Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F199A3AC007E11EFB0921C6D017001B1.roa
File: F199A3AC007E11EFB0921C6D017001B1.roa (raw, json)
Hash identifier: iUIhMxOGOSY1yh88XozDFRpdc3Bt1CoNdOZGnJiT21k=
Subject key identifier: 93:B0:30:CD:FE:AE:9D:94:F5:D9:BA:BE:3B:4A:65:B1:1C:53:77:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 83C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F199A3AC007E11EFB0921C6D017001B1.roa
Signing time: Mon 22 Apr 2024 08:04:29 +0000
ROA not before: Mon 22 Apr 2024 08:04:26 +0000
ROA not after: Mon 20 May 2024 08:04:26 +0000
asID: 140869
IP address blocks: 156.225.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33731 (0x83c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 08:04:26 2024 GMT
Not After : May 20 08:04:26 2024 GMT
Subject: CN=66261a0d-7e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:53:55:7c:f5:23:90:37:d1:94:d2:b9:a7:
97:5c:3d:22:49:91:31:fb:5e:2b:e2:33:a9:db:7c:
d7:d9:28:62:0c:6f:d1:bd:c3:2b:4a:62:4f:36:dc:
eb:6a:ce:f8:12:f3:8c:f7:e8:f6:b9:e1:d8:ed:63:
a0:bc:02:9c:f8:9a:21:e4:95:a1:f0:7e:3a:0c:8b:
e1:bf:47:41:a2:15:33:14:da:32:02:6c:01:7c:50:
8d:ba:a9:fd:0c:46:11:4b:81:e6:7a:16:e3:eb:a2:
3f:fb:bf:e1:fd:ab:9f:a8:59:94:b3:36:f5:14:a9:
99:81:91:80:23:ff:02:64:8d:ae:8c:8a:dc:44:99:
78:df:67:b0:30:75:4d:cc:b3:cc:4c:da:20:a6:3d:
3d:b1:c9:96:11:4e:21:4e:07:37:3f:42:fe:7a:3c:
28:0e:d7:71:27:aa:1d:15:01:aa:c1:9a:af:9d:37:
60:f6:8d:01:d7:18:c4:c1:f8:48:b9:93:46:d6:50:
c1:51:45:77:83:0c:f9:5a:76:ff:2f:5f:4f:6e:5b:
38:2e:7b:d7:06:51:29:74:cf:74:34:9f:8a:bd:62:
66:87:7e:b2:3a:7e:3f:7d:e0:8a:e2:68:06:84:7d:
56:ec:6f:4e:09:fa:00:8d:c2:83:09:be:ae:ec:8f:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:30:CD:FE:AE:9D:94:F5:D9:BA:BE:3B:4A:65:B1:1C:53:77:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F199A3AC007E11EFB0921C6D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:11:e2:fe:2b:60:5f:e2:76:51:23:76:b7:c7:66:33:1e:de:
c9:36:28:86:95:92:37:37:cf:f5:04:35:be:16:dc:dd:f9:80:
bf:65:46:ba:aa:61:0b:6d:e1:94:7c:04:54:f8:65:a7:fe:ab:
32:a9:84:0d:8d:4d:38:95:4f:34:67:2b:b3:c6:12:cc:f5:6a:
82:cf:b9:a1:99:76:d9:7c:6e:e7:eb:bd:59:0f:f4:39:03:30:
1b:d1:84:97:16:b0:0f:3c:bd:b6:97:81:54:ff:00:87:ea:b6:
b8:09:6b:b8:64:48:f5:29:c6:18:43:db:d8:99:2d:c7:a0:65:
f5:b1:f7:84:b9:17:dc:f0:0c:cd:c1:33:27:87:7f:5c:62:41:
e4:69:97:e3:8a:82:01:f7:a1:09:b4:b9:33:32:75:b2:0d:58:
bc:b8:66:5b:2a:e8:39:f8:ca:3b:87:07:51:85:13:2f:10:ea:
8e:fc:50:07:4e:74:d9:50:31:48:70:7a:a7:44:ff:0f:ac:a5:
87:f5:8f:d4:d9:0c:3b:67:6b:ea:af:6c:4c:95:20:21:b5:f8:
52:33:d2:bf:5c:18:e0:6d:c2:7a:ef:da:76:a6:95:8b:b5:72:
96:c2:51:fc:8b:59:3b:4c:3f:bd:8e:2b:43:34:c4:49:ee:00:
2f:65:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:14 2024 by rpki-client on console-ams.rpki-client.org