Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2C824D6277D11EEB2DEB6114AD9E6FC.roa
File: F2C824D6277D11EEB2DEB6114AD9E6FC.roa (raw, json)
Hash identifier: Sqq5ts62Omv3QoZuVciBaADx+lIldHQqiyONcqRKqNA=
Subject key identifier: 4C:15:BF:BA:51:AC:74:46:75:D7:2B:20:15:8C:24:30:48:46:97:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 31A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2C824D6277D11EEB2DEB6114AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:20:39 +0000
ROA not before: Fri 21 Jul 2023 04:20:36 +0000
ROA not after: Thu 13 Jun 2024 04:20:36 +0000
asID: 22773
IP address blocks: 156.237.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12711 (0x31a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 04:20:36 2023 GMT
Not After : Jun 13 04:20:36 2024 GMT
Subject: CN=64ba0797-f89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:5d:16:65:25:c2:ff:29:50:09:02:a6:bf:
2e:d4:a4:05:29:ea:ad:2d:60:01:d8:3d:03:8b:a6:
ea:2a:08:33:cf:84:f5:f5:88:65:05:0e:d5:9f:1e:
d1:8b:e9:8f:17:27:7c:d2:5d:c1:67:ab:00:72:6f:
0b:fc:a0:7f:07:98:01:a7:58:6e:32:18:f1:b0:5c:
83:60:0e:42:bd:fe:3a:d5:4b:88:19:0f:c4:06:bc:
53:bc:ed:3e:bc:8d:55:d6:ec:5f:0f:32:ce:11:5b:
a1:fe:46:35:b3:50:7f:3a:1e:a9:68:cc:73:a3:20:
a9:53:6b:ac:5b:c3:97:d8:46:ea:4a:b2:fc:30:00:
4c:38:3d:48:82:d2:f0:c6:30:e9:27:27:21:92:3d:
f7:f9:d3:43:82:a9:11:f0:93:e6:a8:ca:20:39:66:
ce:54:07:8f:fc:e9:c7:fe:1e:6f:7f:a8:df:cd:ec:
1f:65:c6:65:86:4d:a2:99:38:76:cd:79:99:12:e9:
16:9d:14:06:68:bd:c1:04:0c:06:e2:86:5d:2f:e4:
cb:bb:6f:b0:e1:b5:d3:95:c7:ca:42:bf:b8:52:82:
6b:d6:04:d4:49:3e:d5:68:08:81:d8:f7:4a:99:c4:
3b:76:93:4b:54:33:28:59:30:cd:7e:c7:23:4e:c2:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:BF:BA:51:AC:74:46:75:D7:2B:20:15:8C:24:30:48:46:97:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2C824D6277D11EEB2DEB6114AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.16.0/21
Signature Algorithm: sha256WithRSAEncryption
72:45:30:7c:b0:04:9f:a5:bf:9e:44:c9:4d:5b:37:05:81:16:
a0:47:1d:53:8e:8f:17:0c:90:8a:25:8e:63:d4:b2:10:90:2b:
1d:ad:43:0a:c0:5e:94:76:67:07:23:0c:a4:07:41:17:0d:ec:
a9:88:fe:15:33:b5:21:23:43:36:86:e2:ed:24:4a:3f:8c:dd:
d5:5c:a7:17:40:c1:e8:e8:1a:f1:21:a0:10:28:09:d1:e9:7b:
c6:28:54:64:d9:16:b1:eb:24:8f:ca:33:fd:fc:9b:ba:23:9b:
68:fa:38:3a:50:8b:38:f6:3f:f6:c9:07:31:e2:59:6f:b5:60:
e6:6e:72:d9:ed:4d:82:4c:6b:70:a0:49:5f:a6:e8:23:33:86:
9f:19:c7:1f:12:c7:77:3b:a6:f3:2f:b2:d1:ba:61:0c:40:4a:
94:54:bc:a4:9d:00:16:85:46:5e:5a:d7:db:c7:ae:78:ed:66:
f4:f0:e5:50:af:23:c6:88:c3:86:3a:24:7a:9d:da:e1:b4:94:
5f:63:55:d9:c0:40:68:94:e5:6a:cb:94:c9:ef:01:e4:c6:ed:
24:d6:53:99:c0:0a:83:24:82:04:2c:56:45:a2:b6:64:ff:60:
1c:78:1a:a3:95:11:fe:64:f8:ad:29:e5:f1:5a:68:ad:f8:1c:
59:cc:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:55 2024 by rpki-client on console-fra.rpki-client.org