Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A03C7220B4B11EFB7837461017001B1.roa
File: 3A03C7220B4B11EFB7837461017001B1.roa (raw, json)
Hash identifier: BOnWxrug1slZbjvNuZRzf+FGWcOO03mUllOWXMoISPQ=
Subject key identifier: 41:76:A2:B6:BD:7F:C8:FD:2E:F2:08:55:EA:81:E0:5C:29:70:3F:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 87AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A03C7220B4B11EFB7837461017001B1.roa
Signing time: Mon 06 May 2024 01:52:00 +0000
ROA not before: Mon 06 May 2024 01:51:56 +0000
ROA not after: Sun 11 May 2025 01:51:56 +0000
asID: 140403
IP address blocks: 156.245.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34732 (0x87ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 01:51:56 2024 GMT
Not After : May 11 01:51:56 2025 GMT
Subject: CN=663837bf-5fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:44:57:41:2a:1b:a9:00:d4:a0:88:01:10:
6e:3c:e6:16:4f:7e:e7:63:76:47:14:84:b6:d9:16:
25:fc:9b:34:78:a9:15:d7:55:69:c0:7c:f1:4b:85:
ea:39:d4:37:29:8e:72:f1:36:96:a1:bc:b5:6d:a0:
fe:2a:d4:53:c8:82:67:ee:e0:5a:d5:fc:b0:3d:4e:
8e:af:2a:dd:a3:8e:a2:de:02:ea:09:78:04:f1:cb:
5a:8e:e3:55:cf:48:4d:b5:18:2b:85:3e:13:0f:4c:
68:a1:cc:1b:7a:b2:82:52:61:dc:07:26:f6:72:53:
84:a4:1e:a0:ce:9c:a3:ac:7f:f3:35:47:c5:1c:1e:
4d:f7:b9:12:10:70:cd:4c:83:41:bc:6e:b0:f9:ee:
62:c4:2c:b5:a6:c1:6c:8e:0e:44:f9:94:65:49:3c:
c1:32:3d:bc:de:04:e7:b2:0c:e0:3d:dc:5e:a0:2c:
ad:85:7f:ba:86:46:0c:6d:8f:92:a3:68:2f:8b:c3:
b5:1a:d5:e8:8a:ab:79:5a:86:dd:32:70:c7:8d:7e:
6a:b8:17:3b:76:43:38:d4:25:b7:8c:b8:33:93:58:
28:31:33:6f:54:89:78:04:ca:21:b6:47:37:4e:b4:
74:45:56:0c:b3:43:eb:95:7b:c4:dd:a2:75:6b:1d:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:A2:B6:BD:7F:C8:FD:2E:F2:08:55:EA:81:E0:5C:29:70:3F:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A03C7220B4B11EFB7837461017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:70:f2:eb:ea:c4:93:72:2a:21:df:8a:0d:fd:27:8d:fd:c3:
30:59:65:55:39:46:08:45:41:72:c6:58:1c:00:95:d5:9a:22:
93:73:73:6e:f0:04:3d:69:81:db:e6:1f:98:ff:74:39:42:a9:
48:87:46:88:f5:bf:d3:ef:0a:d8:fb:b4:49:74:e6:94:b2:6c:
d3:82:27:20:3a:02:05:fb:ba:f5:63:eb:f8:7c:f7:e9:51:f3:
b6:95:e3:61:c3:8c:6d:52:55:d6:f9:48:53:0b:87:7d:d8:2c:
3a:dd:5d:fa:66:68:48:3c:1e:8b:c1:2a:73:ec:81:bd:bc:9c:
66:22:d8:70:7a:99:5a:d7:a5:c0:7e:90:01:09:4d:b6:ce:3a:
3c:f8:7b:8a:67:af:7b:ef:5d:aa:08:e0:10:bc:25:27:1a:33:
58:84:30:7f:f3:14:b7:80:8e:7b:e6:ec:a1:8b:e2:bf:76:c4:
a5:d9:df:91:e4:b2:be:26:83:cf:17:b7:8c:3d:92:e8:e7:ea:
91:54:01:09:7a:01:93:b6:2a:b6:f9:58:43:58:5f:ee:de:1e:
df:51:d7:a5:2d:0c:f0:20:5a:36:01:88:48:3f:cf:53:9f:3a:
29:a6:1d:6b:10:39:7a:99:71:72:63:b3:71:aa:2b:bb:d0:c1:
79:17:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:45:23 2024 by rpki-client on console-fra.rpki-client.org