Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3C4C6BE29EA11EFBD04EB4B7DDC24C2.roa
File: D3C4C6BE29EA11EFBD04EB4B7DDC24C2.roa (raw, json)
Hash identifier: 13kACzh7exv9cLiVDRSVg4ZXdEsRpaRq3EBQJNvXu0Y=
Subject key identifier: 37:12:B0:8A:3D:24:E8:62:A2:FB:C6:CF:E0:5B:D0:C1:04:A8:C0:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9161
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3C4C6BE29EA11EFBD04EB4B7DDC24C2.roa
Signing time: Fri 14 Jun 2024 01:10:02 +0000
ROA not before: Fri 14 Jun 2024 01:09:58 +0000
ROA not after: Thu 13 Mar 2025 01:09:58 +0000
asID: 19969
IP address blocks: 156.225.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37217 (0x9161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 01:09:58 2024 GMT
Not After : Mar 13 01:09:58 2025 GMT
Subject: CN=666b986a-3ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:19:e4:01:4c:b9:a6:d7:02:87:4f:30:46:
5f:fd:cb:62:ba:25:73:64:2e:0e:de:30:c4:41:50:
3c:a5:36:dd:42:18:92:d9:f9:e3:3e:a6:49:e3:6d:
c2:97:76:e4:be:e9:9a:63:b4:2b:e1:7d:21:5a:4c:
7f:a1:ba:4c:63:54:3a:22:f9:3e:de:ed:9f:dd:dc:
49:20:f2:18:bf:56:93:f7:23:59:69:1e:11:e2:36:
e3:2d:7c:88:02:67:85:9c:18:b4:02:7c:a7:40:30:
51:53:0c:4e:fe:2d:00:38:40:4d:60:b4:45:43:00:
a4:9b:46:51:61:c2:30:4b:7f:34:51:94:15:26:37:
f8:c6:7c:5e:c3:f2:37:68:37:e6:5d:14:85:9b:a7:
0a:cf:74:6b:64:76:a0:aa:09:77:35:9a:f4:75:2e:
5b:a9:2f:47:1e:4a:f2:55:fc:35:8e:2b:5b:08:86:
5f:3b:21:5c:e3:11:63:f0:93:0f:22:f1:3f:30:49:
70:24:65:8d:b8:37:f2:3e:74:a8:d1:fb:b1:88:d5:
05:45:a1:55:48:48:52:c4:b2:6f:c2:ce:ec:2f:e6:
5b:a8:66:ef:e1:8c:99:90:e6:0a:1f:01:c7:bd:a6:
2a:38:ef:fa:42:be:99:df:fb:59:ad:c4:cf:ff:28:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:12:B0:8A:3D:24:E8:62:A2:FB:C6:CF:E0:5B:D0:C1:04:A8:C0:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3C4C6BE29EA11EFBD04EB4B7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.66.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f2:cb:e6:d1:55:43:a8:00:dd:45:a0:60:07:71:97:12:c7:
0a:da:45:a5:5f:18:0a:f4:e9:28:56:f7:74:e1:d1:86:a2:ff:
71:d5:cf:ea:0b:d7:ae:8d:8a:42:ab:b6:54:6f:e8:84:2c:d0:
ee:a0:b2:23:5b:4d:f8:94:8d:ed:2e:d0:7d:d7:83:67:3d:9e:
56:83:70:c3:1f:db:f2:70:93:cb:21:e4:cc:a5:48:7b:1b:13:
85:e4:ee:25:bb:cc:ad:b2:2e:42:60:9d:34:76:71:fa:91:75:
f7:0c:fe:02:63:8d:f7:e6:3d:af:6f:da:6f:ac:19:f1:e6:41:
22:37:1b:9d:00:8a:c4:95:f3:31:23:5f:3c:a9:2b:db:41:26:
c6:14:dd:02:b1:a4:f1:cb:d4:5e:a6:07:43:6c:d3:10:01:53:
16:ad:37:81:68:25:46:33:41:d4:c0:8d:29:c6:8c:ca:0b:99:
ea:e0:a9:9a:87:58:b8:c8:b8:e4:05:a8:47:87:72:78:4b:15:
00:66:5e:df:ec:3e:e7:17:a5:dc:be:6f:a3:66:21:bc:b9:ba:
97:c9:96:2a:86:83:c7:40:ab:45:d7:e9:ed:14:70:d1:fa:6a:
bf:d3:e0:19:27:60:3d:d2:3c:6a:8c:98:e6:96:fb:f0:a6:55:
4d:3f:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:10 2024 by rpki-client on console-ams.rpki-client.org