Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/624BF25A2AE411EFA49F9FF77CDC24C2.roa
File: 624BF25A2AE411EFA49F9FF77CDC24C2.roa (raw, json)
Hash identifier: frKqlWAVvzg4z1RcUqUbbQHKe73F2NgfEikzIoSc+XU=
Subject key identifier: 12:DF:05:96:09:3F:77:81:E3:01:2F:8D:2F:56:0A:D1:AE:AA:21:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 923E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/624BF25A2AE411EFA49F9FF77CDC24C2.roa
Signing time: Sat 15 Jun 2024 06:56:26 +0000
ROA not before: Sat 15 Jun 2024 06:56:23 +0000
ROA not after: Tue 17 Jun 2025 06:56:23 +0000
asID: 137263
IP address blocks: 156.236.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37438 (0x923e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 06:56:23 2024 GMT
Not After : Jun 17 06:56:23 2025 GMT
Subject: CN=666d3b1a-5f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:7c:f2:c4:7a:f3:76:9e:54:39:c5:f9:0a:
08:47:c5:32:d5:1c:40:57:17:c5:55:04:05:e1:b3:
d2:03:a3:4f:59:b2:b3:ad:9d:b6:91:47:b5:3d:45:
37:28:c2:46:5c:98:79:4e:25:ab:7d:a2:1f:b4:73:
bb:75:41:45:1e:49:2a:73:44:44:6b:64:14:b8:b4:
84:46:58:d2:3d:f0:14:70:74:31:4e:d7:01:6a:7f:
d6:17:a5:ce:1e:11:62:7b:8f:0f:bd:ff:79:af:23:
59:e6:dd:f4:c7:32:8a:75:58:ed:2c:6a:bb:3e:d8:
eb:e2:a9:28:4c:5e:fe:01:93:e5:1c:7d:89:7f:82:
68:70:02:26:03:1c:a7:dc:bb:c3:07:98:28:8a:d8:
dd:f9:f8:4e:ae:f1:29:49:48:a0:d6:fd:10:34:e7:
a1:cd:f7:b3:77:84:be:7d:d5:07:0b:c6:0b:72:ca:
9b:39:4f:c6:07:ac:63:7a:89:bf:a3:2d:45:b4:1d:
11:5c:bd:12:1e:cf:e1:5b:95:1d:35:4c:8b:c4:75:
69:8d:18:9a:8d:78:46:72:73:bf:08:77:10:f5:73:
15:2e:ea:bc:35:32:45:47:e6:2f:dc:b9:7f:2e:6e:
b2:5a:c9:99:d5:b9:e2:a7:f5:03:d2:69:0b:74:97:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DF:05:96:09:3F:77:81:E3:01:2F:8D:2F:56:0A:D1:AE:AA:21:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/624BF25A2AE411EFA49F9FF77CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.16.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5b:ec:54:15:8c:5e:40:14:af:2d:e6:c6:dc:7c:c8:38:1c:
4d:37:bc:bf:37:86:91:d2:c4:3f:ce:60:ef:35:82:26:60:4b:
c6:4d:4a:01:df:33:3b:45:c9:fb:f0:a5:b1:16:78:b0:24:61:
b5:79:7e:05:65:af:3c:77:f8:dc:76:16:c5:75:c1:02:c9:6f:
f3:ef:62:3c:e7:28:11:cd:83:e2:db:1d:fc:56:d3:71:34:2e:
91:39:f3:b5:42:46:62:01:a9:21:27:70:1a:74:f6:fc:76:90:
e1:39:6a:06:34:47:04:8d:9d:11:85:b6:55:7e:8c:3a:90:ff:
dd:fc:e4:93:b6:7a:a2:42:6f:da:27:3f:63:df:7b:f6:f1:8c:
9d:6b:13:a9:cc:b3:af:c4:e7:d1:c3:25:52:7c:ae:67:8d:78:
db:84:61:76:d7:13:da:55:e5:44:ae:a9:d9:5e:5e:4c:50:94:
7b:05:4e:9a:f4:5f:9c:bd:94:54:95:0c:7b:fb:90:1d:a2:8d:
b8:c1:44:f1:d2:31:72:eb:c7:7a:81:23:5d:72:aa:32:17:5b:
11:9b:bd:ae:33:e9:74:6f:bd:87:0a:39:c9:f1:02:cd:e9:fb:
d9:ec:7c:fe:fb:84:73:b9:dc:1f:07:13:10:68:34:7e:25:0e:
66:c2:35:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:34 2024 by rpki-client on console-fra.rpki-client.org