Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B372B84353211EF942D57A2762E951A.roa
File: 6B372B84353211EF942D57A2762E951A.roa (raw, json)
Hash identifier: zZfm1YerOsTfk+73tAy17/XyeaT/uINHguzQPnsfdvk=
Subject key identifier: 09:D3:45:E4:88:B3:89:77:EC:8D:26:BF:C9:07:71:04:DC:1D:86:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 95E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B372B84353211EF942D57A2762E951A.roa
Signing time: Fri 28 Jun 2024 09:40:14 +0000
ROA not before: Fri 28 Jun 2024 09:40:09 +0000
ROA not after: Fri 27 Sep 2024 09:40:09 +0000
asID: 135600
IP address blocks: 156.249.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38371 (0x95e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 09:40:09 2024 GMT
Not After : Sep 27 09:40:09 2024 GMT
Subject: CN=667e84fe-d5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:1c:96:fb:7c:df:26:58:a3:8c:59:0f:26:
fc:3f:a0:6a:64:94:51:53:31:f4:34:ef:81:92:e9:
6f:f7:7b:ab:a0:11:df:c8:91:5b:f6:12:6d:b2:c7:
02:0e:18:e7:c2:51:8a:b5:b3:8f:02:0e:6b:83:19:
2b:db:1a:f8:a3:ef:3b:02:bf:1b:85:4b:b0:e7:d9:
0f:b5:38:ae:cf:50:c9:0a:c6:dd:43:3b:f8:06:97:
4f:50:cc:1c:46:0b:12:99:c0:ad:62:1a:55:b5:5a:
8f:c1:ce:4e:a4:3a:05:d8:25:26:6c:61:54:24:9f:
62:3a:32:48:c7:9a:b1:e9:47:85:0b:2d:06:0f:64:
86:4b:c8:df:0c:c7:b9:9c:43:f1:34:fe:49:2f:56:
f9:42:04:df:ad:11:f7:f1:63:09:0e:cf:4b:92:20:
d3:59:36:85:13:fd:46:9a:9a:57:2c:22:f1:b7:d6:
24:57:64:a9:0d:02:35:09:39:4f:66:82:03:51:f9:
e1:f8:e5:54:f6:d2:33:32:bc:26:26:c8:40:b6:8b:
bd:83:de:65:02:28:3a:2e:68:3f:d0:c1:bc:b5:2f:
70:6c:55:82:82:64:61:d5:9e:f6:0a:42:91:07:d6:
d8:31:fe:67:9f:3a:e9:d0:e4:3c:5b:04:b9:9c:33:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D3:45:E4:88:B3:89:77:EC:8D:26:BF:C9:07:71:04:DC:1D:86:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B372B84353211EF942D57A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.8.0/21
Signature Algorithm: sha256WithRSAEncryption
70:30:7a:74:03:01:46:b0:0b:6e:ed:53:8b:c2:f0:19:25:5e:
84:c3:d7:72:6d:e0:ca:63:6b:cc:2e:bd:c5:9b:6d:b1:8d:a4:
c8:6e:7f:2f:92:5d:19:31:5d:ce:3a:17:70:e2:83:5d:2b:42:
dd:e8:aa:d8:4b:58:11:f8:c6:47:46:1b:c0:c7:44:2d:86:a8:
1d:99:05:35:a4:7e:5c:fb:9e:4a:37:3a:99:96:3a:5f:e8:53:
5d:50:52:0f:0b:c8:1c:60:48:5a:1d:f2:05:9b:01:05:8b:b0:
19:74:53:ed:35:54:31:e7:ec:2e:c1:ae:95:d0:00:42:b8:74:
7b:cb:ff:e5:a5:32:8a:b7:63:ae:4e:54:d5:c0:e7:99:90:d5:
fa:1f:50:60:ff:5a:ac:00:a7:5e:9b:df:ee:e1:ab:a0:5e:0e:
2f:c0:b9:a4:be:1d:9f:c3:13:22:30:18:25:56:e7:88:bd:7d:
8d:e9:11:8d:1f:81:d9:a2:1d:67:77:d7:0e:c8:60:30:01:3d:
3f:56:41:f8:d8:f3:b1:b3:6f:70:58:13:c2:fb:cb:e0:7e:fa:
8f:1c:1a:62:74:52:40:2e:6c:3d:00:dc:c7:9a:17:ed:26:90:
7c:b8:c4:ad:b8:be:76:fc:5a:cf:1c:1a:b3:55:d2:37:35:d9:
45:c8:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:35 2024 by rpki-client on console-fra.rpki-client.org