Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FDC480A32BB11EF8295DDAD762E951A.roa
File: 6FDC480A32BB11EF8295DDAD762E951A.roa (raw, json)
Hash identifier: +VxiEH4xZxMSn5ULhBWYqsTM2DumtMnB0mKnE13ByFg=
Subject key identifier: E8:97:26:62:28:F2:47:93:70:62:71:AE:F0:C3:BD:E6:AE:02:9C:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9482
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FDC480A32BB11EF8295DDAD762E951A.roa
Signing time: Tue 25 Jun 2024 06:23:29 +0000
ROA not before: Tue 25 Jun 2024 06:23:26 +0000
ROA not after: Fri 03 Jan 2025 06:23:26 +0000
asID: 40065
IP address blocks: 156.235.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38018 (0x9482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 06:23:26 2024 GMT
Not After : Jan 3 06:23:26 2025 GMT
Subject: CN=667a6261-fc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:d5:75:f4:f9:3a:19:42:8a:d0:7d:ec:c8:
3a:59:0d:6f:89:89:a7:65:ef:b6:40:13:06:c5:e7:
c7:ed:7a:fd:6d:91:db:c3:82:19:01:18:35:11:b9:
b1:c8:b4:f6:c3:5a:7f:84:d1:b6:f9:2b:39:5f:75:
b6:e6:bb:e0:33:6a:40:b0:e5:6d:a0:ea:02:4a:7c:
29:68:99:7b:b1:b8:c9:30:8b:64:72:db:f2:7b:98:
44:46:50:40:3d:e7:bf:9e:21:78:aa:c4:6b:dc:91:
a0:17:b7:f3:0f:2e:39:bc:63:3a:fb:42:ee:03:7e:
7e:9c:68:a8:90:b6:1f:21:a0:9a:c9:b9:b1:0c:56:
a6:ad:6e:bd:03:8f:a1:5b:7c:ff:a4:81:da:1a:ca:
a0:d9:14:7d:20:34:48:27:cc:84:d4:60:91:7c:4e:
37:1e:e1:10:41:e8:b8:5b:f8:e4:af:41:74:73:37:
7d:b8:a9:b1:56:81:b1:cd:86:99:b5:85:a9:40:dd:
f7:7f:0a:df:76:27:b9:db:d1:d0:5e:88:1b:09:64:
1a:b2:fb:b7:09:9a:40:12:8a:e3:d1:8a:36:18:9f:
41:6c:3b:38:c4:21:a6:4d:7a:90:ce:55:a7:ef:16:
fc:89:b5:17:cb:05:9f:a7:ff:28:b2:92:3e:d1:94:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:97:26:62:28:F2:47:93:70:62:71:AE:F0:C3:BD:E6:AE:02:9C:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FDC480A32BB11EF8295DDAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:d4:c1:38:fb:47:f5:ff:e3:fa:34:d3:31:42:36:2d:aa:56:
06:40:8d:0f:8b:a3:cb:53:40:13:67:1c:de:d9:92:0d:be:18:
f3:f2:01:e0:fa:d3:5d:cb:c5:c3:fb:6d:b7:5a:75:eb:9a:2f:
dc:2c:37:11:e2:01:75:f2:a4:6a:74:31:b4:b3:75:89:14:a0:
f2:0c:e7:f7:80:88:a4:e4:c8:06:b1:8c:89:7f:9d:93:fe:1e:
fb:f5:ca:c7:00:4e:28:84:7a:7e:0e:23:79:4b:48:ac:63:86:
37:db:e1:d6:0d:30:a6:91:58:1d:5c:94:02:5d:73:56:ef:51:
5f:f2:e7:76:8b:33:52:5a:ee:1d:ba:f9:77:60:ee:6b:eb:55:
c0:bc:e6:22:42:af:a8:79:4f:87:f0:f6:d7:39:10:21:28:1c:
1a:22:67:5f:4c:32:b8:2f:9b:f1:5f:2b:52:cb:81:00:26:72:
ed:45:bf:dc:96:4b:c9:76:db:4d:6a:b0:85:5a:b1:19:86:1d:
97:e0:c4:c9:22:b0:3e:5d:c8:86:1d:b1:73:d9:ab:54:7c:df:
b4:0c:eb:20:aa:f3:9f:00:07:22:32:df:46:1d:94:68:f8:a0:
81:da:97:09:f5:8f:f2:a2:7f:dc:b2:3b:52:99:19:3f:91:0b:
8d:5c:bf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:34 2024 by rpki-client on console-fra.rpki-client.org