Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/822F358C3AA211EF905EC78B762E951A.roa
File: 822F358C3AA211EF905EC78B762E951A.roa (raw, json)
Hash identifier: WuM19jGUhsVo4puOklFY+YNa7GVy1UeHks2lO0qHWrQ=
Subject key identifier: E4:23:BF:9F:F6:AA:57:63:D4:C5:47:BB:F7:90:79:64:31:C5:6F:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9913
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/822F358C3AA211EF905EC78B762E951A.roa
Signing time: Fri 05 Jul 2024 07:45:11 +0000
ROA not before: Fri 05 Jul 2024 07:45:08 +0000
ROA not after: Tue 07 Jan 2025 07:45:08 +0000
asID: 63199
IP address blocks: 156.230.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39187 (0x9913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 07:45:08 2024 GMT
Not After : Jan 7 07:45:08 2025 GMT
Subject: CN=6687a487-cf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:22:b1:03:61:1d:bd:87:46:bb:38:1f:7f:
1e:38:7b:bc:86:8c:14:fa:9b:09:b6:bf:43:5c:10:
5b:c4:58:dd:78:93:44:e8:34:ce:10:b9:cf:c1:a8:
e6:7a:21:b9:c8:9e:6c:0b:24:65:61:64:90:47:74:
b5:4d:65:d3:8e:48:ed:f5:6f:cf:cf:89:04:ce:bb:
ef:f6:b8:58:d1:a6:08:3b:13:18:27:1a:55:78:8e:
49:ae:7b:61:d3:9f:a6:c5:d7:a0:54:6c:11:fc:e4:
2c:ec:ef:12:b9:74:8f:70:60:32:b5:79:69:a4:a7:
79:16:8c:97:d0:3b:2e:91:00:9a:3b:7e:ac:f7:e0:
09:61:0c:70:44:4b:79:fe:68:40:c0:c4:35:3f:ef:
de:6f:d6:7a:c4:28:1d:80:82:5d:44:76:7e:53:93:
14:9f:de:a4:0e:de:85:1b:44:86:8d:ce:ae:e1:04:
12:06:b1:7b:63:fb:b8:f1:0d:9b:07:3c:89:9c:78:
f3:27:ab:99:38:22:a6:ac:13:45:c1:9e:6c:08:fd:
48:7b:65:76:31:d0:60:40:d3:d4:26:05:7e:d1:a3:
db:a5:ae:98:97:53:3d:bd:50:70:08:b5:0d:4b:59:
e0:77:28:8f:b7:21:be:ec:c6:72:b1:fe:65:84:ef:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:BF:9F:F6:AA:57:63:D4:C5:47:BB:F7:90:79:64:31:C5:6F:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/822F358C3AA211EF905EC78B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.60.0/23
Signature Algorithm: sha256WithRSAEncryption
57:42:f3:a5:cb:4b:1d:cf:c5:04:7e:62:06:69:e1:5a:db:0e:
be:d4:84:81:b8:13:ac:45:d2:e1:c0:d7:fc:24:86:00:02:c6:
32:2d:88:15:3a:17:16:92:9c:ae:d9:24:14:ad:44:66:97:06:
34:1b:c2:eb:1b:44:8f:e3:cb:7d:eb:58:57:12:9f:1b:90:2e:
49:5e:c1:54:2c:35:61:4b:94:15:9f:b4:f2:95:b7:20:1c:bc:
f3:9b:5c:81:99:e2:06:c2:fa:d1:d8:2e:4d:02:7a:95:fa:7e:
91:fa:dc:94:6d:cc:57:12:ef:d1:2f:ce:37:c1:24:8b:5d:ea:
31:33:90:10:44:60:37:48:87:04:28:f8:0a:e9:07:ab:6a:55:
08:54:8c:42:96:14:c6:97:04:bd:19:00:49:25:f4:a9:32:57:
8a:27:98:95:ca:a2:7a:b3:6b:30:e5:56:3c:27:55:7f:55:10:
f1:38:eb:d3:ab:29:dd:b9:3f:24:cb:eb:28:e6:a1:a1:86:be:
b9:e0:84:62:60:21:07:a1:43:a5:23:39:c0:5d:9f:83:54:7a:
6d:ea:5d:9b:fa:70:b8:5a:af:61:3c:49:27:22:70:f0:e2:c3:
c5:93:19:77:55:d2:61:22:1b:37:2c:1d:36:4d:6f:54:c4:97:
9b:fc:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:07 2024 by rpki-client on console-ams.rpki-client.org