Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9252D6A61F0111EF9746D93A7DDC24C2.roa
File: 9252D6A61F0111EF9746D93A7DDC24C2.roa (raw, json)
Hash identifier: DLSMqgUab9tCMy7D10nEaP6LVVcioPVRvcxM2NK+MpQ=
Subject key identifier: 79:A1:2E:6C:2B:F4:A6:AD:F1:66:91:F3:BA:AB:EB:38:F0:A2:E4:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8DA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9252D6A61F0111EF9746D93A7DDC24C2.roa
Signing time: Fri 31 May 2024 03:55:08 +0000
ROA not before: Fri 31 May 2024 03:55:05 +0000
ROA not after: Wed 07 May 2025 03:55:05 +0000
asID: 133929
IP address blocks: 156.224.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36265 (0x8da9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 03:55:05 2024 GMT
Not After : May 7 03:55:05 2025 GMT
Subject: CN=66594a1c-bafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:e9:5a:bd:e6:77:df:c6:60:23:ec:d7:d0:
fe:24:7d:2f:60:93:8f:13:c2:05:a9:fe:66:bc:2d:
31:bf:6a:91:2f:85:c8:64:ae:9c:f0:1e:1c:f1:24:
c6:94:ba:8b:bb:33:fd:57:b0:2c:3d:11:90:f3:b2:
a0:2a:90:af:06:2f:32:87:5b:64:3c:39:ec:14:d1:
00:7b:2a:9f:1d:f2:7f:68:87:17:3b:3a:95:bc:c6:
f7:c2:8e:44:5d:48:c1:0c:84:26:e7:40:42:74:59:
cc:f4:11:88:24:cf:f6:89:3d:1e:dc:43:e8:d8:36:
55:5b:1f:c2:c5:a1:8e:6f:3d:42:78:cc:a4:3f:39:
6c:3f:2d:51:7c:77:7f:85:6a:b8:5a:ab:a4:30:11:
2f:b3:f7:be:9b:a8:e3:29:96:ca:cc:17:c4:6f:0d:
82:a5:f1:f4:7f:2b:bb:5f:b3:be:0c:37:92:75:8c:
2d:ba:bd:79:b0:b6:4f:be:db:b9:53:0b:34:29:0d:
11:d1:b2:80:e2:f0:25:36:f1:72:04:db:22:ec:64:
c5:6d:a6:4e:a6:44:ff:0a:54:9f:7b:f0:e5:53:54:
12:d0:3a:7d:ca:94:e1:42:bd:ee:6f:4b:07:ef:0d:
b6:de:73:ef:fc:e3:f4:ff:56:d3:ba:ac:16:29:ba:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A1:2E:6C:2B:F4:A6:AD:F1:66:91:F3:BA:AB:EB:38:F0:A2:E4:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9252D6A61F0111EF9746D93A7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.1.0/24
Signature Algorithm: sha256WithRSAEncryption
45:01:6d:18:82:fd:93:4c:c6:1c:6e:d2:89:47:a0:f1:3f:54:
1f:5b:7b:c6:49:fb:7e:3b:34:5a:d6:9c:4b:59:05:78:98:85:
74:35:c7:33:45:e6:3b:10:ee:b6:75:3d:7e:cb:99:0c:7a:8d:
71:e0:f9:96:e2:17:d4:93:3b:d3:ab:f0:cc:83:cb:b8:9d:69:
61:75:73:43:73:c1:1b:6b:f4:9c:61:0c:47:2f:a7:81:d5:38:
0e:54:3a:54:40:16:9e:39:71:6f:61:46:a9:39:5c:76:ec:f6:
e5:ec:60:39:96:f0:40:8d:d4:61:76:7d:2b:8f:17:fe:8a:b4:
58:f5:ce:4c:ca:f8:88:59:04:ec:3d:85:e2:1f:1d:7a:0f:1e:
c5:7a:ce:5d:de:be:df:31:ee:21:c3:c6:f8:cd:e7:df:44:e1:
92:6c:d4:9e:ce:64:55:ba:17:d4:d8:82:67:f1:c4:b3:8c:61:
93:11:c3:74:b5:12:67:ae:7e:27:34:8e:ef:83:a9:e3:94:49:
cf:b5:eb:75:6a:34:ae:88:d2:bc:ad:68:38:92:24:36:d2:2b:
05:f9:f4:84:b4:1e:95:49:d6:7d:b7:f9:d8:e9:94:15:2d:8b:
67:b8:6f:32:f3:22:21:9f:2d:56:62:bd:de:2b:ec:15:a0:fb:
b3:bd:4c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:38 2024 by rpki-client on console-fra.rpki-client.org