Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6E9E2C021E11EF8DED192B017001B1.roa
File: 7E6E9E2C021E11EF8DED192B017001B1.roa (raw, json)
Hash identifier: OWa4ueLTnVqCuuzaJu3EhPi3L/nLIvjfp+5/2MVNyko=
Subject key identifier: B6:6F:AC:CF:EB:CD:7B:DB:98:8E:A8:5B:27:29:59:B8:4A:D7:52:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 84C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6E9E2C021E11EF8DED192B017001B1.roa
Signing time: Wed 24 Apr 2024 09:39:07 +0000
ROA not before: Wed 24 Apr 2024 09:39:03 +0000
ROA not after: Mon 29 Apr 2024 09:39:03 +0000
asID: 399077
IP address blocks: 156.248.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 09:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33986 (0x84c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 09:39:03 2024 GMT
Not After : Apr 29 09:39:03 2024 GMT
Subject: CN=6628d33a-79e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:38:fe:4f:0c:d9:e5:10:98:d5:a9:32:95:fa:
d9:e9:95:60:b7:45:7a:e4:f0:dd:3d:d2:cb:1e:55:
a9:80:c2:53:0a:bb:e1:c4:10:c5:30:6c:1b:70:c7:
b0:f5:0a:f1:7d:2e:b3:cf:ce:ba:14:f2:69:57:33:
e8:97:25:ee:52:02:55:04:91:ab:8a:e8:b3:c8:ff:
60:34:3d:ee:5f:2c:cc:8a:99:3c:80:64:56:48:20:
60:20:0e:ed:c0:b1:16:5a:fb:e4:95:23:0d:0b:75:
1f:73:74:1d:91:d3:98:a7:0f:b1:10:10:2c:09:8f:
f4:35:6f:4f:8c:35:b6:05:13:92:0e:60:44:24:56:
aa:34:dc:5c:b0:bf:a7:6d:62:51:e3:fd:83:92:a8:
e6:24:55:3d:09:a2:d6:5c:06:fb:7f:05:2b:9f:51:
6d:9f:12:fb:b9:74:ad:d3:3a:fc:22:d4:05:52:9d:
fb:a4:0e:34:21:87:73:8c:09:b7:ce:66:83:2b:3a:
22:c4:4e:f5:a0:ea:50:cf:83:9d:3a:2d:d0:ec:ee:
55:b3:cf:6d:f8:6d:53:92:d0:b2:09:20:3d:65:cc:
d0:f4:ee:02:b8:25:c7:e7:df:1e:07:13:54:93:84:
27:a6:73:cf:97:61:54:84:bc:6e:ab:2d:2f:ec:e0:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6F:AC:CF:EB:CD:7B:DB:98:8E:A8:5B:27:29:59:B8:4A:D7:52:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6E9E2C021E11EF8DED192B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.76.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:7e:3e:1f:de:44:bb:c4:31:65:04:ed:a9:d1:a3:d9:75:3e:
54:95:9f:62:88:b7:10:c1:0d:8c:6f:4a:49:81:10:a1:1c:c4:
13:53:73:63:26:9c:37:78:e5:31:30:d0:0d:71:1a:96:9f:07:
23:6d:d4:2f:be:1e:f3:f9:b3:59:97:de:66:55:68:4f:86:e1:
2c:4e:cb:63:98:bc:65:b4:f5:c6:68:af:4d:de:19:ba:e9:0f:
1f:c4:6a:d7:63:12:19:85:52:ce:fc:f8:2d:4d:19:81:76:b1:
7e:c6:8c:e3:73:ec:23:9b:7b:47:4c:da:b0:55:d1:16:2a:bb:
cf:f5:33:d2:c0:da:e6:cb:3a:cd:e3:c6:8b:5a:09:58:8a:9c:
24:d6:77:ff:ac:63:34:af:1d:86:8e:03:68:df:d4:f2:aa:9f:
6d:39:81:8b:c8:28:91:5f:bf:fc:ed:8f:98:bb:dc:fc:cd:d5:
12:97:59:66:8a:24:80:da:c3:b3:21:68:05:64:06:87:ab:5e:
51:0b:a5:74:47:79:de:e3:a0:17:cd:77:75:f9:72:a9:82:89:
19:c1:fd:4d:a2:ad:10:85:8b:99:16:85:21:d0:ba:bb:5a:b1:
44:da:3e:09:6f:c2:04:b0:2f:75:d8:2c:7b:e8:f7:64:a3:ab:
e6:74:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 07:56:21 2024 by rpki-client on console-ams.rpki-client.org