Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/395FF372007E11EFB50F7467017001B1.roa
File: 395FF372007E11EFB50F7467017001B1.roa (raw, json)
Hash identifier: bHvR+MZHhSBqGZ7o0/semniLAqLIadOB5+Hwr9pFCD4=
Subject key identifier: 08:76:29:C5:BA:7F:BA:CA:96:C4:B5:98:24:75:B2:10:60:F8:33:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 83B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/395FF372007E11EFB50F7467017001B1.roa
Signing time: Mon 22 Apr 2024 07:59:20 +0000
ROA not before: Mon 22 Apr 2024 07:59:17 +0000
ROA not after: Mon 20 May 2024 07:59:17 +0000
asID: 140869
IP address blocks: 156.225.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33719 (0x83b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 07:59:17 2024 GMT
Not After : May 20 07:59:17 2024 GMT
Subject: CN=662618d8-26ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:b9:a8:14:f4:f1:3b:98:9d:30:be:63:44:
44:50:d3:6d:0d:40:92:82:4c:06:72:76:17:aa:62:
2c:2f:bf:e0:bb:38:de:56:c1:a0:9c:6f:14:8e:8e:
5e:d8:27:ec:c0:73:73:d9:56:fa:76:bb:a7:a2:20:
fd:fb:ec:6b:83:92:38:c9:19:61:09:51:83:5c:c5:
7e:fc:0f:25:45:20:1e:b6:e4:39:85:2f:e9:59:67:
9c:cc:5e:88:da:c7:a1:85:1e:91:7f:c4:da:38:61:
06:c6:c0:03:4e:ab:2c:04:5b:1f:15:cd:8a:44:0b:
4a:04:09:18:ac:d2:52:74:42:dc:90:c6:77:e9:40:
1a:b2:8d:7d:03:f4:20:e3:9f:0a:74:bb:68:1c:07:
ac:e7:b3:b1:f8:41:f9:58:2b:5a:e3:3d:1c:b4:99:
e1:7b:23:bf:b6:50:0b:11:d6:5e:55:35:e2:4a:66:
53:a7:38:e4:2c:3e:27:64:52:7e:7a:82:af:1c:56:
92:23:5b:45:4c:b0:95:cb:0d:49:99:a1:d6:74:45:
47:83:81:9f:d9:62:ec:0e:5f:90:4b:ac:d8:5b:e1:
34:87:54:24:b2:8f:0c:3f:3d:73:02:c6:26:d1:a1:
00:94:88:86:27:e5:e2:f2:3d:67:82:76:05:30:e9:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:76:29:C5:BA:7F:BA:CA:96:C4:B5:98:24:75:B2:10:60:F8:33:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/395FF372007E11EFB50F7467017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.87.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1f:2f:b7:06:9f:83:83:3b:4f:8e:18:7e:40:7c:79:bc:68:
ea:65:72:12:90:08:8e:8d:fb:c6:3c:a3:cb:e4:e7:a4:5f:f8:
a3:c2:2d:6c:61:51:9a:02:15:a8:66:41:d5:01:2b:e1:b9:1c:
b1:0f:ed:eb:8e:9c:13:09:13:da:50:9c:da:e6:65:e1:f8:14:
35:f6:82:84:6b:a6:af:7b:04:e4:ea:bd:57:64:d1:02:f7:cd:
59:75:77:f8:50:fb:1c:2a:ce:3d:a4:37:b8:6f:ee:a7:a6:fc:
54:62:55:b5:fc:64:e3:81:1b:d1:4d:98:4b:25:e6:9a:f5:2a:
20:65:32:8b:33:41:cc:5d:79:69:74:1e:e2:8e:8f:44:52:68:
73:fe:94:42:d2:a8:b2:d6:94:95:fa:bb:64:c5:26:78:7d:ee:
08:d9:78:34:f1:52:4e:ec:ba:a0:e7:1b:f4:34:1a:b7:f6:bd:
2b:8e:1c:4f:71:b6:01:df:b3:c7:de:8e:c9:f2:2c:99:10:92:
e7:99:10:e0:78:09:48:b6:8c:2b:98:00:b0:1b:d6:be:4a:95:
02:d0:14:9a:86:cc:f8:7c:3c:b8:87:1b:86:15:0c:ef:67:17:
8e:89:30:c3:2b:b3:3b:b5:f3:9e:67:a9:47:59:97:d0:a3:49:
85:66:60:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:07 2024 by rpki-client on console-fra.rpki-client.org