Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3BA25CC1F0811EFB7178BEC7CDC24C2.roa
File: B3BA25CC1F0811EFB7178BEC7CDC24C2.roa (raw, json)
Hash identifier: I+Vb5oEPSZlIJYk/7g7A3rqw9ju54omYTRX0HmmPVdY=
Subject key identifier: 7F:FB:6D:BE:64:A4:D7:D2:A2:3C:E2:18:D5:55:74:1E:3D:82:33:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8DEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3BA25CC1F0811EFB7178BEC7CDC24C2.roa
Signing time: Fri 31 May 2024 04:46:11 +0000
ROA not before: Fri 31 May 2024 04:46:07 +0000
ROA not after: Wed 04 Jun 2025 04:46:07 +0000
asID: 133115
IP address blocks: 156.245.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36331 (0x8deb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 04:46:07 2024 GMT
Not After : Jun 4 04:46:07 2025 GMT
Subject: CN=66595613-f8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:9d:f6:d4:f1:6d:5f:82:b1:60:2a:4e:2d:
4b:fe:65:85:a7:67:4e:9f:a8:c7:52:07:0b:dd:9e:
32:1c:d8:30:79:ed:8e:1d:44:78:73:3e:e5:06:4b:
1a:9e:e0:75:dc:0a:75:2e:31:b5:49:e2:b3:36:b0:
9f:c7:7d:91:df:da:ad:f5:4a:3c:e3:56:f6:29:84:
6d:44:fa:8d:92:b5:dc:2f:f4:c1:b0:42:be:15:05:
92:7a:46:88:e1:d2:83:ed:d0:6a:37:a4:37:6d:0a:
3d:e9:12:ba:85:1a:be:c9:6e:b3:f9:33:11:31:91:
b0:57:0a:fd:46:47:c5:d1:f1:7e:a0:32:38:b5:32:
9f:f1:6f:52:b2:53:98:b2:85:ef:ba:1a:24:1d:d3:
1f:3f:f6:fd:79:28:37:a8:14:0b:44:da:80:5a:14:
fc:b6:db:d8:74:2d:21:73:aa:5f:f9:81:ac:dd:9a:
f4:76:40:31:96:54:c8:53:00:9b:3c:da:76:f6:82:
ae:eb:e1:44:cf:b8:ee:e8:4d:89:0b:9a:d2:69:68:
cd:e3:5f:74:88:ce:65:0a:8c:5d:7a:f2:fd:fa:6c:
03:78:ef:0c:c3:5d:6d:67:2b:bb:e2:aa:e3:39:95:
0f:56:86:9f:89:37:c9:52:1b:35:fe:d6:51:f2:c5:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FB:6D:BE:64:A4:D7:D2:A2:3C:E2:18:D5:55:74:1E:3D:82:33:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3BA25CC1F0811EFB7178BEC7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.7.0/24
Signature Algorithm: sha256WithRSAEncryption
85:ce:df:4c:c1:90:9b:ca:2a:00:e5:87:0b:00:64:c5:1c:7c:
a0:d0:be:b1:11:96:9d:39:9c:d8:28:e4:7a:c1:75:bd:5c:c7:
74:d6:6a:0a:6a:9d:be:29:ce:4a:ce:d0:06:51:34:b0:b2:1f:
d5:dd:cd:b5:15:3d:a0:54:82:be:9d:1f:61:8b:ea:58:a7:03:
d6:ee:2d:02:53:ab:b0:c4:af:a7:21:7f:74:86:27:1e:95:9b:
c6:bd:bd:62:71:0c:b5:9a:a2:b8:49:dc:75:7e:a3:1a:2d:e2:
d5:06:e4:78:7d:37:d8:0c:99:c9:bd:26:71:e4:01:3e:f6:19:
30:ac:bd:d7:28:ee:08:4d:bc:4b:26:79:d4:92:f6:e9:62:0f:
20:a3:8b:62:62:9b:a6:c2:65:e0:11:a2:f2:bc:08:fc:42:ce:
bb:74:4d:3c:01:3f:45:96:7d:40:2d:e5:11:4f:8b:00:b7:2f:
04:2f:0f:23:ee:b0:82:84:58:28:57:20:22:12:d6:9f:9b:8c:
b1:69:1a:64:93:ea:f5:73:a8:bb:af:cd:2d:a9:a7:ca:4b:37:
c1:b1:12:21:78:44:5c:69:d0:0b:d6:a3:57:3d:03:af:39:3c:
86:31:96:9e:8f:17:42:4c:25:32:21:83:8b:ae:a8:f3:f6:21:
bd:11:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:41 2024 by rpki-client on console-fra.rpki-client.org