Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9718B1432BB11EFA4B9F5B1762E951A.roa
File: C9718B1432BB11EFA4B9F5B1762E951A.roa (raw, json)
Hash identifier: Se6FgxcnbkXYPBkuqKUKdNADFH3H2QxyytATrFhGiNQ=
Subject key identifier: BF:71:DF:3C:65:69:54:4E:C0:64:63:59:28:F9:09:CB:B8:BE:91:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9488
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9718B1432BB11EFA4B9F5B1762E951A.roa
Signing time: Tue 25 Jun 2024 06:25:59 +0000
ROA not before: Tue 25 Jun 2024 06:25:56 +0000
ROA not after: Fri 03 Jan 2025 06:25:56 +0000
asID: 40065
IP address blocks: 156.235.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38024 (0x9488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 06:25:56 2024 GMT
Not After : Jan 3 06:25:56 2025 GMT
Subject: CN=667a62f7-e0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:55:a8:53:ca:0c:b0:90:6f:16:8b:9b:1e:
dd:82:b4:1d:8f:fb:2d:cb:a8:b9:39:b7:bf:db:00:
9f:51:f0:15:5d:64:1a:01:d9:6b:e5:11:50:6f:36:
3f:33:e8:9b:f3:b1:4c:d0:3c:dc:7f:87:67:be:cd:
32:f7:83:cc:92:63:8f:ec:a1:ab:ed:72:a0:37:a8:
15:58:86:7b:77:51:62:cd:1c:99:cd:16:b6:c8:a8:
d0:f9:60:2e:f0:c6:50:1e:26:58:8c:4b:86:ca:18:
58:92:f9:64:f5:d6:5c:a0:ce:08:33:3e:52:d9:96:
91:78:2d:df:e6:ba:59:18:9b:b4:ee:02:c4:8f:f1:
d8:bc:0e:d0:1c:bd:f2:5c:0d:5e:ae:ca:cd:38:8d:
ae:92:07:cc:65:d0:b5:7b:20:f2:95:75:9e:31:fa:
b8:fb:fc:0c:69:2d:3c:f0:df:e8:2d:fd:6b:24:e1:
76:ad:78:ff:4c:02:19:b2:70:b8:53:87:f3:0a:5a:
3b:de:b4:f8:83:ed:d7:0a:19:f2:df:fa:0f:12:a0:
e7:18:08:0b:d8:70:47:e9:c3:2b:7c:54:8d:00:8e:
81:4d:7f:fe:8e:2f:21:34:20:f9:8a:9d:91:75:cf:
19:6a:60:16:fd:62:89:25:09:d8:ab:d0:78:8b:2d:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:DF:3C:65:69:54:4E:C0:64:63:59:28:F9:09:CB:B8:BE:91:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9718B1432BB11EFA4B9F5B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.1.0/24
Signature Algorithm: sha256WithRSAEncryption
30:3f:88:d7:b4:a4:7b:c1:ca:88:0c:26:87:15:32:4f:62:03:
11:b1:a8:b1:19:27:06:44:4c:36:b1:91:20:fc:65:e0:32:e1:
3f:8f:01:8b:30:8d:29:28:05:a0:51:ea:71:9d:75:69:41:38:
f4:63:5c:a5:b5:ac:25:23:13:32:1e:1e:e6:df:9f:a5:ff:36:
04:92:11:b9:2a:d0:b4:0c:f8:64:76:05:b7:cf:b8:de:c5:04:
ea:01:5d:d0:eb:8e:63:1d:54:64:8f:6f:0b:df:cc:11:14:31:
88:e0:2f:59:2d:97:21:18:e2:04:a1:13:06:f6:7a:c1:69:af:
85:e8:ab:20:2a:7c:ae:74:68:1d:cf:bd:ee:4c:39:cc:61:ee:
01:f1:b9:ca:f9:b6:f1:66:f8:2f:14:ff:17:dd:25:1e:9e:a1:
4d:10:b4:61:60:65:bf:b1:de:40:07:7f:5c:0b:1c:f8:65:3f:
17:16:5f:02:08:4d:21:ce:a6:7d:a3:32:60:4f:f6:15:9a:21:
b6:8b:fc:7d:50:c0:9c:24:3a:0e:19:fe:62:72:17:63:1f:5a:
9e:96:d0:c3:5b:34:06:4f:9e:88:54:3c:b6:3c:13:ee:5c:9a:
fb:c2:99:0a:17:06:7f:1e:14:be:8a:55:40:9f:4e:a6:68:3e:
99:8f:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:41 2024 by rpki-client on console-fra.rpki-client.org