Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/312B81CC1D1011EF8072CC2B7DDC24C2.roa
File: 312B81CC1D1011EF8072CC2B7DDC24C2.roa (raw, json)
Hash identifier: yP41mXPR4X8wK6g3KBwUXE/mBUZWZJPDg/RM7hgQ2Vc=
Subject key identifier: 01:63:F9:46:5B:25:0D:A2:25:93:E5:D7:F7:EA:1D:C4:C8:4D:6E:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/312B81CC1D1011EF8072CC2B7DDC24C2.roa
Signing time: Tue 28 May 2024 16:34:45 +0000
ROA not before: Tue 28 May 2024 16:34:42 +0000
ROA not after: Sun 29 Dec 2024 16:34:42 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36012 (0x8cac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 16:34:42 2024 GMT
Not After : Dec 29 16:34:42 2024 GMT
Subject: CN=665607a5-0872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:7c:ab:6a:a1:5a:e5:e6:63:f8:c4:ef:b4:
61:67:56:eb:1b:d4:1a:4f:e9:15:0b:1d:53:5c:96:
54:7f:5b:3c:ec:fc:1c:25:4e:30:9c:91:29:4b:37:
72:bb:22:5e:5c:10:07:c4:ba:49:14:08:45:b9:06:
eb:21:1c:41:21:ea:de:b6:49:1a:af:27:bf:bc:94:
89:57:61:6d:19:a5:be:25:7d:5c:0a:a0:ce:14:b6:
ae:a2:e3:f7:5f:83:16:31:f2:3a:80:32:77:a4:28:
f4:9b:16:89:61:12:87:9f:98:16:f4:cd:44:51:6b:
04:c5:07:50:cd:f1:9c:ed:ba:07:03:78:cc:d7:59:
86:b2:31:82:4f:66:6f:74:d8:ca:60:0b:29:2c:71:
1a:a0:66:ed:10:3a:6f:a5:d2:92:19:36:57:d6:a5:
84:cc:76:48:63:11:60:c9:2f:6a:11:e8:75:2a:d2:
4d:0e:3f:69:80:de:6c:be:c3:88:a8:ff:b8:9d:5f:
29:65:e5:4a:ef:4e:a9:51:a0:5e:26:34:bb:bb:63:
14:07:2c:e0:d5:84:f7:5d:c3:2e:f2:7c:d6:56:ee:
e6:07:c8:3c:e6:d8:b9:2a:01:af:89:aa:9d:e9:bf:
98:89:9a:5c:ee:7e:fc:ec:82:9f:d4:c2:99:9a:64:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:F9:46:5B:25:0D:A2:25:93:E5:D7:F7:EA:1D:C4:C8:4D:6E:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/312B81CC1D1011EF8072CC2B7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:42:8f:6c:d5:4c:e6:6b:41:68:64:ed:f9:fd:a2:6d:6b:de:
05:dd:1f:2d:da:0c:11:ae:8c:66:23:84:c5:ee:af:50:67:ca:
35:84:a9:ed:a1:f7:c2:05:32:ff:19:5e:14:a6:94:50:90:59:
90:c4:69:b2:33:47:75:08:38:ed:fc:15:5a:25:15:35:c8:72:
d4:2e:d9:33:20:fc:36:b5:5e:35:d6:e5:a7:4a:db:3a:ac:35:
84:94:a8:50:b6:30:82:38:80:ac:a2:85:2f:4d:de:2a:42:d6:
2b:a5:24:09:d0:a8:b9:d6:09:9a:eb:5e:9f:11:bd:42:ff:cb:
a7:ad:29:3c:88:2d:0f:7c:1b:cf:c2:67:1d:a7:4f:44:e8:c8:
e0:53:cc:fd:1f:d8:08:b6:a8:f5:64:9b:18:c6:47:44:23:35:
09:7f:24:a2:96:7f:a0:76:3b:98:96:86:97:ec:99:65:12:12:
a6:a2:fd:70:51:cf:11:1b:55:82:6d:5f:cb:bb:ff:af:4f:aa:
4f:30:b3:3c:07:37:e3:38:cb:be:ac:47:b6:9e:76:0b:f6:14:
ee:17:ac:b2:05:1b:e1:c4:a5:a6:4b:82:a3:47:d2:cc:e3:e8:
88:a2:14:f7:7e:2b:44:81:6b:20:a7:c6:54:39:28:ee:24:96:
f6:62:dc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:11:59 2024 by rpki-client on console-ams.rpki-client.org