Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B6C4036404011EFB0A0EA84762E951A.roa
File: 5B6C4036404011EFB0A0EA84762E951A.roa (raw, json)
Hash identifier: gvcsgubdoawylESj2LbsspGPRT4hFo/Gzgt0+9PPBVc=
Subject key identifier: 73:F3:0C:07:8E:24:2F:92:D2:EB:CF:14:80:EA:F7:3F:A6:F1:F2:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9BC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B6C4036404011EFB0A0EA84762E951A.roa
Signing time: Fri 12 Jul 2024 11:17:43 +0000
ROA not before: Fri 12 Jul 2024 11:17:39 +0000
ROA not after: Sun 12 Jan 2025 11:17:39 +0000
asID: 138204
IP address blocks: 156.232.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39877 (0x9bc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 11:17:39 2024 GMT
Not After : Jan 12 11:17:39 2025 GMT
Subject: CN=669110d7-2ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:18:d3:05:9a:0f:9d:ea:b7:7b:3b:57:56:
32:b7:72:19:b7:28:08:0f:20:b8:ac:13:d2:53:01:
d6:63:18:ad:40:c6:3c:61:51:8b:2f:86:83:b8:8f:
03:ac:cd:39:e4:f3:45:aa:da:0c:61:42:80:25:ab:
8d:a9:f1:af:bd:a2:84:8f:08:07:76:7e:16:fc:6e:
a6:1a:70:a5:95:ca:3c:89:6e:57:88:fd:b7:55:0a:
99:f1:43:d0:28:fd:f9:a2:12:e5:eb:7e:a0:3b:dd:
4e:0f:8f:e9:b8:44:b3:d2:0a:46:22:76:54:cd:4f:
a2:d8:60:23:2a:f5:c5:74:04:4f:6c:2a:55:5b:84:
bb:0a:03:28:1c:1a:b7:3d:3c:b7:cf:aa:9b:89:9f:
60:40:a8:4f:38:a9:cc:67:fe:31:70:5b:93:1f:ce:
3f:d0:b4:49:6d:f5:49:b6:fa:b7:4c:0c:82:7d:2e:
41:46:96:e2:19:72:4f:07:a1:a4:eb:48:e1:61:fc:
3c:b9:7f:e8:bb:00:25:2c:4f:f3:4e:f5:26:4e:8c:
48:7e:aa:1d:21:24:16:47:38:06:a5:d8:9e:ad:db:
a4:9d:91:c4:51:cf:b2:b0:47:6e:e9:6a:2a:a2:63:
ee:8d:71:14:bf:13:02:00:a1:f7:76:2c:97:f1:84:
e0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F3:0C:07:8E:24:2F:92:D2:EB:CF:14:80:EA:F7:3F:A6:F1:F2:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B6C4036404011EFB0A0EA84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:06:af:c8:7c:ec:7c:de:a4:3b:99:b3:cc:d9:45:e9:7e:ee:
d8:89:fc:1c:de:09:22:03:2e:bf:83:dc:ff:ab:59:51:45:15:
18:ea:10:48:95:eb:99:47:90:17:45:1e:ad:1b:5c:c2:45:bd:
c2:9e:a1:29:8d:4e:14:34:c1:28:4f:08:82:fa:c7:37:37:b0:
df:09:9a:b6:45:8d:68:a7:ef:6f:7d:76:81:63:9d:f5:e0:0c:
e0:45:04:8c:52:5b:93:7e:29:a2:52:52:f8:3f:b6:6c:d7:25:
22:fe:f8:39:93:b9:d7:c7:12:52:8e:f9:46:fa:aa:5b:d6:1b:
3a:95:72:e5:6a:54:0b:6c:5a:7f:92:75:a5:f9:0f:10:97:1c:
60:93:aa:bb:bc:f9:8b:2e:9b:c7:85:5a:d0:e6:47:17:9d:c0:
f0:0c:a5:ce:0e:02:08:d1:f7:c3:24:99:78:1a:8d:4b:42:dc:
27:06:e4:e0:f1:81:ab:2b:f9:e0:7f:ad:b7:84:f9:8c:19:1e:
ae:23:19:b2:04:df:cd:13:3f:60:3e:b6:9f:f4:f0:0d:da:3c:
c7:82:70:65:c6:2e:93:83:69:f2:f2:c7:ef:3b:28:19:f1:75:
37:dc:84:08:c4:12:c4:61:84:30:be:b7:1f:27:18:25:0d:25:
82:32:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:04 2024 by rpki-client on console-ams.rpki-client.org