Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2A5E4223DC011EF8D9BAB92762E951A.roa
File: D2A5E4223DC011EF8D9BAB92762E951A.roa (raw, json)
Hash identifier: 1VrvTSxR3YO4dw4LdVl2Pvu9RCEvw3xy4zYcmvIKyTs=
Subject key identifier: F3:05:3E:24:0B:48:22:9B:E3:75:57:3B:34:CB:C1:E9:4F:96:F9:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 99F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2A5E4223DC011EF8D9BAB92762E951A.roa
Signing time: Tue 09 Jul 2024 06:59:45 +0000
ROA not before: Tue 09 Jul 2024 06:59:42 +0000
ROA not after: Fri 11 Jul 2025 06:59:42 +0000
asID: 58879
IP address blocks: 156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39411 (0x99f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 06:59:42 2024 GMT
Not After : Jul 11 06:59:42 2025 GMT
Subject: CN=668cdfe1-5bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:c3:29:06:a1:f1:d3:9e:b6:b3:a3:52:f0:
a5:37:86:16:fb:87:fa:87:9f:b9:46:cc:ce:a5:cf:
3d:2e:dc:2d:d6:61:11:c1:a6:30:70:51:1e:2d:54:
69:f7:ff:b0:2e:0b:73:c8:b5:9e:b5:1c:e7:76:ad:
05:b5:14:91:59:ff:da:87:d9:94:1f:a2:39:80:9d:
eb:05:de:c1:61:8c:32:72:7b:b1:45:d9:5a:7d:ae:
39:6b:1b:28:3d:4b:b5:58:43:3e:e1:ed:00:dd:a7:
46:4e:86:c2:dc:30:ef:25:26:5a:eb:af:9a:71:e7:
09:6a:0a:48:41:b9:35:0b:fb:ed:44:37:40:9d:cb:
34:b4:ed:f2:37:c8:a0:ad:78:4c:81:26:ff:81:b5:
ad:a7:ca:41:2b:27:da:98:b8:ba:59:3a:a3:78:b4:
27:be:39:aa:3e:f6:8b:0b:d7:ad:51:4b:e3:20:00:
f1:1a:d5:f4:14:28:62:04:8a:31:b3:ca:6b:de:b2:
8c:00:bf:a7:1a:4e:fe:5e:54:97:aa:8a:06:41:06:
eb:7b:a8:fe:50:2a:f8:ad:fc:39:6e:4d:5b:da:6d:
e2:ce:a0:1b:50:be:33:2a:55:d7:96:00:67:21:a8:
16:69:9d:c4:ef:00:4f:c6:28:57:10:60:cc:ec:ea:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:05:3E:24:0B:48:22:9B:E3:75:57:3B:34:CB:C1:E9:4F:96:F9:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2A5E4223DC011EF8D9BAB92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fc:4f:fe:b4:ca:21:b9:b2:ac:8a:d6:99:c6:9a:e9:f5:d6:
cf:24:83:9f:1d:7d:1d:22:ab:27:21:fd:25:66:ba:ff:58:99:
99:13:e6:24:ef:77:bb:24:62:e4:16:34:0d:a1:ee:99:5e:22:
2d:65:fb:f8:75:79:d5:19:a8:ab:0f:ab:62:42:4b:cb:58:fe:
59:54:af:7a:43:b0:98:9c:60:71:7e:d6:81:b7:fc:56:e3:ca:
97:04:e7:01:d6:c1:6d:3d:a6:b2:60:cd:3d:11:a1:dd:aa:3e:
ea:55:3c:a2:05:45:6d:4e:d8:35:61:c5:b7:a8:8f:17:4a:47:
71:37:21:21:ce:be:fc:b8:00:1e:2e:80:ce:ae:4a:be:2d:ad:
08:b3:ca:20:1a:f8:75:60:72:40:29:b3:fe:b5:23:71:c8:b8:
fe:55:7c:39:3a:13:a0:19:ca:0d:d6:6b:f5:60:b9:d0:53:e2:
0a:09:94:de:94:e0:7e:c9:5e:d6:98:1c:6d:90:25:fd:78:0c:
9e:a6:19:21:7c:85:63:07:df:67:ab:0d:8c:f4:5b:df:80:b1:
36:4a:8f:80:a5:4e:a6:91:ac:86:63:5a:9d:e0:3f:ee:60:62:
f4:df:d3:1c:5a:aa:1c:23:8a:db:7b:e1:45:21:2f:2b:b7:b7:
10:68:a1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:10 2024 by rpki-client on console-ams.rpki-client.org