5:
91:f8:61:84:9d:3d:c1:0f:eb:b1:e6:c4:23:b8:c2:
4b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E6:41:10:D8:66:A5:9A:D9:61:77:B9:04:1B:BE:47:03:32:E1:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFC04978226211EE979F5D634AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.48.0/24
Signature Algorithm: sha256WithRSAEncryption
33:7d:8f:5e:79:40:96:72:c2:07:7e:31:2e:d1:a4:ff:8b:a8:
18:8c:c4:77:09:b9:ec:2b:f3:44:e7:22:b7:e7:32:56:4d:ae:
b1:26:a5:12:fa:1c:5f:27:98:40:18:c4:78:b3:83:d5:15:b0:
ce:ee:bf:9d:17:c8:44:28:bf:60:e8:2b:99:d8:0c:b0:81:04:
9c:dd:95:1e:bc:92:ca:1f:9a:7f:48:e4:23:d8:9d:a7:da:72:
ba:64:6b:dd:51:36:a1:96:d7:6a:a5:b7:d6:5f:2e:c8:40:de:
06:d2:74:d4:e7:9c:88:a5:1d:02:1d:cb:1c:9d:4c:2b:48:f1:
67:aa:02:b6:1b:f4:dc:fe:17:1e:b0:83:03:ca:82:af:fb:86:
07:8e:69:dd:6b:49:ae:f3:5a:d5:72:8f:76:fa:2a:9a:a7:30:
0f:81:13:aa:30:ed:31:53:4e:8e:d0:c9:74:70:de:bb:e3:af:
67:36:85:8d:1d:82:26:96:86:59:3d:74:9e:99:8b:dd:ae:f1:
cb:6e:9b:ff:80:1a:43:29:3b:43:e7:e3:3a:c7:88:2e:0f:1b:
6b:27:a0:af:6b:55:cc:17:cf:96:71:86:e8:6e:5c:26:23:12:
c3:58:d4:73:5c:ec:32:39:cc:c5:6b:f6:b6:6b:06:5d:e4:fd:
94:e7:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:05:00 2024 by rpki-client on console-ams.rpki-client.org