Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D079A2A02DA11EFAE6FBA28017001B1.roa
File: 4D079A2A02DA11EFAE6FBA28017001B1.roa (raw, json)
Hash identifier: w3wg8PTYMgP56BA1NhofN2Opi9TluPji5g/jBqs5TII=
Subject key identifier: 44:51:0C:4D:26:84:B7:C0:62:49:34:C3:32:2C:46:97:96:E7:E7:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D079A2A02DA11EFAE6FBA28017001B1.roa
Signing time: Thu 25 Apr 2024 08:03:29 +0000
ROA not before: Thu 25 Apr 2024 08:03:26 +0000
ROA not after: Mon 27 May 2024 08:03:26 +0000
asID: 212042
IP address blocks: 156.245.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34029 (0x84ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 08:03:26 2024 GMT
Not After : May 27 08:03:26 2024 GMT
Subject: CN=662a0e51-5575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:43:b4:21:94:16:b7:c8:8e:6c:7c:43:ed:
ad:1d:e3:0a:ea:29:e2:1e:db:84:d7:ad:4f:f5:4d:
2d:31:6c:90:16:7d:b7:cc:89:00:3d:e5:59:6f:14:
67:4a:39:c6:a9:b4:5e:85:38:f6:0d:28:79:dd:f2:
ee:ec:db:d0:b2:6b:bb:ef:6d:bf:76:59:ca:dd:8f:
39:a8:e3:81:4a:a9:86:51:2c:9b:87:88:29:33:67:
63:a6:71:58:c8:7e:71:23:b2:bf:ac:11:06:3e:e3:
04:78:2d:1f:77:70:bb:2a:35:e8:8b:1b:ba:ca:b4:
9c:62:7e:16:50:44:a5:3b:54:ab:f2:4f:0d:55:58:
8c:8d:2b:23:6c:23:a2:d3:56:9a:58:73:65:cd:20:
02:84:b1:f6:87:fb:23:4e:5c:c3:b5:71:72:86:09:
11:93:92:2f:b7:79:50:0b:ae:c2:39:40:18:31:4f:
38:56:29:c2:a1:cb:52:0d:1d:89:68:25:cc:5a:75:
a7:fc:1e:14:6c:e5:38:fa:ac:ef:ec:3c:79:eb:25:
e6:84:92:f1:76:3c:f5:a7:a7:3c:f0:64:d4:90:42:
d3:82:e1:d8:e2:3a:e7:cc:f4:ba:89:62:4e:b0:de:
2e:f1:eb:3b:cc:a2:c6:67:19:72:5c:c8:ef:57:59:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:0C:4D:26:84:B7:C0:62:49:34:C3:32:2C:46:97:96:E7:E7:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D079A2A02DA11EFAE6FBA28017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.3.0/24
Signature Algorithm: sha256WithRSAEncryption
38:fd:87:62:f7:a8:3e:4b:da:47:f1:70:9f:9d:de:b6:e3:fa:
fd:43:4a:3d:43:1b:14:63:a9:fc:f5:7c:d9:fb:10:fa:4e:44:
bc:c5:d7:4d:18:94:df:33:8a:b5:cc:81:52:db:56:b0:84:b7:
26:e1:b1:5a:75:2e:1a:ef:ab:61:ce:39:cc:7b:e4:f5:37:de:
22:ad:0e:8c:ee:6f:e3:4e:af:46:36:ff:ef:b2:da:ac:a4:d1:
54:f1:23:19:c0:8e:4d:b2:6c:97:7d:a0:c1:12:33:b5:69:8c:
c6:f8:05:91:77:8c:62:17:7f:68:9d:e0:b4:98:b5:0f:38:c0:
61:1e:06:cc:b6:57:6f:86:88:76:2c:0d:de:6f:c1:3e:27:ea:
e5:ba:12:fb:04:4c:7a:fe:57:65:77:c5:98:d2:ef:ca:2c:2f:
71:1f:9d:02:d7:8d:a7:2b:77:38:bc:d2:a8:77:fd:2b:2d:05:
59:7e:aa:48:64:62:66:92:12:79:66:f1:40:b0:04:6b:b9:e4:
3a:1a:cc:d0:11:01:c9:50:47:92:4f:95:e3:18:09:57:14:84:
c9:e8:88:8d:5e:68:15:e7:1c:00:9d:14:6d:95:97:0b:21:b7:
44:a6:3b:6e:b3:b9:63:18:a2:68:f8:df:81:ad:b9:70:fc:c6:
ca:51:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:08 2024 by rpki-client on console-fra.rpki-client.org