Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3548651E800B11EF8FA6D17C762E951A.roa
File: 3548651E800B11EF8FA6D17C762E951A.roa (raw, json)
Hash identifier: +VlEodv+LCG7X9VOdHTHv/1f2h86dVKQsrf7lGAe4y4=
Subject key identifier: 33:BB:19:0B:D4:6C:7E:B0:91:6E:A6:8B:2A:95:4C:BD:EA:8C:1C:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BDFC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3548651E800B11EF8FA6D17C762E951A.roa
Signing time: Tue 01 Oct 2024 15:38:30 +0000
ROA not before: Tue 01 Oct 2024 15:38:26 +0000
ROA not after: Mon 25 Nov 2024 15:38:26 +0000
asID: 135330
IP address blocks: 156.227.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48636 (0xbdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 15:38:26 2024 GMT
Not After : Nov 25 15:38:26 2024 GMT
Subject: CN=66fc1776-41e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:c8:ac:8f:85:d6:ef:c2:92:1f:e4:0f:7f:
e6:d2:92:0f:c9:9f:07:f0:4f:ca:5b:a6:fc:ec:da:
ec:0e:59:38:3e:76:5f:71:5b:95:9e:99:bf:44:9f:
81:32:85:24:3c:e1:05:90:0a:5d:36:3a:0a:cc:92:
65:13:2a:25:bd:c4:fe:8c:cf:e9:88:f9:69:f2:17:
0d:51:f1:1e:34:c2:94:66:70:05:38:e4:2f:2d:ef:
ec:d2:b6:65:56:4b:f5:11:99:fe:25:0a:ed:f4:da:
58:e1:76:43:bf:62:b0:38:10:3c:76:ee:d3:4c:f0:
d7:ca:50:94:f0:2d:78:b1:74:58:32:19:e1:b4:35:
4a:45:bd:c4:c5:8b:ec:e5:7a:51:8c:c7:d5:5d:96:
b4:67:c5:9a:65:af:a0:f5:e2:93:d0:de:e5:d1:31:
92:74:09:55:cc:42:4a:7f:90:68:35:5c:84:a8:8a:
53:24:39:f1:12:09:09:99:58:97:61:b1:9b:c3:78:
3a:5a:dc:a6:65:5c:08:f9:85:73:98:0c:49:09:a5:
10:ab:94:59:51:e7:58:0f:c0:99:9c:8c:a6:8d:6b:
fe:07:ff:bc:8a:2e:1d:1d:62:86:d1:5a:08:76:e3:
a9:41:71:b0:75:19:4a:b7:26:b4:eb:8b:aa:82:f9:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BB:19:0B:D4:6C:7E:B0:91:6E:A6:8B:2A:95:4C:BD:EA:8C:1C:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3548651E800B11EF8FA6D17C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.6.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ed:9a:e3:11:d9:e1:2f:32:53:45:c9:e0:2b:ab:aa:42:8c:
92:38:b5:6f:96:5b:77:6e:7a:7b:9e:e3:88:b5:a4:96:ac:ea:
51:81:85:aa:43:f3:d6:bd:ea:d5:0a:6d:2e:7c:2d:37:8d:d7:
40:d3:38:1f:0d:12:c4:15:ae:86:b9:33:6b:23:56:3b:34:ae:
88:bd:e9:7b:08:61:97:fb:d1:1f:18:1f:34:f2:de:28:77:a7:
3d:03:37:66:62:a5:7c:bc:75:ca:70:6e:47:85:5f:50:fe:3b:
a0:dc:56:a7:0d:8b:2b:ba:58:53:67:ab:e5:33:8a:8c:b2:ee:
f7:4e:73:20:9a:02:54:a5:56:fe:fd:00:3d:ac:79:00:9d:8e:
8a:e2:8e:6d:b7:37:4f:1d:c7:9a:4d:df:fd:5f:9b:96:d6:7f:
a6:55:c0:a6:f6:a0:f6:21:35:56:ee:d9:d7:1c:84:04:ca:40:
d4:d9:a9:86:fb:74:3a:33:08:a3:6d:32:e5:78:ac:de:4d:b9:
0c:89:4e:38:47:a4:e5:19:7f:a3:ff:20:cb:d3:c7:04:4b:99:
13:12:11:24:ee:e7:59:2c:67:10:86:3c:55:a6:30:e8:d3:ef:
7b:81:be:d5:bb:e5:61:90:88:51:d3:76:1a:cd:5a:58:9f:80:
46:b7:5d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:24 2024 by rpki-client on console-fra.rpki-client.org