Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3634BF10FD2811EEB158BA2E017001B1.roa
File: 3634BF10FD2811EEB158BA2E017001B1.roa (raw, json)
Hash identifier: 32IbGW4MY49pbmHUEAhBjL6XT/R79ktkBrOAmZOPnkI=
Subject key identifier: BE:10:E7:FB:3C:6D:A8:B1:C0:9F:06:56:75:2A:60:6C:A6:FF:CB:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3634BF10FD2811EEB158BA2E017001B1.roa
Signing time: Thu 18 Apr 2024 02:06:05 +0000
ROA not before: Thu 18 Apr 2024 02:06:01 +0000
ROA not after: Sat 24 May 2025 02:06:01 +0000
asID: 211392
IP address blocks: 156.238.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33523 (0x82f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 02:06:01 2024 GMT
Not After : May 24 02:06:01 2025 GMT
Subject: CN=6620800d-ec68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:ef:3a:fc:a0:ea:2f:43:04:ef:ea:2e:6f:
60:18:8e:0e:22:24:7d:bc:31:f3:c7:22:ce:2d:65:
8d:23:2d:8d:c9:65:c3:e5:42:e7:dd:02:d5:69:71:
f0:b4:01:2c:ae:e5:93:57:cc:f4:1b:0d:c2:2e:86:
11:73:7f:c6:3a:9c:81:99:8c:99:c1:c9:bd:7c:26:
6a:2e:4d:1a:fa:62:93:73:f4:f5:3a:9f:21:6b:c4:
17:4c:ab:16:3b:ef:c5:07:70:5e:ce:24:1a:59:67:
f5:52:53:be:ff:80:a7:51:fd:b6:a0:04:1a:3d:a7:
3c:64:2e:09:61:e1:2b:b7:79:8e:13:29:0f:5c:69:
57:75:01:4b:9b:fd:00:31:be:fd:2e:c8:4e:97:e1:
2e:a0:3f:b3:d9:5a:d4:bd:e6:c9:8a:87:03:99:78:
c9:f4:82:5b:df:db:13:45:2a:84:7d:d6:d0:26:60:
0e:7a:f4:c3:80:9d:95:1a:32:92:83:87:04:14:45:
f1:46:38:6f:73:61:73:ed:38:da:1c:77:15:f4:47:
78:a4:b2:d6:cf:ba:b4:a7:5d:a7:a0:24:ae:9f:65:
14:1d:00:22:9e:9a:41:25:02:ca:46:94:df:02:04:
ea:f0:3a:81:ea:87:b2:47:dc:a8:51:51:cb:63:27:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:10:E7:FB:3C:6D:A8:B1:C0:9F:06:56:75:2A:60:6C:A6:FF:CB:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3634BF10FD2811EEB158BA2E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.19.0/24
Signature Algorithm: sha256WithRSAEncryption
47:df:d5:65:da:6a:8d:39:1d:e4:69:bb:b2:43:74:90:6a:e8:
ca:04:96:c0:a3:bf:9a:3e:3f:3f:1c:76:a7:bd:80:c8:d5:b7:
27:f2:50:9d:05:aa:58:c1:37:1a:66:6e:14:30:26:16:1a:f3:
5e:d8:33:09:fe:69:73:cc:90:a1:5b:d4:93:3c:0c:d4:27:62:
1f:55:82:1a:1c:82:46:21:1a:20:13:50:38:17:1f:ec:91:ae:
c2:e3:1b:26:bb:e5:b7:3e:84:6b:26:39:42:7f:d4:3e:8c:1c:
93:4b:30:a4:a5:38:ec:61:5c:9d:58:b2:d7:84:7e:b7:48:9f:
f0:51:4c:5e:06:99:b4:27:fd:a4:4f:13:23:8d:46:83:bd:c2:
03:10:0d:ff:c4:5b:04:ca:c1:b1:04:91:c3:48:0e:c2:71:2a:
35:3e:b6:e2:6d:d1:a0:f9:93:4c:82:f6:1f:99:0e:49:f8:5f:
ef:78:96:8b:5b:f1:85:5b:96:88:c7:16:b2:1d:12:68:17:39:
cd:f3:53:25:cf:43:39:4c:45:95:22:3f:82:5a:b7:18:f8:42:
dc:bc:6e:4c:89:e5:36:b8:8a:12:fd:62:ef:25:aa:d1:19:f2:
bf:d2:5b:24:64:60:17:6d:ae:64:0d:29:2f:6f:dd:69:65:15:
1e:8d:d3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:07 2024 by rpki-client on console-fra.rpki-client.org