Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4A6272E0D511EEA23F1E8B775412E6.roa
File: 3F4A6272E0D511EEA23F1E8B775412E6.roa (raw, json)
Hash identifier: Vx5isasabmVOYgld8Nv0VLd3gzcMZVgMOLkAV/23xGE=
Subject key identifier: C2:AC:53:84:5F:72:DB:B5:1D:55:14:77:F8:F3:A6:72:5F:17:9D:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7E2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4A6272E0D511EEA23F1E8B775412E6.roa
Signing time: Wed 13 Mar 2024 01:01:39 +0000
ROA not before: Wed 13 Mar 2024 01:01:36 +0000
ROA not after: Sat 14 Sep 2024 01:01:36 +0000
asID: 197730
IP address blocks: 156.237.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32302 (0x7e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 13 01:01:36 2024 GMT
Not After : Sep 14 01:01:36 2024 GMT
Subject: CN=65f0faf3-35ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:da:d3:df:1a:35:d9:0f:6a:2f:4e:57:d7:3c:
cd:4b:6c:c6:84:c8:26:2f:82:e5:8d:6d:77:61:3a:
47:9f:14:79:b5:ce:ce:fa:86:65:5a:4f:19:e9:c7:
9a:04:82:e7:bd:51:2d:11:ba:54:26:27:37:57:28:
7e:cb:5c:a1:65:54:4c:7b:c3:29:ca:f8:96:a6:8a:
e7:48:26:7b:5d:c8:ac:98:e6:c1:dd:98:39:71:6b:
e0:14:7b:00:5a:03:89:3f:4b:8f:06:c3:b4:4f:a7:
69:bb:fa:d4:21:d9:95:65:30:3e:25:ea:23:cf:39:
b0:dc:37:2f:67:54:a8:20:ce:1f:ad:9d:6b:b7:c7:
26:20:a0:bf:ad:49:6c:83:59:51:65:e8:02:cf:08:
89:0f:de:9d:5f:ec:07:e1:aa:81:62:2a:30:c2:90:
65:e1:6f:9d:0d:1c:53:f8:1a:3d:89:29:35:36:a4:
90:9b:aa:7b:1a:58:81:7c:b4:e1:37:18:64:fd:f8:
3c:af:b9:7c:fa:fc:96:d2:5e:ba:66:d2:28:00:59:
d9:62:e3:61:98:2e:8f:8d:28:9b:f3:92:59:f2:4c:
83:47:7a:c9:4f:ee:a8:b1:ef:da:a7:0d:fb:0e:b9:
ee:e5:d5:3e:bf:92:92:76:b0:4a:ef:90:ac:ba:d3:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AC:53:84:5F:72:DB:B5:1D:55:14:77:F8:F3:A6:72:5F:17:9D:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4A6272E0D511EEA23F1E8B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.24.0/21
Signature Algorithm: sha256WithRSAEncryption
94:ce:94:5b:d7:ec:9a:ac:39:a5:fe:83:d4:a1:8e:2f:5e:a7:
56:71:0f:2b:b1:d6:77:91:81:af:27:f0:f5:f2:48:2e:e8:e9:
d2:28:3b:8a:1c:fc:1f:d1:b9:47:e2:cd:f9:97:d6:fe:30:d3:
64:a5:37:c4:6c:2d:6a:d5:f8:1b:a0:7c:44:56:4c:cd:78:ed:
b8:79:3a:15:5c:bd:09:de:ce:4b:fd:94:92:f8:e5:00:0a:4e:
4f:83:5d:ff:33:87:e0:ba:e2:ae:45:12:25:34:87:45:64:e1:
69:ed:2d:07:c5:b0:e6:6d:ba:f6:96:ee:31:5d:9f:f9:4e:6c:
df:78:f9:df:ac:91:2d:e6:c0:a2:92:30:b5:ff:19:51:7d:8f:
a2:c4:fb:a6:84:33:ae:2b:0f:35:bb:c8:29:9e:93:08:58:d4:
58:d9:e6:de:b1:e7:ed:5b:d7:92:35:6e:ce:6c:c9:b6:59:87:
b2:1d:05:6b:c8:09:55:92:b1:db:e1:c6:57:52:66:f7:d5:92:
3d:22:aa:f6:f1:39:26:9a:16:c9:d3:e3:8a:10:29:92:ca:96:
fc:b4:e0:ba:4c:0b:cf:0b:f6:6d:a5:81:89:4a:38:f4:b5:05:
3b:cd:87:02:a0:4c:56:12:1c:72:0c:e2:3e:fd:c0:22:31:9e:
ff:af:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:07 2024 by rpki-client on console-fra.rpki-client.org