Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DAC11381C1C11EF8E43AA057DDC24C2.roa
File: 1DAC11381C1C11EF8E43AA057DDC24C2.roa (raw, json)
Hash identifier: NeRJTkkJb7N3J+jiIgZzEHcK5g+cv5Avts3jFMs9hoQ=
Subject key identifier: FB:30:55:04:B1:74:C1:17:B7:F0:C3:D8:63:0D:1B:B7:B2:D5:A4:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8C39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DAC11381C1C11EF8E43AA057DDC24C2.roa
Signing time: Mon 27 May 2024 11:27:35 +0000
ROA not before: Mon 27 May 2024 11:27:32 +0000
ROA not after: Sat 11 Jan 2025 11:27:32 +0000
asID: 399077
IP address blocks: 156.248.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35897 (0x8c39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 11:27:32 2024 GMT
Not After : Jan 11 11:27:32 2025 GMT
Subject: CN=66546e27-ad6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:04:99:36:1c:5b:3c:22:aa:73:72:53:36:
c9:a4:a5:81:96:fd:33:29:b0:d5:3f:33:b0:5e:27:
b3:5d:3c:ca:3b:57:51:db:8a:93:26:9e:7a:fa:57:
be:78:d1:fa:76:10:a9:c2:e0:89:c4:ae:44:09:9d:
20:3a:39:d3:56:0f:53:fa:57:3c:27:f1:81:fb:f0:
d3:7c:5e:ff:15:62:01:02:a7:bd:3f:2e:4d:ef:cd:
08:8c:f0:d5:90:c5:00:8d:74:80:b5:27:34:a0:a9:
e6:01:73:a2:e3:9d:f8:33:34:ad:73:82:53:4f:bb:
9f:85:5e:68:01:0a:3d:2a:af:25:d4:48:a0:32:4f:
0f:9a:25:3b:f9:6f:4a:56:06:b3:a4:c7:8f:cf:c0:
e5:0f:d8:50:c6:a2:c2:b2:79:be:75:70:6e:65:2c:
3e:37:ff:6f:a3:de:d1:40:8e:39:03:fd:0e:98:39:
83:dc:3e:bd:5b:24:65:fb:f1:47:a3:4a:b4:d8:1f:
5d:d1:5c:34:a2:db:66:35:dc:f1:39:3a:97:8e:22:
d7:d6:cc:ca:3d:95:2e:b2:c9:d2:65:67:d4:4e:20:
65:bc:2a:3a:1e:38:d8:77:36:cc:d3:d5:f1:80:9c:
4d:3f:d7:2d:dd:76:5e:32:93:56:d1:63:d6:21:60:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:30:55:04:B1:74:C1:17:B7:F0:C3:D8:63:0D:1B:B7:B2:D5:A4:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1DAC11381C1C11EF8E43AA057DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:04:ac:62:81:87:77:9b:2c:70:71:1e:6a:4a:26:44:96:25:
ae:fe:4f:e7:08:e5:fc:6b:7a:e3:03:ce:1c:57:cc:cd:9b:dd:
b9:8d:6b:8f:ce:93:f5:1e:b2:6a:f2:ed:8e:23:d3:69:5d:10:
ea:0f:a5:29:62:7f:31:f3:cc:c9:8b:42:49:18:f1:92:a2:a2:
2a:25:b7:77:79:25:6e:c8:4a:3a:e7:13:00:35:a8:04:14:52:
ed:6b:dc:98:44:25:08:0f:35:61:e1:7f:48:9c:30:a0:b5:48:
fd:1b:88:b1:9e:5f:44:fa:d2:0d:71:2f:4d:8f:0e:80:34:d4:
56:d5:00:8f:3f:80:af:49:cb:54:5c:b0:f6:b2:55:f2:0f:a1:
4c:92:3b:84:51:67:1d:02:2d:c9:67:98:47:70:cb:cc:f0:73:
82:bd:ec:25:f7:13:66:22:15:91:10:69:e0:b4:f2:58:bc:a9:
5e:33:6d:3d:89:3f:e4:55:0a:c7:2f:63:42:2c:1a:33:46:f7:
d6:67:9e:70:ba:f3:e0:c9:16:83:84:05:bc:89:b3:5b:94:bb:
b6:29:7e:58:e8:d9:b1:c8:b3:fa:61:09:38:a1:e3:28:22:c6:
03:b5:af:df:0b:20:c3:3b:93:f7:b8:ef:76:44:e6:dc:4b:55:
43:a4:0c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:11:56 2024 by rpki-client on console-ams.rpki-client.org