Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C979546E3B9611EF8AAF3681762E951A.roa
File: C979546E3B9611EF8AAF3681762E951A.roa (raw, json)
Hash identifier: 63TM3izPJQuKNqRX2jICthvFkVi0k2MALxLOzG50Iss=
Subject key identifier: 36:27:E6:E4:D5:8C:EE:B6:90:1D:18:FB:98:02:46:72:EF:BC:B8:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9936
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C979546E3B9611EF8AAF3681762E951A.roa
Signing time: Sat 06 Jul 2024 12:53:48 +0000
ROA not before: Sat 06 Jul 2024 12:53:43 +0000
ROA not after: Tue 08 Jul 2025 12:53:43 +0000
asID: 150150
IP address blocks: 156.230.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39222 (0x9936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 12:53:43 2024 GMT
Not After : Jul 8 12:53:43 2025 GMT
Subject: CN=66893e5c-a62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:07:73:3c:c5:ad:d9:3b:70:c4:dd:8d:a7:e7:
c5:c8:71:07:b8:e6:a5:c7:5f:aa:c9:05:b1:8b:6f:
9b:29:6f:6d:0e:28:42:36:2e:83:a4:87:fd:3e:b6:
17:b1:4b:1e:8b:c2:b5:7e:1a:fe:3d:53:ea:01:a2:
80:3a:ef:ff:61:93:52:b0:7e:b6:8f:52:1a:3a:1c:
dc:a0:3f:d8:85:df:e0:9c:af:c8:25:83:93:33:44:
1c:55:59:66:a1:6b:b6:ca:c0:4f:2a:d3:89:f7:af:
74:e3:87:a7:67:30:72:23:d6:b7:16:3e:eb:4d:83:
b8:e1:38:41:c1:a8:7d:fc:b8:7c:cd:4f:cf:a5:ed:
95:ad:a5:90:5d:0c:c9:73:9a:ca:2f:2f:16:74:ce:
63:0f:98:47:49:a8:62:4c:ac:f0:c7:39:b7:ee:fc:
f7:99:91:52:bf:8e:36:52:f6:42:08:a2:a0:b2:6f:
19:12:62:72:d8:f8:d1:74:7e:b5:6c:ae:c5:4f:00:
72:76:a1:43:13:a9:90:a5:50:f9:bc:37:25:eb:03:
79:6e:df:22:89:3a:88:63:af:0f:b4:88:11:5a:eb:
88:ab:0b:bb:58:9b:34:fa:cc:80:c5:da:aa:69:bc:
cc:52:00:7a:c8:db:73:f1:d5:10:6f:29:e2:4c:5b:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:27:E6:E4:D5:8C:EE:B6:90:1D:18:FB:98:02:46:72:EF:BC:B8:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C979546E3B9611EF8AAF3681762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.62.0/24
Signature Algorithm: sha256WithRSAEncryption
71:79:e5:48:c5:11:e8:46:a4:bd:04:fa:1f:bc:c4:b8:48:14:
48:34:3f:40:9c:98:c9:b9:db:59:08:4f:d5:9c:8b:d9:fe:a0:
e0:a2:62:b1:84:63:3a:e6:38:4c:41:23:08:a8:2f:b6:d7:f3:
73:78:41:07:3d:9b:e8:e7:07:97:5e:9c:ef:d9:bb:60:70:2e:
af:61:b2:94:af:72:bf:75:0a:de:ff:e3:1f:57:1f:f8:da:33:
f9:14:e8:7d:a5:e9:3c:14:c4:16:04:38:32:01:48:6c:94:3d:
e3:02:76:23:32:44:b0:b2:7d:2e:30:13:51:ab:76:9b:6d:d9:
ea:f4:e2:1c:b7:fb:5b:06:cf:81:3d:0e:55:97:9b:24:e3:9e:
aa:12:0f:21:d8:eb:ab:e9:75:0e:5e:0f:5b:69:65:c6:6d:bd:
10:87:ea:c2:f8:cd:50:97:ef:fc:b1:d1:49:df:42:88:4d:6e:
e3:85:33:37:e1:82:09:16:dd:9b:07:f2:9a:70:9f:af:d7:45:
05:23:11:23:34:9c:f0:a7:94:d3:f5:ea:e1:ca:6c:63:bd:45:
99:1e:46:3b:06:09:fe:cf:3e:41:2d:6e:1a:b1:04:aa:5a:d8:
70:81:0f:a3:83:2c:88:6f:72:f2:23:a6:cd:44:33:c9:86:22:
a7:f7:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:41 2024 by rpki-client on console-fra.rpki-client.org