Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/037E4238912211EFA46D3B47762E951A.roa
File: 037E4238912211EFA46D3B47762E951A.roa (raw, json)
Hash identifier: us0X7uexjdmFTHYHPa4cuLSIxjGrgIgCwVFv1YDQh/k=
Subject key identifier: 6A:4F:0A:28:6E:04:DA:C4:83:A1:88:E3:BF:F1:BE:30:F1:2D:DC:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C7CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/037E4238912211EFA46D3B47762E951A.roa
Signing time: Wed 23 Oct 2024 09:34:34 +0000
ROA not before: Wed 23 Oct 2024 09:34:31 +0000
ROA not after: Fri 29 Nov 2024 09:34:31 +0000
asID: 203020
IP address blocks: 156.226.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51147 (0xc7cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 09:34:31 2024 GMT
Not After : Nov 29 09:34:31 2024 GMT
Subject: CN=6718c32a-3a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:8f:2c:0f:b6:61:89:89:5c:c1:ef:52:dc:
aa:ce:79:d3:c5:ce:0a:fa:e2:3a:b5:2e:18:c3:72:
d9:0b:dc:3c:f2:40:df:a7:a9:8c:ab:a2:6b:72:03:
cf:a6:6c:18:51:b1:fc:de:37:90:c0:83:4b:b4:ec:
50:7e:84:37:92:66:e5:c4:f6:73:86:30:2a:3e:29:
12:99:c2:e3:94:78:e3:37:14:9b:e4:10:f3:48:42:
33:2d:f0:08:72:c0:3f:a5:75:24:25:3d:d4:a1:01:
c0:cf:ce:44:70:15:b7:0b:73:5a:84:dc:38:f1:b7:
f0:53:b2:53:b4:a3:7f:fa:a8:f0:ba:6b:15:3c:b8:
f4:51:b2:b1:f1:55:e8:ad:8e:11:7c:02:bd:f7:b3:
4f:7a:01:69:4a:e8:9c:4e:4c:89:5f:4c:5b:1f:db:
5a:c5:2b:a2:27:76:88:d9:fd:27:d3:d2:08:c4:be:
77:6e:81:51:f3:f8:e5:52:27:85:45:c7:02:3b:4f:
04:ca:84:15:83:f2:a1:7d:1b:5a:cd:2e:8f:b5:77:
43:e5:89:ba:db:70:a8:61:0e:77:58:f8:4c:93:ec:
c9:ca:87:69:90:28:2d:84:85:de:4b:ca:42:d3:a8:
fd:be:19:bc:18:ec:38:42:0d:45:27:d4:a3:a9:19:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4F:0A:28:6E:04:DA:C4:83:A1:88:E3:BF:F1:BE:30:F1:2D:DC:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/037E4238912211EFA46D3B47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.7.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b4:03:df:63:28:78:f3:a2:8d:f1:58:37:46:4a:33:e8:1a:
3a:a6:af:bd:14:48:63:70:58:96:90:ce:df:79:8b:af:f4:ae:
bf:df:1a:ad:5f:25:ab:00:43:ce:07:c7:1e:c3:a4:99:df:aa:
47:49:f8:ef:f7:85:a1:bc:3c:b6:fa:f1:53:3e:0b:be:98:b4:
67:e7:9f:20:da:f0:d8:b5:d6:d8:6d:95:86:ff:68:0f:91:96:
e2:c8:9a:e1:ca:62:a1:44:c9:68:cc:5a:35:4e:1c:b4:3e:80:
0e:fd:f3:71:25:2f:00:83:75:b2:a8:0a:3d:87:b0:f3:ee:ce:
fe:7b:24:32:cf:45:b2:df:bc:26:07:8f:fe:42:5d:c4:84:aa:
0f:7b:90:2a:bd:e1:28:d9:6a:d7:56:88:a9:0b:68:90:33:63:
23:52:cf:c2:f8:73:35:7b:83:81:f8:47:2e:d5:1c:40:0a:bd:
e0:95:21:de:02:0a:4b:ff:6a:c4:83:67:23:ef:f1:47:a6:66:
10:66:92:1c:7e:4d:56:ef:35:47:2d:15:75:60:c2:59:95:e9:
be:52:5a:6a:6d:0b:0e:07:ef:68:32:4d:5c:93:54:5d:00:a2:
f1:7c:9c:b0:8c:65:a4:b1:b2:1c:53:13:de:89:a5:65:5a:ad:
3d:6c:0f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:17 2024 by rpki-client on console-ams.rpki-client.org