Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10A36B8EFD2811EEB483D82D017001B1.roa
File: 10A36B8EFD2811EEB483D82D017001B1.roa (raw, json)
Hash identifier: KqvjSFS8Bj4PlJsinbUzW+F6ReWy/foEw1l5rnsWa2M=
Subject key identifier: 3A:92:D3:74:DA:9E:2C:08:8E:BB:18:68:E6:E7:6D:16:F1:47:5A:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10A36B8EFD2811EEB483D82D017001B1.roa
Signing time: Thu 18 Apr 2024 02:05:02 +0000
ROA not before: Thu 18 Apr 2024 02:04:58 +0000
ROA not after: Sat 24 May 2025 02:04:58 +0000
asID: 209242
IP address blocks: 156.238.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33521 (0x82f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 02:04:58 2024 GMT
Not After : May 24 02:04:58 2025 GMT
Subject: CN=66207fce-1f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:d0:12:41:9a:5c:83:15:27:63:5c:3a:0f:
d6:c1:d8:af:02:62:1b:72:f7:b1:57:ab:b4:47:c5:
10:ac:3f:ce:73:b1:1a:98:87:c0:f7:f2:76:8a:72:
5e:7c:3b:7e:98:73:7a:0b:f9:c1:c7:9f:ea:d5:98:
99:55:79:4b:3e:3c:87:d5:bd:e3:54:37:f2:f6:f8:
cf:ac:7d:dd:d9:9f:a0:29:ea:92:c3:7c:9a:1c:85:
62:20:c0:f2:4a:34:17:60:b4:23:d9:bf:05:27:88:
78:7d:a5:69:3f:af:f0:c3:b2:3a:50:0d:d6:34:f6:
99:5f:52:80:31:c5:aa:36:87:7a:6d:6c:34:b7:26:
26:a5:96:b5:ed:a5:ca:29:c1:61:2f:e5:6f:a6:f5:
ae:88:a3:13:61:82:7b:56:6e:cc:35:c6:74:3b:1b:
72:48:c7:49:2d:22:77:20:ca:2d:b3:85:ba:25:25:
1e:8e:b1:a3:22:b6:02:cb:97:48:ad:34:34:ba:67:
33:43:7e:84:da:80:12:e7:22:fa:e5:2c:96:05:51:
5c:92:db:18:b2:0e:47:ed:ff:1f:00:26:c6:0b:05:
3a:03:74:9d:7d:4a:02:d8:04:2e:14:b2:02:e4:b2:
1b:b1:78:82:30:32:2a:71:0d:1f:bf:0c:10:0a:d5:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:92:D3:74:DA:9E:2C:08:8E:BB:18:68:E6:E7:6D:16:F1:47:5A:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10A36B8EFD2811EEB483D82D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.19.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ff:f8:3f:61:9f:f3:a0:bf:d8:c6:dc:c0:66:b9:da:6f:9d:
d6:f4:24:4c:a7:0f:ec:cb:68:dd:ae:f0:e0:5d:2a:61:2c:3f:
13:8b:72:1c:40:9d:66:ce:ee:be:a4:5a:72:0a:05:11:fb:48:
9d:b9:d7:eb:74:ba:df:ed:dd:53:f7:6d:d5:d4:a8:05:c4:a2:
85:43:32:e5:36:7b:e1:27:7c:06:7d:9c:db:4f:65:1d:af:46:
bd:f5:17:77:b2:a8:2e:5b:5c:04:a6:c1:df:3a:a6:dd:63:12:
cd:4a:cf:64:03:4a:4e:04:92:b2:55:f6:0f:98:ad:87:7b:d8:
3c:b8:76:65:62:2d:e3:bd:65:50:f3:1e:aa:bc:6d:cc:5d:d3:
c7:0a:dc:b9:31:f0:82:14:cf:aa:e4:51:ea:d3:9e:81:b9:17:
68:2a:8b:59:ae:b7:fa:0c:90:43:b6:9d:3e:3d:08:45:a0:e7:
e7:27:e9:7d:cf:60:4d:3e:c4:3d:8e:eb:46:97:1a:cf:4a:84:
f1:71:37:28:b6:0c:1f:d8:b3:5c:45:2c:a0:b9:ed:4d:b2:f5:
a0:b6:3a:2d:51:fb:64:79:3d:e3:25:50:33:75:05:2f:c5:e9:
1b:46:55:5b:d3:6b:18:3b:73:34:11:e7:a4:0b:b4:44:46:fa:
88:07:69:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:04 2024 by rpki-client on console-fra.rpki-client.org