Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A7DAB224A5011EFB841EAA0762E951A.roa
File: 1A7DAB224A5011EFB841EAA0762E951A.roa (raw, json)
Hash identifier: kqiCbCFaclzus8Q+EcXMnUWa/kKB4ee9LlAMrVednk4=
Subject key identifier: 43:8A:60:2D:10:29:EA:40:67:EF:2C:51:44:22:62:E1:7C:DD:A3:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9F71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A7DAB224A5011EFB841EAA0762E951A.roa
Signing time: Thu 25 Jul 2024 06:35:38 +0000
ROA not before: Thu 25 Jul 2024 06:35:34 +0000
ROA not after: Tue 19 Nov 2024 06:35:34 +0000
asID: 136744
IP address blocks: 156.235.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40817 (0x9f71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 25 06:35:34 2024 GMT
Not After : Nov 19 06:35:34 2024 GMT
Subject: CN=66a1f239-c6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:05:c4:4a:25:5b:32:11:62:15:18:4a:45:
dc:b3:e2:e7:60:ef:90:bf:a1:1e:60:7a:e0:ef:1a:
c8:13:ef:a0:ef:7a:9c:49:9d:ea:04:0f:df:6a:41:
69:66:80:3c:3a:14:50:b3:2b:1b:97:7f:55:af:d7:
73:7e:af:69:34:83:12:ac:9d:a6:62:e7:30:67:ea:
2d:30:33:1a:47:e7:45:fa:0b:36:2b:be:96:36:2d:
b6:dc:57:83:a3:0f:b9:52:b3:75:93:13:d1:ca:50:
be:51:ba:9c:62:21:df:0e:c3:a7:a2:41:7a:fe:7c:
94:29:57:16:43:72:da:af:a8:62:be:7f:15:0a:45:
e0:77:26:29:76:91:2e:8e:31:91:bc:e4:f0:08:00:
c8:87:2a:ee:e0:a3:19:3b:a4:e1:64:70:e8:de:06:
ca:2c:80:58:4d:2f:e8:a3:85:7a:6a:77:bf:46:04:
45:61:8d:2a:02:c9:0b:15:fe:65:01:94:92:54:18:
24:84:de:64:0d:21:21:db:19:9b:59:63:82:50:09:
36:9d:0a:21:a7:5a:db:3b:51:13:2d:64:7e:5c:40:
54:3c:8d:5d:36:ce:ff:ac:5f:ad:66:e3:30:0e:e6:
32:87:e2:cf:24:b7:64:d9:0b:f8:db:fe:99:7c:24:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8A:60:2D:10:29:EA:40:67:EF:2C:51:44:22:62:E1:7C:DD:A3:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A7DAB224A5011EFB841EAA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.28.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:ef:05:76:b7:af:71:ad:67:b5:b3:89:8e:d9:bd:92:15:0b:
90:b4:6b:1d:2d:e8:65:ad:5d:10:b0:ee:3b:81:46:ea:79:f2:
a1:0e:2b:9a:0f:2e:b6:a7:83:8a:1d:3c:e5:c3:c8:ca:81:f9:
b8:e7:fe:d9:fd:1c:3d:85:89:f7:ad:3a:74:0c:3e:b6:9d:08:
b6:22:46:35:33:75:ad:66:37:b7:d4:65:77:d4:08:bc:f3:3d:
e5:0a:70:12:8b:29:76:c1:dc:d7:84:87:48:4e:9f:f3:02:4d:
f9:c9:7e:ee:14:ea:14:d0:ea:a3:b0:99:10:bc:7e:11:84:54:
1e:ac:a5:b8:de:83:0a:95:66:86:a4:72:3e:88:e3:63:d4:b9:
25:ca:3e:28:bf:bb:e3:c9:12:71:09:99:9d:a8:c5:dc:a1:0f:
40:6f:71:35:50:a5:16:01:d1:7a:c0:70:33:fb:fb:66:b8:6e:
ed:95:db:91:2a:54:91:63:90:b8:35:81:8d:4f:01:3a:a0:88:
da:b7:e4:01:4b:04:a0:e9:83:8f:c6:ec:6d:15:e0:26:ec:f9:
bd:f5:1f:7c:68:15:d6:cc:0e:39:da:c8:cf:05:43:8e:fb:13:
6c:9d:96:3e:0f:cc:65:16:a6:28:49:a4:53:01:fa:6c:ca:95:
cf:b0:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:27 2024 by rpki-client on console-fra.rpki-client.org