Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27FDBB4AF70111EE82D1FE67775412E6.roa
File: 27FDBB4AF70111EE82D1FE67775412E6.roa (raw, json)
Hash identifier: AVQQhpOKGNxF9zzclvyTNgdAqsoM7cS7S5c9Cw/EcGc=
Subject key identifier: 88:2E:0C:7D:28:C5:E9:67:AF:A3:47:D1:EA:D1:B1:76:2F:A6:11:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 81E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27FDBB4AF70111EE82D1FE67775412E6.roa
Signing time: Wed 10 Apr 2024 06:11:23 +0000
ROA not before: Wed 10 Apr 2024 06:11:20 +0000
ROA not after: Sat 29 Nov 2025 06:11:20 +0000
asID: 134700
IP address blocks: 156.248.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33249 (0x81e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 06:11:20 2024 GMT
Not After : Nov 29 06:11:20 2025 GMT
Subject: CN=66162d8b-9c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:f0:ac:79:11:8d:e5:93:4f:cc:cb:4c:8b:
1d:cf:08:ef:67:c5:16:80:12:a6:8b:cd:ee:16:de:
cb:be:a7:18:90:55:67:a2:3b:ee:e9:fd:f3:0a:95:
80:7a:67:9b:10:94:e4:6a:d2:22:a5:db:db:79:2d:
c4:a7:34:f0:74:ca:43:fd:42:a8:36:ca:46:cf:4e:
fb:f0:88:14:5d:48:f3:fc:5a:c7:eb:e0:9d:d7:aa:
b2:bc:d4:58:22:50:24:dc:65:c3:87:d5:ac:1b:4a:
5a:ca:49:2f:a6:97:bd:2d:a2:1d:15:db:e2:c5:5e:
17:57:92:8e:a8:bc:b5:55:82:f4:61:82:ff:3a:16:
0f:5d:b6:f9:4d:38:9e:a6:aa:04:93:9a:cf:8b:ab:
52:57:0f:4a:95:cd:78:7c:c8:b8:de:61:3b:d4:ac:
10:90:67:ea:d0:c4:93:23:1e:35:52:92:ad:70:c0:
8f:f6:71:5a:50:63:1e:f9:64:79:44:dd:70:34:b3:
71:07:b3:cf:f8:4c:4e:f1:0a:ac:c4:f9:b8:16:d3:
13:4a:cf:c8:e7:dd:b8:d8:3d:4f:f4:f9:74:7f:b8:
af:59:12:e5:77:73:47:d9:37:22:e3:07:04:60:ed:
d8:a5:46:51:36:b1:13:bf:e9:a6:03:da:ec:c3:27:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2E:0C:7D:28:C5:E9:67:AF:A3:47:D1:EA:D1:B1:76:2F:A6:11:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27FDBB4AF70111EE82D1FE67775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:81:00:ec:f6:70:89:a8:47:14:47:39:9d:1c:fd:da:93:c5:
2c:17:a2:4b:ff:ff:e6:d3:e6:6a:62:04:c8:88:d2:69:27:3c:
6e:99:e5:5d:54:42:01:d0:f1:e7:03:f5:9e:84:51:69:04:1c:
71:0b:8c:3d:7f:c2:31:e8:25:44:2f:5d:05:77:a9:ee:1a:94:
52:bb:7b:65:97:5d:90:51:78:74:fe:3d:18:50:c2:42:c3:4a:
af:99:78:39:7a:3d:3b:a1:51:2d:5c:3c:ea:f6:81:46:04:2e:
32:3b:83:6b:fa:e7:3f:4f:ae:03:65:46:e7:07:49:7b:73:fa:
16:93:a6:5b:1d:22:9e:c2:dd:7d:12:27:43:69:9d:85:ea:51:
35:f7:80:2e:74:77:c5:ad:a8:d4:8a:b2:e6:ea:1c:0e:4f:d3:
3f:20:aa:8c:e2:1e:95:16:95:b0:4d:11:0e:fd:dc:06:78:00:
5b:09:09:da:ea:8b:95:32:8c:50:e4:d4:95:0b:21:b0:8e:fb:
03:0b:16:b7:d5:dc:ac:06:f8:2a:f3:f2:3b:f7:ba:a0:da:e0:
a7:f0:f9:98:9a:1e:de:f0:9d:bc:fc:d0:52:e1:a9:95:2a:16:
b4:7b:48:98:2f:64:d0:94:d8:1a:b2:e7:0e:7f:63:d0:1c:61:
53:79:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:50 2024 by rpki-client on console-ams.rpki-client.org