Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48DB4CD62D4F11EF9B56F5E47CDC24C2.roa
File: 48DB4CD62D4F11EF9B56F5E47CDC24C2.roa (raw, json)
Hash identifier: qfKaSfTx+zF4y8Hgqgvh6Ox/tviVRAqya5czCIen8xE=
Subject key identifier: 88:DF:BF:AA:12:2A:E2:AD:93:2E:EC:30:50:0A:53:0A:B8:AE:58:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 927C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48DB4CD62D4F11EF9B56F5E47CDC24C2.roa
Signing time: Tue 18 Jun 2024 08:46:42 +0000
ROA not before: Tue 18 Jun 2024 08:46:39 +0000
ROA not after: Fri 20 Sep 2024 08:46:39 +0000
asID: 398704
IP address blocks: 156.227.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37500 (0x927c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 08:46:39 2024 GMT
Not After : Sep 20 08:46:39 2024 GMT
Subject: CN=66714972-b8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:31:84:c3:4b:2d:59:0a:0b:50:7c:2c:be:
e5:11:28:ad:26:52:e3:27:d9:cd:3a:d5:65:44:c9:
9b:3c:53:fb:7f:62:5c:6f:91:98:45:e7:77:54:93:
2a:9c:43:3e:53:24:f5:0e:30:6d:c4:78:07:ae:12:
99:79:88:bd:dd:5a:2a:41:c8:32:ce:d3:b9:07:17:
8f:20:04:84:f1:72:11:1d:68:b5:42:07:bb:50:c9:
2b:20:2c:c8:c7:94:6d:b9:77:4d:03:25:7a:7e:ce:
d7:30:1f:1d:a1:64:99:c2:49:e3:b7:fe:6b:8c:c3:
74:4c:5d:45:c9:2a:c6:4b:7a:18:95:c9:9e:c5:39:
56:ce:ee:e9:e0:b8:98:5f:21:9c:f8:4d:90:0d:de:
c5:62:ac:ea:d0:5f:b5:e7:66:54:ac:06:be:69:45:
30:73:88:2e:c0:e0:1b:06:9d:fe:4e:cb:a1:4a:c6:
63:07:64:24:1a:37:35:16:0f:bb:2d:0a:6c:18:d4:
75:51:bc:76:b7:94:11:08:c3:3a:c1:c3:cc:90:93:
db:5a:38:7e:5f:df:8c:14:eb:1a:8d:91:52:51:5c:
a7:c3:43:14:66:a6:a4:58:6c:19:1a:b1:b2:03:9a:
e6:42:12:e8:a4:f7:ab:77:20:41:4c:64:2a:29:7d:
b0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DF:BF:AA:12:2A:E2:AD:93:2E:EC:30:50:0A:53:0A:B8:AE:58:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48DB4CD62D4F11EF9B56F5E47CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.13.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8e:2b:5a:9d:93:ba:fb:a6:91:0e:8a:55:42:16:a4:d3:04:
3a:bc:c3:5e:e2:eb:94:92:85:46:b1:dd:4c:79:74:66:2a:4a:
61:c5:65:fc:25:5e:d1:c1:08:bc:37:33:c8:97:6f:a6:c8:f4:
92:e1:cf:6c:71:ec:ad:b8:1a:cf:54:6e:4d:bb:30:f6:96:bd:
fe:97:4b:36:de:65:8c:bd:a4:a0:78:75:82:32:d2:1b:f7:ad:
7f:ee:d8:c0:dd:46:e0:f6:8d:86:d0:da:ca:7a:af:30:d0:83:
91:f1:f6:ec:fa:25:f2:04:ac:46:ec:62:01:9f:8f:0d:d2:43:
9d:ae:04:62:37:1d:0f:00:b4:eb:85:25:c1:ce:d5:35:f0:dc:
fd:b5:13:4e:34:23:19:7d:df:64:33:af:01:f2:54:1b:5a:83:
dd:cc:ef:84:f1:97:01:3b:43:ea:ae:82:1d:fd:24:c8:28:2a:
ff:86:4e:d6:4c:47:bf:8b:60:1a:c1:84:63:e5:b8:05:8b:6c:
cc:db:88:5d:54:4e:34:13:cc:15:7e:ea:0f:3d:42:a1:15:d1:
a7:7b:ea:32:16:b1:61:5f:de:44:7c:55:9d:bd:fd:d6:e5:4c:
18:83:b6:36:3b:79:14:0b:2e:a2:fd:c0:cb:ec:d5:6d:15:6a:
49:c3:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:02 2024 by rpki-client on console-ams.rpki-client.org