Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03884AFAF70111EE9E019C67775412E6.roa
File: 03884AFAF70111EE9E019C67775412E6.roa (raw, json)
Hash identifier: /qtCggIDt+jGacBtTFICzti3oHca1lv5h8cmekJ1rkg=
Subject key identifier: 51:1B:3F:0D:65:84:9E:28:6C:C5:B2:5F:88:BF:3A:D5:14:6A:96:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 81DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03884AFAF70111EE9E019C67775412E6.roa
Signing time: Wed 10 Apr 2024 06:10:22 +0000
ROA not before: Wed 10 Apr 2024 06:10:19 +0000
ROA not after: Sat 29 Nov 2025 06:10:19 +0000
asID: 134700
IP address blocks: 156.248.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33247 (0x81df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 06:10:19 2024 GMT
Not After : Nov 29 06:10:19 2025 GMT
Subject: CN=66162d4e-93b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:f6:9d:24:38:63:8e:44:8b:7b:38:b4:38:
2d:c5:93:06:fc:f7:89:53:e1:f7:32:c1:7e:3c:38:
b2:94:f1:ab:b0:89:88:d4:20:06:15:d6:e2:04:c9:
98:0d:a8:fe:82:9d:45:3e:6e:06:fc:37:25:d3:8c:
0a:4d:d8:c0:7f:5c:7a:20:63:e5:ca:87:82:8c:e5:
fa:e1:49:b8:1a:48:d7:fd:3d:90:21:58:ee:db:e1:
18:93:40:d3:e9:5e:28:05:21:35:18:18:72:44:c9:
7a:2d:ad:b2:3b:7f:7a:3b:9a:87:ba:3f:05:9b:cf:
84:bb:73:23:73:31:89:ac:d6:89:5e:2a:13:ed:e5:
f3:94:7b:75:82:20:d8:71:ca:7b:4e:e0:1d:28:d6:
b6:e9:37:3d:f0:7d:17:1b:32:2f:54:90:7b:26:65:
7e:c8:4d:e2:ba:d4:15:67:e6:fe:31:f6:7f:ba:4d:
b1:00:e2:11:50:ed:05:56:be:a7:b9:82:0f:b5:37:
51:66:39:d8:3d:f2:f2:de:1c:9c:80:50:9b:58:34:
eb:bc:74:2d:33:e0:da:2c:f4:a1:2b:eb:32:ce:9e:
56:4d:52:63:64:dc:5b:0b:73:ff:f5:77:8e:7f:4f:
b0:24:9b:4d:38:73:b9:29:8b:1e:9b:82:e4:35:8e:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1B:3F:0D:65:84:9E:28:6C:C5:B2:5F:88:BF:3A:D5:14:6A:96:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03884AFAF70111EE9E019C67775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.2.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e1:fe:a0:84:9f:4e:21:04:69:58:77:4b:06:69:15:c4:5f:
13:e5:1b:88:82:72:8b:8f:45:eb:a0:95:f1:1f:db:e9:a3:cc:
78:9b:5a:15:3c:68:ff:ca:06:44:c8:d2:f8:a2:d6:9e:ef:c0:
ca:74:1e:64:2c:a5:62:4b:85:05:99:ed:8d:f0:22:2d:09:63:
e6:2b:fb:70:3a:35:6a:60:05:61:cb:bd:a1:c6:c9:0d:f3:33:
37:33:c8:10:54:c5:48:e7:d8:f1:61:18:c0:29:64:c4:be:8d:
3a:0d:34:12:55:8c:74:64:97:3c:6d:03:2f:02:04:6b:25:8e:
3b:80:ea:ec:4f:21:b8:26:94:ab:87:f1:ad:23:d1:00:d5:e5:
79:be:fb:de:ac:18:44:b1:f0:ef:e6:6a:b0:a7:ba:8d:2f:41:
f6:b6:85:52:a6:f7:2c:f2:90:e8:80:bb:7f:c9:03:6a:f1:76:
62:68:a7:74:44:62:de:1c:e6:50:0e:d1:a3:bc:ee:38:7c:b1:
cf:4c:d4:39:16:55:52:7a:a4:0d:dc:12:22:f6:3f:e0:94:6c:
e4:d8:af:b0:5b:f7:d7:1f:7c:e1:7c:a8:fa:75:f3:39:fa:8e:
f2:fe:49:d2:80:df:59:48:9d:61:15:2d:ee:6c:ba:dd:2a:30:
5e:8a:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:02 2024 by rpki-client on console-ams.rpki-client.org