Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A5EF9AC33A111EF9A54C97D762E951A.roa
File: 8A5EF9AC33A111EF9A54C97D762E951A.roa (raw, json)
Hash identifier: 1NZ3MeNi4qWCC9sVv6D/qEOvC5+gSr1NLwDOH9x/1kc=
Subject key identifier: E2:9E:F9:1D:C7:A3:D7:F9:C6:9F:E5:0C:4E:6C:4E:5B:C2:68:51:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 958D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A5EF9AC33A111EF9A54C97D762E951A.roa
Signing time: Wed 26 Jun 2024 09:50:38 +0000
ROA not before: Wed 26 Jun 2024 09:50:34 +0000
ROA not after: Mon 30 Dec 2024 09:50:34 +0000
asID: 984
IP address blocks: 156.242.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38285 (0x958d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 09:50:34 2024 GMT
Not After : Dec 30 09:50:34 2024 GMT
Subject: CN=667be46e-bd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:e3:b3:de:f9:70:bc:cf:cc:2f:5c:72:7b:
91:59:1b:6a:07:e5:a4:20:00:45:11:46:13:16:bd:
ca:53:7c:d1:7b:27:02:99:53:4b:1d:2d:22:69:35:
df:bc:6d:17:10:dd:86:fa:3e:69:c9:28:be:85:f1:
bf:47:3e:2c:39:ba:08:26:3e:e8:cf:16:b5:b7:14:
4b:c7:ae:54:d6:32:f4:81:b4:3e:0b:e8:50:1a:76:
65:16:57:61:ea:44:ca:97:f9:b5:51:a0:ba:64:1a:
65:d7:54:a8:77:00:ab:67:44:88:bf:67:01:ef:df:
96:b9:14:98:30:25:9c:ea:35:d0:ec:af:1c:9d:17:
48:cc:5f:09:2c:73:24:70:6a:7f:18:5d:77:55:b9:
ea:cc:c6:d2:c1:39:68:ec:f9:64:bb:e4:31:04:6c:
12:82:ec:f6:ab:48:2e:c1:31:23:2f:20:86:e7:de:
ff:37:54:58:95:6c:96:b6:36:78:bc:dc:5d:17:f2:
6f:29:23:82:6e:fa:0c:a4:ee:a9:c5:6c:e0:0b:81:
45:51:d9:f7:63:2e:e8:88:52:7e:db:c6:40:dc:2c:
c8:99:1f:bb:d9:85:bb:80:33:a2:cf:04:d3:c2:67:
6a:51:02:ba:cc:0d:f9:fc:ad:d5:d6:8f:70:25:cb:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9E:F9:1D:C7:A3:D7:F9:C6:9F:E5:0C:4E:6C:4E:5B:C2:68:51:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A5EF9AC33A111EF9A54C97D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.64.0/18
Signature Algorithm: sha256WithRSAEncryption
74:da:ac:a6:9a:ca:3e:bf:1d:3c:25:cf:1c:e5:8f:49:a7:32:
ea:85:08:b5:7e:5f:9b:10:f9:ff:33:6b:7e:1d:89:65:e2:99:
33:6c:05:67:ca:5c:28:cb:4a:c8:08:b5:ec:8f:1c:42:67:c9:
74:bc:2e:a4:2d:05:86:18:35:82:36:c9:8c:30:b3:32:7e:11:
be:6c:b1:b1:71:66:3e:8a:d2:ce:ec:a9:87:81:9c:57:42:fc:
93:a0:a7:fc:d5:d1:87:62:a2:27:e4:21:50:cb:cf:e1:63:56:
3f:6c:37:f8:dd:d2:81:9d:c4:5a:54:71:56:4d:db:7b:44:1b:
a2:f0:fa:f4:47:68:f0:11:ec:59:3c:b9:90:a0:7d:e3:c8:bf:
51:27:3f:3b:e7:5a:92:03:ed:eb:63:ab:6f:b4:f5:3c:c8:86:
4d:f2:aa:57:f4:a3:b6:67:35:b8:f1:61:20:35:4c:6b:04:31:
e1:b6:db:c8:91:20:e0:d6:51:46:b0:3a:a5:5e:f4:25:15:2d:
df:3e:c5:66:b9:98:72:bb:dd:13:00:a0:67:7c:83:15:8a:f3:
29:5b:6d:60:9e:d8:23:f9:6a:79:f2:49:8e:a2:2f:3a:0e:a0:
83:66:ec:f2:af:b5:d1:06:cc:d1:6d:9d:08:18:a7:a2:30:bf:
11:a5:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:08 2024 by rpki-client on console-ams.rpki-client.org