Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF7683E0FD2311EEAC328F0A017001B1.roa
File: FF7683E0FD2311EEAC328F0A017001B1.roa (raw, json)
Hash identifier: QWMa5MnjWLu+pCwreVUwN97XVVAv0qce10NcslmtKu8=
Subject key identifier: BA:E8:7C:0A:44:FC:EB:5A:11:D9:E4:96:78:A3:EB:AF:FB:57:5E:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF7683E0FD2311EEAC328F0A017001B1.roa
Signing time: Thu 18 Apr 2024 01:35:56 +0000
ROA not before: Thu 18 Apr 2024 01:35:51 +0000
ROA not after: Mon 31 Mar 2025 01:35:51 +0000
asID: 211392
IP address blocks: 156.239.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33511 (0x82e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 01:35:51 2024 GMT
Not After : Mar 31 01:35:51 2025 GMT
Subject: CN=662078fc-ca4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:b5:2c:0b:b4:5b:e5:9a:72:99:c7:9b:5a:
d8:bb:d7:b6:2e:1f:66:97:de:a3:bf:0d:2d:1d:1d:
e4:e9:48:29:44:1e:03:a8:2a:fb:d0:7d:c2:54:4c:
74:1a:ee:f7:82:07:20:9d:8a:72:21:14:28:f8:35:
51:1c:b1:6e:0e:46:45:39:da:03:eb:b5:3a:cd:0e:
63:ed:39:0a:97:26:93:0c:72:60:61:84:f3:ea:83:
3b:99:99:2c:d3:d1:b9:bc:4c:dc:19:ef:b1:a5:95:
aa:18:16:a3:b4:03:8a:3a:82:2a:c5:08:3e:df:20:
20:94:69:4f:05:cf:d1:f5:58:21:6f:32:19:20:87:
1f:ce:ec:24:eb:74:9f:5c:3a:98:7a:ff:7c:b0:dd:
55:7e:8f:d9:ee:a6:60:7d:4d:01:cd:09:f1:bb:d5:
2e:f7:9d:c5:a5:47:51:e8:0c:14:74:2a:a1:62:01:
00:77:2f:f9:ed:53:fa:97:3f:2e:79:ef:d9:38:d9:
ae:e6:ed:12:79:31:b1:0d:da:76:3d:8d:c5:21:45:
a6:c2:d2:65:d7:d7:86:05:83:6a:1e:79:90:ea:f5:
b6:13:bd:cd:83:c2:c2:0c:f7:43:dd:1a:c2:5f:fd:
d1:fb:a7:4b:e4:93:a4:53:24:6c:1b:82:53:1d:29:
c7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E8:7C:0A:44:FC:EB:5A:11:D9:E4:96:78:A3:EB:AF:FB:57:5E:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF7683E0FD2311EEAC328F0A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.152.0/24
Signature Algorithm: sha256WithRSAEncryption
84:28:3d:52:1d:d8:e3:de:bb:3d:e0:06:73:0a:4e:2b:0f:df:
7b:0a:a8:40:73:03:d4:96:f6:8c:7b:f0:0e:dd:c6:c1:e9:1f:
bf:7c:fc:18:d1:9b:93:dc:1a:47:c8:44:e1:8c:d9:33:e4:05:
cd:7b:50:1b:ad:49:fa:84:ba:34:0a:b4:df:d6:64:71:31:48:
f9:04:04:e0:4a:4d:94:0b:a3:86:19:50:f0:c5:62:53:74:03:
82:29:1f:57:19:08:00:1c:f5:c2:26:b9:b5:3a:46:9b:7c:03:
71:d3:02:39:e8:8e:58:30:ec:ab:41:16:fe:d8:28:d4:88:6e:
35:32:29:cf:25:0d:b7:a8:88:cc:58:a9:bc:35:5b:d7:8e:06:
f6:ae:90:a9:b0:53:3c:f7:09:ff:77:e6:59:1b:53:e0:d9:eb:
c8:66:49:62:07:3c:4f:58:ef:98:82:90:62:14:aa:27:5b:c1:
d9:54:19:02:24:a2:54:87:08:37:0f:dd:75:0c:d6:c6:d7:1f:
cd:e8:74:51:89:a9:e7:9a:78:86:7d:c0:9f:da:fb:6d:86:67:
e8:5d:57:c0:45:24:46:b3:7c:1a:66:41:ca:21:ad:90:72:96:
2b:66:89:37:f5:7e:e8:79:9b:6a:cd:e5:fb:0f:ef:0e:77:d8:
43:d4:43:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:05:01 2024 by rpki-client on console-ams.rpki-client.org