Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8979D52C1D1011EFAA98D6337DDC24C2.roa
File: 8979D52C1D1011EFAA98D6337DDC24C2.roa (raw, json)
Hash identifier: +URqFwp5Uw7fHaYUGbCc6E/w5MyspXQRxPlGdURUmOQ=
Subject key identifier: DD:05:B8:18:38:F2:54:C5:D5:09:6E:7E:3D:D8:D8:76:1C:83:A9:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8979D52C1D1011EFAA98D6337DDC24C2.roa
Signing time: Tue 28 May 2024 16:37:14 +0000
ROA not before: Tue 28 May 2024 16:37:10 +0000
ROA not after: Sat 07 Sep 2024 16:37:10 +0000
asID: 138195
IP address blocks: 156.225.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Sep 2024 16:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36018 (0x8cb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 16:37:10 2024 GMT
Not After : Sep 7 16:37:10 2024 GMT
Subject: CN=66560839-b491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:5c:51:24:7a:d3:77:73:74:81:84:1a:96:
53:4d:73:5e:0a:00:2a:54:ef:c4:15:5f:31:92:63:
d7:66:50:19:d9:9c:7a:82:17:30:e8:09:ec:38:ed:
e8:25:73:e2:1e:f8:54:54:63:ea:42:6b:4b:39:13:
5b:93:8a:9f:9f:42:fb:51:52:7d:11:10:76:fd:19:
09:c5:a8:40:29:7c:12:56:82:55:66:30:9a:35:6d:
c1:59:cf:59:2b:57:3b:d4:3b:d8:01:44:19:ed:95:
31:f3:86:06:60:fb:06:c8:74:2e:3c:88:a4:cf:75:
45:d3:eb:e7:6e:f1:e5:ea:f0:ef:5f:b1:48:b9:2e:
ca:bc:f6:3f:8a:bc:ea:b5:cb:b9:52:c5:8b:fe:c9:
d0:86:37:f0:69:87:bb:85:78:4d:3c:7c:23:5c:33:
11:fb:d7:2e:ba:b2:a3:d2:e9:29:5c:23:0a:bb:40:
b6:b8:f0:d5:af:7a:80:e0:86:c6:7b:fe:cc:25:c6:
e0:f2:8e:26:01:d2:c0:98:9b:94:95:2e:77:3c:a8:
5d:17:df:0d:4c:17:58:5b:42:ab:39:15:1c:ad:2b:
1a:06:ea:d0:99:43:e9:c8:4a:a0:70:1a:0d:0e:c5:
d0:a1:87:72:37:33:73:dd:4c:bd:7b:80:6b:61:a8:
cb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:05:B8:18:38:F2:54:C5:D5:09:6E:7E:3D:D8:D8:76:1C:83:A9:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8979D52C1D1011EFAA98D6337DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.32.0/19
Signature Algorithm: sha256WithRSAEncryption
22:a2:7e:8f:87:7c:17:a9:fe:a2:da:0b:13:93:28:8a:21:8f:
9d:98:ff:81:a7:8c:f5:b9:86:58:03:41:4c:04:99:80:9a:dd:
6b:2a:d1:c9:94:6a:1f:80:ae:43:6f:04:ab:21:af:f7:cd:a2:
27:06:85:db:41:b4:74:01:ec:a6:a1:44:e5:b6:aa:4e:98:35:
35:e0:7d:02:9e:99:47:df:6c:f8:6a:98:9b:a8:60:4d:b6:4b:
8a:b6:46:21:7f:90:cd:a9:b9:bf:b0:2d:a9:ed:70:a8:5e:88:
51:66:33:f8:de:c5:55:43:0b:9c:d1:1d:9e:09:f0:31:00:d3:
d8:83:6c:70:0e:43:d7:1f:8b:6a:ce:e4:46:c7:9c:bd:10:87:
a6:88:ac:28:5c:4a:e1:b5:31:f6:f6:db:8e:d6:ba:0a:60:71:
64:c3:28:d5:2f:13:21:71:35:09:b6:13:4f:e8:30:5a:28:3f:
5a:d3:c8:a8:4b:04:ce:35:b5:a7:de:b5:9e:a7:7e:ab:5b:c6:
45:08:68:d9:3e:13:ac:c9:44:c4:d7:1d:af:d4:ba:60:38:e7:
22:0d:e9:2c:bd:92:b1:b3:c3:b3:0d:e3:4b:39:db:ef:3d:e4:
29:aa:9f:0b:bb:21:67:61:c6:37:46:a9:e9:4d:d0:b2:73:18:
40:79:53:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:08 2024 by rpki-client on console-ams.rpki-client.org