Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27B36D8E038511EF8D9B6616017001B1.roa
File: 27B36D8E038511EF8D9B6616017001B1.roa (raw, json)
Hash identifier: ff+TuuqiPFj6aH1q3JvkcrLRYXUaA0f0sWZmURjWT7c=
Subject key identifier: 25:D2:06:CE:D2:3A:E8:D5:1C:7F:4E:E2:80:30:BF:83:5B:7E:CD:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8598
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27B36D8E038511EF8D9B6616017001B1.roa
Signing time: Fri 26 Apr 2024 04:26:30 +0000
ROA not before: Fri 26 Apr 2024 04:26:27 +0000
ROA not after: Tue 03 Sep 2024 04:26:27 +0000
asID: 138195
IP address blocks: 156.234.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34200 (0x8598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 04:26:27 2024 GMT
Not After : Sep 3 04:26:27 2024 GMT
Subject: CN=662b2cf6-ccf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:90:0f:9b:a7:17:4e:e8:9f:e9:6c:51:51:
44:a8:b5:eb:f9:64:b2:b7:d7:3b:a0:4f:35:65:14:
e7:36:e5:7b:6f:43:2b:7a:02:1a:59:5e:f5:3b:b6:
1c:20:ff:8f:2f:34:af:14:e5:ef:63:0b:e3:e0:ac:
47:28:00:67:94:b1:22:36:e3:88:e8:4e:36:f3:13:
ca:a4:e6:db:b8:db:ab:5f:39:b2:80:72:02:d5:30:
63:25:17:85:40:93:88:d9:35:28:ba:f8:5e:b0:61:
88:b8:ee:ef:c0:4b:94:46:3b:c0:27:5d:5d:78:a6:
75:35:44:28:95:9b:51:70:53:ae:99:1e:f8:de:e8:
1c:71:1b:09:5a:57:ff:2f:07:1b:ac:7f:2d:43:cc:
ec:46:26:3e:29:ef:a6:c3:25:31:d1:77:72:00:0a:
59:26:28:fb:c9:09:5b:5d:f9:f2:80:13:16:e3:8b:
1a:61:78:4d:c6:83:52:8d:f7:07:5d:99:0a:73:f8:
7c:6f:7e:80:13:63:36:93:3d:b4:f7:fa:61:91:a2:
ec:bb:3f:40:51:2c:bb:7f:bf:51:df:d8:56:ca:5d:
8c:11:65:7f:5e:78:f3:b7:68:22:68:cd:15:39:ca:
48:a8:ac:34:50:af:11:e0:75:37:75:8c:41:a7:d9:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D2:06:CE:D2:3A:E8:D5:1C:7F:4E:E2:80:30:BF:83:5B:7E:CD:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27B36D8E038511EF8D9B6616017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:1f:4b:64:82:85:5c:9e:0b:ab:03:6d:cd:6a:aa:01:ac:10:
87:13:b0:50:d3:66:d6:51:61:68:f5:73:de:b1:80:0b:26:6f:
56:53:0c:bd:0f:23:be:a0:c6:37:dd:5d:ff:d4:ab:ee:64:f5:
e3:dd:ee:fc:5e:65:c4:f9:d9:e5:3d:a1:5e:02:2e:6c:0d:93:
f9:a8:11:0a:f3:23:17:26:af:90:21:30:24:69:19:c1:8b:f7:
ac:1e:7a:49:7f:37:19:8f:8e:07:e8:3f:02:97:b7:dc:8e:b9:
a0:bc:04:d7:5c:3f:9a:c0:bf:07:20:28:5a:65:47:38:98:fd:
bd:24:d7:96:0e:2b:a7:4c:6f:fe:d0:7b:ca:15:02:f4:44:85:
e9:6a:76:22:d0:a8:b1:18:e1:54:a1:dd:9f:b3:2f:15:5d:1f:
36:8e:a1:c4:44:db:df:d9:47:04:7f:a1:2a:76:6a:a2:02:5d:
74:66:d6:e9:e7:be:ba:74:01:06:c4:8f:bb:f8:38:74:c4:51:
94:a6:90:d5:4f:89:0b:e2:00:f2:5c:61:42:19:78:c8:9b:d0:
93:ed:6b:1f:37:56:21:40:c8:e8:64:52:6d:79:56:ab:d3:4d:
90:d1:11:1a:05:01:ba:49:49:99:ba:65:29:b4:10:1e:88:5d:
83:2c:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:03 2024 by rpki-client on console-ams.rpki-client.org