Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4182F54A344A11EFB497ED79762E951A.roa
File: 4182F54A344A11EFB497ED79762E951A.roa (raw, json)
Hash identifier: q4sxzi484/9IwZ0fRihm6i0KeYBWf3AvpB5ETIxbIcI=
Subject key identifier: 41:D2:BC:D6:39:E2:3C:D6:E8:09:1A:F0:00:81:01:8D:B7:8B:68:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9596
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4182F54A344A11EFB497ED79762E951A.roa
Signing time: Thu 27 Jun 2024 05:58:20 +0000
ROA not before: Thu 27 Jun 2024 05:58:17 +0000
ROA not after: Mon 30 Dec 2024 05:58:17 +0000
asID: 984
IP address blocks: 156.245.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38294 (0x9596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 05:58:17 2024 GMT
Not After : Dec 30 05:58:17 2024 GMT
Subject: CN=667cff7c-7317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:44:d8:28:5d:d7:04:eb:9a:2e:40:03:75:27:
c6:88:78:f0:f2:60:fb:53:3e:8b:14:c9:db:0a:90:
0b:b6:fb:32:ff:19:36:80:ed:34:44:47:7e:9f:9e:
41:73:50:4d:1d:20:1f:32:c3:f3:1c:e4:20:63:59:
24:50:47:2f:ae:58:af:ec:d6:05:b6:5b:ce:fe:17:
2b:0e:0b:4c:a5:e0:c2:10:16:60:b7:8d:af:44:66:
8d:bb:98:9b:dd:23:f4:92:34:4f:05:a8:9b:61:ca:
9d:81:ea:a0:53:5d:f6:73:d4:fc:16:36:f9:e3:37:
17:66:72:4d:b4:79:f1:49:5c:f4:64:7a:3d:ff:2e:
db:7d:0c:d5:3e:6e:34:da:8a:5e:eb:b7:31:d9:e4:
79:14:6a:8b:b2:a6:7d:0d:9e:5a:32:8f:15:86:0a:
db:f2:f9:d4:eb:e0:6b:8b:7d:03:6e:a5:25:66:46:
d1:ff:a9:55:c7:97:9c:d7:d2:da:9e:64:ba:d0:7d:
0c:f0:a8:0d:a6:c3:8e:fc:13:ff:66:6a:94:10:ed:
64:70:ff:74:ef:95:2d:3b:48:56:75:20:dc:49:93:
6e:26:ec:97:27:53:1a:3f:ba:fc:09:0a:ef:44:33:
01:22:ba:e2:5e:fd:42:5a:2a:e7:cd:b5:b3:37:76:
57:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D2:BC:D6:39:E2:3C:D6:E8:09:1A:F0:00:81:01:8D:B7:8B:68:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4182F54A344A11EFB497ED79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9e:aa:e4:a0:f4:d8:d0:34:86:31:b0:0f:fe:95:d6:7e:7b:a1:
9b:7a:29:14:69:4e:d9:d3:a3:28:a4:80:3f:4b:1a:7a:fc:25:
dd:51:13:b9:e8:82:04:15:3e:0a:63:5e:b1:76:26:95:38:d8:
78:f9:cf:6a:4b:bc:6a:3d:2f:55:0f:76:bc:f3:40:d8:4d:cb:
b8:49:8b:62:fc:d2:b7:fa:61:7d:9d:74:98:aa:0f:60:f6:5d:
d1:13:6c:de:32:39:21:d5:c3:93:cd:6e:41:ee:59:fd:a3:50:
ed:72:1f:fe:52:cb:a9:ef:96:29:ac:e3:7a:15:5c:51:1d:b8:
43:b8:f3:f4:30:94:94:0d:a1:e8:73:48:48:3c:45:41:08:09:
c6:e8:00:a8:2b:9e:ca:76:e6:20:5a:da:a4:10:3f:14:1e:37:
d7:5c:89:9e:15:80:bf:1d:b8:48:4d:17:20:94:4c:3e:a0:86:
ce:a2:78:80:9b:4e:89:13:08:ed:e9:26:5c:66:ca:ff:f9:42:
32:89:c0:1a:d5:f7:4a:a0:f3:93:e3:9b:08:1b:e5:fd:e8:2b:
54:09:83:4c:3f:fe:6a:c6:1a:42:5b:8c:5a:b6:65:81:52:de:
70:a2:23:85:59:d4:2c:de:01:ea:4f:f6:d9:9d:86:e1:79:5d:
71:ce:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:01 2024 by rpki-client on console-ams.rpki-client.org