Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8D84D6C0B4B11EF8861F467017001B1.roa
File: F8D84D6C0B4B11EF8861F467017001B1.roa (raw, json)
Hash identifier: OlaQJWU9iiu2tYoflXGQumqftZbOg1tamhEQ1uinAwc=
Subject key identifier: E4:C4:74:DC:20:32:C2:3B:3A:CC:9E:DD:9A:28:77:12:59:9F:A0:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 87AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8D84D6C0B4B11EF8861F467017001B1.roa
Signing time: Mon 06 May 2024 01:57:20 +0000
ROA not before: Mon 06 May 2024 01:57:16 +0000
ROA not after: Sun 11 Aug 2024 01:57:16 +0000
asID: 140403
IP address blocks: 156.240.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34734 (0x87ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 01:57:16 2024 GMT
Not After : Aug 11 01:57:16 2024 GMT
Subject: CN=66383900-e35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:75:b5:e5:af:2d:14:7f:e6:90:98:2e:6f:3f:
57:c8:78:f7:ed:ca:84:ab:de:d9:56:d6:a4:2a:a1:
11:3b:39:c3:ae:28:03:3a:5c:c5:36:65:cb:42:d6:
37:75:b5:fa:1f:ea:82:f7:42:d9:29:32:96:a0:15:
6b:db:dd:b8:be:65:1a:03:eb:9e:5d:32:b2:cb:05:
11:74:c5:91:4e:43:b9:fc:b6:ec:a3:a1:23:53:0b:
09:60:b1:aa:e7:c2:c1:af:84:57:11:ef:b8:a9:15:
d3:b2:d0:5e:79:0b:3e:ef:07:3d:8d:bd:ac:01:c7:
03:cd:1b:77:84:80:be:13:54:1c:20:83:6f:7b:56:
c3:b2:d6:37:91:85:b3:8a:95:d4:b0:5a:4e:48:f8:
f0:c5:57:1d:06:24:7d:a5:07:da:0c:4f:02:e6:f8:
05:ef:87:35:a8:84:17:f2:d4:06:3b:3a:4d:16:46:
3a:59:39:5f:4f:84:51:b7:c7:94:88:b0:ad:e2:7d:
24:81:7c:58:cb:9b:58:68:d9:e6:4e:d2:9b:d8:3b:
b4:1b:86:37:c8:5d:9b:6c:f4:81:27:76:02:20:9a:
a3:33:36:c5:d0:e0:c7:63:32:40:31:55:69:e3:e4:
49:7d:5e:37:d7:4b:f8:be:69:e8:38:d5:6e:1a:27:
15:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C4:74:DC:20:32:C2:3B:3A:CC:9E:DD:9A:28:77:12:59:9F:A0:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8D84D6C0B4B11EF8861F467017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.62.0/24
Signature Algorithm: sha256WithRSAEncryption
71:03:8b:4a:7b:72:e5:c2:d9:2f:61:40:b4:d3:1e:0a:ef:ef:
2d:fb:ef:f9:0f:9e:c9:04:24:ca:21:60:b1:2d:eb:c6:d1:4a:
e9:79:9d:d7:d4:fe:ff:33:19:97:12:53:e3:a8:2c:04:fc:4f:
ff:86:65:45:19:cc:8b:39:b3:5b:fa:63:63:0c:68:6e:c2:78:
34:77:1c:ec:73:9c:d1:58:98:82:59:ad:c8:21:a9:89:8d:58:
bd:7a:85:c9:26:da:9e:4f:c8:ce:d8:5f:4b:d9:6b:63:1c:27:
b2:69:f3:51:0d:7a:d7:c3:70:9a:87:91:08:db:07:a9:78:eb:
42:e3:c6:12:3f:cd:69:3a:96:cd:92:e6:63:35:d3:e2:50:39:
94:c0:7d:32:81:3a:e2:4a:b3:db:0e:e3:38:b2:33:76:c3:b7:
ce:58:4b:96:52:c0:eb:1c:f6:a4:43:dc:47:30:6b:d3:85:23:
61:24:0d:e9:cb:5d:cb:2e:3d:9e:28:d9:98:66:4a:5a:3b:2f:
46:11:11:62:0e:c4:14:75:24:e8:e4:3c:62:1b:c4:1e:74:00:
f8:d4:e8:09:00:fa:68:c1:a7:87:47:cb:b5:20:9c:9a:9d:48:
ee:82:4f:3f:56:bf:73:f6:f8:3a:ee:51:48:b9:3f:b9:5d:a0:
d3:c7:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:45:27 2024 by rpki-client on console-fra.rpki-client.org