Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/223FF30E33A011EFA0337774762E951A.roa
File: 223FF30E33A011EFA0337774762E951A.roa (raw, json)
Hash identifier: d0O0kREyh2khwRdpYmr36h4ovwhaF2DiKJ+1eo0Ac08=
Subject key identifier: E2:58:07:4E:FE:63:52:81:6A:53:5F:61:94:35:F3:F7:25:2E:FF:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 957B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/223FF30E33A011EFA0337774762E951A.roa
Signing time: Wed 26 Jun 2024 09:40:33 +0000
ROA not before: Wed 26 Jun 2024 09:40:30 +0000
ROA not after: Mon 30 Dec 2024 09:40:30 +0000
asID: 984
IP address blocks: 156.231.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38267 (0x957b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 09:40:30 2024 GMT
Not After : Dec 30 09:40:30 2024 GMT
Subject: CN=667be211-53c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:dc:3b:cd:7c:05:16:4e:cc:8f:07:4e:f7:
03:3c:eb:3b:46:67:c6:c1:d8:c2:ea:e5:9a:fe:4a:
68:42:ba:91:f5:de:51:ba:70:04:69:eb:cc:9d:67:
69:91:19:3e:68:60:24:64:3e:f9:bd:c0:b7:2e:ab:
96:24:ce:05:98:9d:79:89:80:a3:9d:10:d0:13:4a:
b0:b7:ae:d8:92:a1:c2:04:2c:c2:31:54:48:51:d2:
68:da:9b:d9:87:3b:b2:34:ad:b6:15:f0:c6:4c:b6:
81:37:b8:e9:eb:7f:4f:83:34:fa:06:5c:56:2d:7a:
3f:1a:24:97:eb:89:e5:15:9c:a5:7e:07:ea:13:e3:
f9:8f:6f:12:0d:9c:cb:31:8b:e1:8f:eb:43:6a:8b:
6f:00:de:6f:1f:be:f6:ac:c1:98:1c:fb:58:04:78:
70:43:44:92:cc:5c:f1:d9:e7:37:bf:ad:b6:39:ec:
3a:b4:13:84:1d:3e:8f:5d:42:c9:96:8d:fc:df:ba:
ef:dc:ec:4f:7f:a7:67:9b:b1:28:eb:9c:40:0a:87:
04:a7:00:82:8e:ee:d2:fc:10:b8:dd:66:d1:3b:be:
9b:26:66:f8:4e:70:2c:a9:c6:37:e1:48:12:90:a2:
e4:7a:de:37:98:31:62:82:70:eb:bd:77:27:78:4e:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:58:07:4E:FE:63:52:81:6A:53:5F:61:94:35:F3:F7:25:2E:FF:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/223FF30E33A011EFA0337774762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:a3:47:63:92:90:f1:ea:51:47:88:ad:49:8a:2a:c0:0d:c0:
2f:58:01:56:2a:8a:6f:44:fd:f3:a1:5b:67:ca:c6:f0:3e:3c:
00:df:a4:4a:c1:dd:b2:8f:dd:34:16:db:81:18:48:56:9e:1e:
9d:fe:fa:34:1a:45:a4:db:9d:cf:a7:72:77:87:f2:24:3d:56:
dd:4f:08:62:14:2e:bc:e6:77:74:68:45:0f:79:5c:8c:21:bf:
65:c5:84:1d:33:0c:20:7e:69:5f:3e:b7:e3:35:ef:16:63:75:
a5:07:e2:e5:42:f0:30:2e:92:d0:57:aa:18:d8:87:37:c5:dc:
41:79:58:8d:33:c5:e4:84:a2:4c:be:42:88:eb:ef:c6:a1:8c:
6a:47:e3:41:43:d2:08:40:8b:74:e3:9d:4f:fa:d1:09:a8:f3:
60:c9:5a:3c:2b:f5:0f:74:46:13:62:c1:ae:ff:db:d4:c5:f3:
15:17:1b:55:19:04:db:31:03:2e:9c:58:08:d1:01:b8:e2:6e:
86:20:8a:e6:2e:7d:b0:8f:a8:d1:ba:d3:9e:e0:da:d0:9a:e8:
87:f0:c6:87:63:27:3d:97:5a:e6:cc:0a:ed:0d:66:36:05:93:
2d:e0:cf:30:14:dd:e0:2d:99:11:b8:55:7a:a6:af:e5:83:92:
c3:f5:8f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:22 2024 by rpki-client on console-ams.rpki-client.org