Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8998980FBAE11EEBFAEA638017001B1.roa
File: F8998980FBAE11EEBFAEA638017001B1.roa (raw, json)
Hash identifier: h1ED6OReVEc/1p7AruhpilquUIzgyqktJO8F53tQLxM=
Subject key identifier: 18:C2:FB:A5:73:53:06:83:6E:99:96:71:02:D8:D8:CB:A1:E9:62:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8998980FBAE11EEBFAEA638017001B1.roa
Signing time: Tue 16 Apr 2024 05:05:41 +0000
ROA not before: Tue 16 Apr 2024 05:05:38 +0000
ROA not after: Sat 01 Jun 2024 05:05:38 +0000
asID: 149440
IP address blocks: 156.227.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33495 (0x82d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 05:05:38 2024 GMT
Not After : Jun 1 05:05:38 2024 GMT
Subject: CN=661e0725-0d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:5f:0c:af:1a:28:4a:30:b3:c9:78:1a:72:
97:c1:eb:00:03:6f:17:de:94:9a:58:04:05:da:59:
e8:22:7a:21:c0:5f:3d:b4:2b:d4:ed:55:b0:67:c3:
06:5d:c7:cd:4e:f4:61:33:7b:3f:4b:d9:85:bb:2b:
9e:c8:e8:bc:af:74:cf:bc:8a:70:6e:93:ca:57:c7:
53:21:8b:aa:3a:7c:a9:bd:69:b2:c6:e4:7c:16:74:
95:72:b3:4f:ce:84:17:22:5c:d6:49:88:8c:cf:82:
7e:d3:df:f1:22:07:05:3a:d1:4c:5b:b4:06:17:db:
2f:32:a4:94:04:a3:8f:0f:73:65:a3:91:d3:e3:ad:
88:4a:18:0b:ed:88:bf:90:49:8c:aa:b9:e9:2b:ec:
b5:2b:34:2e:96:a1:57:22:f6:5d:3a:c8:19:78:a3:
f6:2c:38:8b:a3:a2:e3:b7:44:ff:69:71:a7:d1:b9:
11:a0:40:2b:8c:6d:11:d8:07:38:c5:c9:8d:52:cb:
c9:c5:ed:35:8d:2d:1b:6d:0b:01:5c:31:c1:25:14:
63:bb:d8:c0:29:bb:7e:d2:69:8a:b0:d9:ce:3b:57:
59:e1:9a:d1:bc:cb:9a:67:97:ef:8c:33:74:7c:b0:
65:e3:f5:ea:1c:98:e1:a8:cb:c7:33:80:7f:27:58:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C2:FB:A5:73:53:06:83:6E:99:96:71:02:D8:D8:CB:A1:E9:62:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8998980FBAE11EEBFAEA638017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:07:d2:3f:f3:00:16:76:54:50:6a:ba:31:fd:2d:ca:ff:04:
b5:1f:a4:0a:1d:84:27:d0:6a:a2:32:fe:ad:43:41:fc:de:f9:
19:b3:41:9d:ff:c7:f8:0b:08:49:8d:8c:17:ab:83:ed:ac:80:
74:9c:46:11:82:88:c8:4a:56:ec:8e:82:2b:26:2f:d5:5b:9f:
db:3c:ea:de:a6:eb:6f:ea:8e:75:e9:e5:c1:3c:39:d9:fb:74:
60:cb:ad:c3:95:82:11:c8:4d:9b:bf:1e:5a:1d:6c:fc:04:90:
4a:e9:a5:e1:2b:eb:43:f6:34:47:10:53:a3:e4:b9:fd:4e:f6:
bd:75:e6:ce:be:6b:58:27:1e:10:a0:b1:69:12:cf:8e:2f:6f:
56:86:ad:c3:7e:28:20:eb:ec:28:02:03:cb:d4:9f:63:fd:82:
59:78:a8:6e:10:b3:4d:da:a4:7f:96:e6:21:49:cd:69:c4:45:
4a:2e:77:ca:47:1d:32:19:54:2f:86:2b:5e:9a:b6:6f:44:c7:
7e:38:4f:fd:91:8c:e1:e1:a1:46:ba:55:30:82:96:69:5f:bc:
7b:0b:d5:b4:77:f3:94:61:a2:b6:dd:25:df:37:e3:80:a0:f7:
a3:16:60:34:67:9c:16:4a:ff:89:c9:66:bf:f1:95:74:2d:0b:
0d:35:ea:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:05:01 2024 by rpki-client on console-ams.rpki-client.org