Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DDD2F70039211EFAA8BC603017001B1.roa
File: 8DDD2F70039211EFAA8BC603017001B1.roa (raw, json)
Hash identifier: q2wHWZFyt63IoBzOSQLaKg0tn8R+iRKvqRb/AJMwXbs=
Subject key identifier: 94:E9:C9:A3:4E:0F:92:0F:4A:7B:D2:12:2A:3E:5E:70:85:A5:F3:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8629
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DDD2F70039211EFAA8BC603017001B1.roa
Signing time: Fri 26 Apr 2024 06:02:25 +0000
ROA not before: Fri 26 Apr 2024 06:02:22 +0000
ROA not after: Sat 07 Sep 2024 06:02:22 +0000
asID: 138415
IP address blocks: 156.225.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34345 (0x8629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:02:22 2024 GMT
Not After : Sep 7 06:02:22 2024 GMT
Subject: CN=662b4371-582f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:2b:90:b9:39:6d:c2:0d:91:45:01:05:ab:
0a:ff:4b:00:02:fd:05:02:bb:f4:ff:6d:67:5d:2c:
bf:81:54:95:26:2c:0c:4b:73:3b:b9:17:c2:27:df:
79:04:ae:57:a4:31:fa:a3:4a:10:72:10:e6:67:01:
00:51:f9:f0:01:6c:82:11:a4:fb:63:ba:ad:4d:ee:
d1:0f:d3:fa:7a:bd:46:50:9d:32:84:a2:08:f3:ac:
05:79:96:cf:38:72:d1:d5:24:74:ed:48:b3:ce:6d:
4d:85:0c:ae:5c:28:88:77:70:b5:50:a5:d5:43:da:
ae:e9:0e:52:4f:b1:be:d8:22:84:57:d7:e7:ae:13:
b3:f0:95:b7:6a:f3:75:62:39:bc:07:dc:6b:da:3f:
2c:92:8a:37:83:bc:38:c4:bc:96:08:13:d2:34:90:
b2:c3:8d:c6:51:11:3d:b0:85:2f:75:b6:2f:a2:c7:
3d:b2:05:ca:65:f5:a9:7f:fb:de:c5:c6:b3:95:ba:
4c:73:f3:b5:a9:cc:32:75:fa:4b:00:ce:92:33:d3:
01:15:98:41:75:9f:3c:6e:e6:fb:60:a7:29:c6:ae:
30:8a:59:e7:ee:0e:dc:fe:73:7d:3c:ca:b5:9c:af:
2a:94:57:ea:6a:ab:6d:95:e8:69:e5:f6:4d:94:59:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E9:C9:A3:4E:0F:92:0F:4A:7B:D2:12:2A:3E:5E:70:85:A5:F3:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DDD2F70039211EFAA8BC603017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.32.0/19
Signature Algorithm: sha256WithRSAEncryption
72:59:3a:da:ab:d4:45:b8:9e:d2:9c:4c:fd:67:7f:2e:57:04:
68:e6:d8:dc:5b:09:ab:f8:ca:42:b0:c1:65:f1:fc:d8:76:43:
d9:8f:4f:87:1f:a3:a2:c4:cd:91:e9:f9:c8:33:f1:07:d3:ba:
ec:a3:c5:aa:87:b4:99:c9:31:1a:8d:a5:5c:a7:13:44:4d:1a:
1a:80:91:9b:0d:84:89:31:16:d4:8a:d8:d9:3a:bc:ea:68:cf:
c6:b9:81:eb:8e:92:17:8c:53:5c:c8:ac:52:e3:00:75:bf:b7:
15:34:5a:2b:6d:29:d2:2b:44:2b:0b:58:08:2c:2c:f2:19:9c:
a8:08:32:b7:9f:22:33:42:80:5b:aa:cc:1a:c8:aa:1e:66:ac:
c4:88:5d:52:d4:14:88:9e:1c:e7:db:bf:c5:73:75:79:b6:34:
10:87:f8:1e:03:b0:32:1e:29:92:66:61:56:29:32:c7:5b:7d:
bd:ce:41:b6:d3:0d:4d:a3:38:77:46:96:06:0c:f7:23:7a:d8:
35:19:85:65:0a:2c:5f:c0:96:e4:71:63:f3:5d:96:d9:d4:2a:
58:e3:be:e4:9d:f7:7a:ad:71:5c:a1:68:d9:fc:21:0e:ae:41:
ed:7e:30:19:1e:57:55:54:ce:d8:e0:10:75:1d:e9:89:d1:a6:
96:b0:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:18 2024 by rpki-client on console-fra.rpki-client.org