Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B7FC02A912311EF8C07984F762E951A.roa
File: 3B7FC02A912311EF8C07984F762E951A.roa (raw, json)
Hash identifier: qDeS3AbgaMLvsqfsQTSm8E6/cGwpV5GT0w9pCXaTmuE=
Subject key identifier: 12:F8:C4:B6:B3:DD:7C:1D:EC:92:B7:72:B4:BE:6C:CA:C3:69:C2:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C7D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B7FC02A912311EF8C07984F762E951A.roa
Signing time: Wed 23 Oct 2024 09:43:18 +0000
ROA not before: Wed 23 Oct 2024 09:43:14 +0000
ROA not after: Fri 29 Nov 2024 09:43:14 +0000
asID: 203020
IP address blocks: 156.235.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51159 (0xc7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 09:43:14 2024 GMT
Not After : Nov 29 09:43:14 2024 GMT
Subject: CN=6718c536-10d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:bf:b5:a5:91:06:39:8e:8b:20:02:64:fa:
0d:d4:13:27:dc:28:1d:19:91:ec:d5:06:fc:9f:0c:
ef:c0:81:e2:16:71:36:ae:06:31:23:ba:02:d1:54:
1b:c4:d5:38:9d:76:50:50:6a:27:28:5d:bf:7b:c3:
8b:33:64:da:57:f9:3d:2f:c3:06:ef:75:04:28:e7:
91:67:c8:3a:d4:50:c2:de:bc:8a:2d:f4:73:7e:f1:
d0:b5:f3:0e:02:f3:1f:0c:67:2a:7a:aa:2d:19:84:
94:3c:cb:01:25:64:10:43:c7:ad:32:6f:be:c1:7d:
66:dd:06:6a:b0:f7:47:85:5d:1f:3b:8e:db:ac:33:
a2:88:a5:73:10:0d:59:5d:f0:da:10:85:04:0e:e4:
df:a7:9d:8b:dd:49:1d:7f:1d:23:5f:bf:96:7c:50:
08:7f:a6:64:da:1b:24:32:36:41:76:e7:03:1b:aa:
5c:cb:cf:ea:8e:fb:23:e6:99:4f:e6:1c:48:cd:6d:
58:3b:41:c3:79:a4:3e:9b:8d:14:ce:24:af:a7:7c:
33:50:08:9a:ad:7a:10:14:ad:c3:a5:a1:46:27:b0:
7b:69:28:7c:03:3f:e2:1e:38:d8:d7:9d:cd:7e:a5:
fe:6b:8f:95:70:86:d4:d5:98:a9:cc:25:3b:62:61:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F8:C4:B6:B3:DD:7C:1D:EC:92:B7:72:B4:BE:6C:CA:C3:69:C2:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B7FC02A912311EF8C07984F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.30.0/23
Signature Algorithm: sha256WithRSAEncryption
85:7f:73:ec:e9:e9:a8:53:02:15:f9:a3:60:dd:d5:9f:11:d9:
28:a6:20:24:43:30:bb:70:ac:41:98:15:7e:b7:0f:31:7e:4f:
e0:b4:11:c0:e6:6e:21:38:7f:3d:78:20:7e:e7:3a:a5:20:4e:
90:40:da:bc:1e:85:a0:82:5e:69:ab:8f:65:ce:8c:64:a0:b6:
2c:ff:e4:2f:f1:e0:5f:96:fd:a3:ba:3d:af:11:13:c9:85:04:
f8:16:cb:da:25:30:41:a7:a2:4d:97:73:e4:d6:2a:e1:35:d9:
47:15:e4:49:82:fa:d3:9d:a3:68:f5:9b:d3:81:0a:e2:9f:9b:
d8:0a:e6:5e:dd:fe:75:8b:aa:cc:ce:a1:db:e5:26:8e:d3:ec:
07:04:93:9a:76:75:c6:79:7b:f4:bf:a2:70:65:a6:87:a0:e3:
15:39:06:47:48:ef:b7:db:4f:ef:0f:2c:d4:56:a1:04:74:95:
94:e7:87:b8:aa:3b:88:38:ce:50:9f:ab:79:22:cf:3b:3d:cd:
36:cd:ec:a2:10:ef:7d:79:79:38:a0:b1:0b:72:8c:09:fa:ea:
79:76:4a:87:13:60:30:c6:58:d9:3e:4a:a5:53:96:f6:6a:d9:
0c:0d:3a:b1:d0:d4:e9:79:b8:dd:29:1f:2d:82:0a:29:05:d5:
7f:66:21:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:26 2024 by rpki-client on console-ams.rpki-client.org