Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF6D9A432BB11EF9682EDB1762E951A.roa
File: ABF6D9A432BB11EF9682EDB1762E951A.roa (raw, json)
Hash identifier: y7z7ycIR+HUlehqLggfbnFJooYgVJcdnVd1KwfU80Cg=
Subject key identifier: 1A:AB:4E:B4:93:BA:76:7B:ED:05:ED:2B:10:E2:D2:7B:B1:30:E9:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9486
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF6D9A432BB11EF9682EDB1762E951A.roa
Signing time: Tue 25 Jun 2024 06:25:10 +0000
ROA not before: Tue 25 Jun 2024 06:25:06 +0000
ROA not after: Fri 03 Jan 2025 06:25:06 +0000
asID: 40065
IP address blocks: 156.235.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38022 (0x9486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 06:25:06 2024 GMT
Not After : Jan 3 06:25:06 2025 GMT
Subject: CN=667a62c6-16fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:fa:4e:08:69:28:a7:5c:1f:6c:8f:d2:8b:
a9:77:23:4b:f7:8d:60:2c:27:92:c5:3f:70:9d:54:
f1:72:8c:92:5e:f7:1d:d2:47:c8:c3:7f:54:cf:f3:
c0:84:0b:cd:07:ff:aa:82:13:69:d6:bf:16:24:8f:
d4:bc:66:1f:86:9b:49:58:32:f8:0a:b3:e2:3c:1b:
e8:83:49:19:e9:0e:11:25:0a:1e:88:d0:2a:77:66:
d0:2b:bb:6f:06:de:54:7f:fb:5d:52:5b:54:fe:ca:
4f:c0:5b:7a:be:a6:78:f9:f6:eb:03:14:13:f7:e5:
d6:b8:63:6b:3b:33:e3:04:39:eb:c2:ef:e4:c2:73:
29:17:34:c9:72:aa:fa:c3:21:a2:af:69:1a:a1:30:
de:c8:51:7e:62:56:af:f6:7d:da:e1:0d:12:cf:ff:
e6:ca:2f:1f:cc:d6:98:ab:e0:11:07:de:30:63:b1:
48:fe:98:1d:57:eb:fd:ff:aa:48:b4:51:0f:4b:37:
28:e7:e1:73:8a:bc:5e:38:cb:02:76:96:48:3a:cc:
5b:fb:b6:80:7f:d7:5c:64:57:82:b2:12:0b:17:2b:
e8:0c:9d:8b:1d:63:fc:1e:9a:9a:15:13:a4:e4:3d:
5f:5e:b6:54:d3:2d:15:43:d0:31:d7:99:ce:09:8c:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:4E:B4:93:BA:76:7B:ED:05:ED:2B:10:E2:D2:7B:B1:30:E9:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABF6D9A432BB11EF9682EDB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.2.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:38:f3:0d:68:69:48:97:04:f7:0d:15:07:43:73:95:53:3a:
24:f3:22:ea:57:dc:0f:f3:d8:b6:06:2f:e5:f8:72:52:02:37:
bb:ca:4e:c3:47:ad:82:6f:9d:a4:61:fd:3d:09:8f:66:1e:a8:
c8:ce:93:7f:9c:d1:0a:f3:f7:84:c1:b5:43:19:f5:b4:3f:c4:
72:6d:74:ed:9b:92:dd:41:1f:20:0d:da:f3:2f:36:5e:f6:96:
74:c7:40:fe:8c:1c:67:aa:d0:ba:28:e6:5c:aa:84:45:c9:98:
57:af:62:a4:7f:8f:c5:9d:e6:a1:8b:38:81:0f:bd:fc:af:46:
1e:fe:2c:f4:32:8d:f1:10:02:59:77:d2:d9:5e:f7:17:cf:17:
4f:2c:fe:81:fe:35:cf:f4:d8:a9:b0:cc:41:5a:08:57:d4:a7:
e0:82:e6:ac:5a:49:74:43:00:5e:fa:35:04:8e:99:e0:e1:ec:
27:ca:15:8d:36:1f:90:9a:54:ca:fe:68:b4:4e:07:97:5c:88:
6b:8b:b2:da:50:ec:3a:78:8b:6f:5b:b7:19:36:32:3d:97:98:
81:d0:e3:75:f2:e2:83:9f:25:d0:df:e6:11:93:dd:e6:42:a7:
e3:05:87:e8:89:f1:1e:15:fb:e0:e5:11:16:f1:44:1f:71:b0:
73:5e:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:41 2024 by rpki-client on console-fra.rpki-client.org