Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/F9049C56B6A811EAB7AD5330F8AEA228.roa
File: F9049C56B6A811EAB7AD5330F8AEA228.roa (raw, json)
Hash identifier: puJnHm1yKIQzNnKozYu1/czI3lgLvuYWXkZKSjpCIAg=
Subject key identifier: 14:BC:E0:CA:C0:D5:C2:90:7B:75:E5:5E:05:3C:7D:B1:35:E7:37:4C
Certificate issuer: /CN=F36A2303AR/serialNumber=AF035FC490695DAFB796F9C7375F738A3112FC3B
Certificate serial: 88
Authority key identifier: AF:03:5F:C4:90:69:5D:AF:B7:96:F9:C7:37:5F:73:8A:31:12:FC:3B
Authority info access: rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/F9049C56B6A811EAB7AD5330F8AEA228.roa
Signing time: Thu 25 Jun 2020 05:59:04 +0000
ROA not before: Thu 25 Jun 2020 05:58:58 +0000
ROA not after: Sat 01 Jun 2030 05:58:58 +0000
asID: 328631
IP address blocks: 156.0.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A2303AR/serialNumber=AF035FC490695DAFB796F9C7375F738A3112FC3B
Validity
Not Before: Jun 25 05:58:58 2020 GMT
Not After : Jun 1 05:58:58 2030 GMT
Subject: CN=5ef43d28-7083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:48:39:cd:0d:4a:de:8d:58:12:63:43:71:
f2:3c:78:de:e4:4c:67:38:b9:49:7d:84:09:e9:99:
84:4a:6c:a2:96:3b:d6:7a:12:7a:0c:5a:44:4d:40:
ae:8b:c0:ea:db:ad:57:45:93:ea:e4:a6:23:11:98:
ad:13:23:01:06:88:0e:61:6b:29:3d:0d:41:e5:45:
33:86:16:88:36:b1:4a:43:91:64:44:e9:16:b3:4d:
59:c5:62:00:fa:6d:23:71:fd:8e:2b:38:3c:25:49:
75:8c:ff:91:4a:14:87:e9:c9:c0:94:d4:65:56:85:
19:ce:78:c3:42:dc:c5:14:c1:c7:87:d0:97:01:ea:
85:17:ce:17:f3:1e:e6:54:48:7c:6c:5e:58:37:40:
fb:45:91:3b:63:c8:87:19:fc:cb:7a:0e:e3:fb:a7:
6d:3c:c6:7e:7f:19:3a:cb:bc:19:0c:ba:69:eb:ab:
2c:f4:69:47:e9:f4:9f:a0:51:bf:78:78:16:bf:c4:
9d:cf:7d:23:9e:73:6b:67:c0:de:a9:f4:c4:37:3c:
06:12:b7:b2:2d:68:77:2a:7d:83:30:2d:da:59:35:
5b:41:2e:b9:a2:c0:6e:35:70:df:07:44:22:e3:9d:
d7:cd:86:6f:74:f8:12:23:e0:32:1a:33:83:d6:98:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BC:E0:CA:C0:D5:C2:90:7B:75:E5:5E:05:3C:7D:B1:35:E7:37:4C
X509v3 Authority Key Identifier:
keyid:AF:03:5F:C4:90:69:5D:AF:B7:96:F9:C7:37:5F:73:8A:31:12:FC:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/F9049C56B6A811EAB7AD5330F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.236.0/24
Signature Algorithm: sha256WithRSAEncryption
41:64:04:70:2a:b2:a8:fd:71:ef:f4:e8:df:0c:90:7d:ac:ba:
8b:5e:0e:d5:bd:33:2f:3a:34:27:74:51:09:c3:d7:eb:d9:41:
17:c8:c1:c8:83:9e:0f:0d:8b:9e:02:6c:8f:d0:71:88:44:95:
ba:bf:dd:c0:dc:76:2d:1e:9c:33:da:21:0d:6a:7a:3c:1f:4d:
b0:8a:11:c0:e4:2a:da:40:91:83:37:9e:18:e4:e5:92:d9:ff:
57:9c:52:b2:75:73:e5:e5:94:fa:45:ae:bd:94:74:65:6c:b8:
43:11:1d:a6:7f:3f:91:c8:66:29:62:dc:d5:ee:28:04:d1:de:
0b:07:36:bd:87:1a:fb:17:e0:6d:4e:f4:47:03:fc:e4:31:cc:
9a:d9:07:b1:00:e0:be:eb:91:7f:c2:3c:cb:d1:65:7c:9d:12:
81:ba:03:96:86:21:c4:20:76:88:a3:34:35:56:c2:62:1e:f3:
c4:da:cf:e3:8a:d2:6f:b6:38:b5:26:e0:bb:58:0d:1c:e6:83:
03:25:e4:5a:81:ca:22:ce:41:49:f9:ed:6e:4c:08:e1:80:ed:
c2:e3:d3:2c:48:22:6e:ab:0f:43:b9:90:bc:f3:24:33:5d:c2:
de:9c:f4:b6:3f:57:f9:e9:78:af:c4:2d:71:8f:06:46:6d:74:
ac:26:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:05:22 2024 by rpki-client on console-fra.rpki-client.org