Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D472F0FE1C1B11EFB6D379507DDC24C2.roa
File: D472F0FE1C1B11EFB6D379507DDC24C2.roa (raw, json)
Hash identifier: GbdOkHDPsd9Ix/QtuaRZlTPKlX67mlXrsnndiPYfOrM=
Subject key identifier: 59:69:CC:60:E0:66:93:13:2E:FA:B5:50:99:D8:CA:C8:EB:3C:14:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8C31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D472F0FE1C1B11EFB6D379507DDC24C2.roa
Signing time: Mon 27 May 2024 11:25:33 +0000
ROA not before: Mon 27 May 2024 11:25:29 +0000
ROA not after: Sat 11 Jan 2025 11:25:29 +0000
asID: 399077
IP address blocks: 156.248.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35889 (0x8c31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 11:25:29 2024 GMT
Not After : Jan 11 11:25:29 2025 GMT
Subject: CN=66546dac-56cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:f1:ea:1b:7d:ff:5a:cc:fa:9b:29:9a:eb:
48:be:76:4e:a6:68:34:53:27:c2:28:d9:89:e2:60:
96:fa:c0:1f:9d:f0:fd:3e:b3:92:76:e7:d4:78:67:
d2:95:7b:3a:b5:79:d4:38:ea:5f:ee:21:59:4d:28:
34:08:3d:21:33:95:2e:c6:b9:41:64:71:f3:52:50:
a6:21:a1:3b:37:87:ba:93:30:19:cb:d0:18:2f:a2:
2a:41:d1:00:0a:e7:3f:40:20:1b:3e:2e:97:8c:45:
cb:25:14:ce:19:d5:67:4f:d0:40:41:78:9b:f1:75:
93:a1:2b:15:28:4f:64:1c:1d:1e:60:83:1f:b7:99:
04:fc:fd:ce:8c:d5:90:fb:26:43:2b:34:d8:e3:7e:
45:b6:cf:66:2a:5d:f8:a0:32:f6:b2:fa:c2:22:a1:
ca:e5:48:a5:be:da:ef:58:a3:e7:13:57:c7:9d:ab:
e6:ba:6f:c4:42:64:85:ab:9b:35:92:7a:dc:cd:e0:
c9:ee:8e:bf:ed:19:9d:e2:9d:e7:94:bd:d0:3d:71:
09:b9:61:e2:54:a0:dc:0f:ef:6d:37:ac:ff:1e:6c:
06:af:c4:f1:75:ae:48:de:f8:81:23:b2:3a:a0:85:
aa:de:08:48:7f:54:c1:f0:75:86:6b:93:44:72:7c:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:CC:60:E0:66:93:13:2E:FA:B5:50:99:D8:CA:C8:EB:3C:14:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D472F0FE1C1B11EFB6D379507DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.77.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:58:88:9d:d6:9c:58:db:7c:a6:b1:7a:cb:37:5a:9e:fa:74:
56:ff:9a:79:f2:f2:92:cb:a9:29:d5:42:fc:74:4d:1f:98:3f:
d8:35:3f:fd:2b:52:50:57:eb:2e:6a:dc:5b:5f:78:19:43:f2:
99:cb:65:3d:f3:9d:ee:bd:bf:80:46:30:b4:ac:b6:3a:86:f6:
50:58:83:9e:f1:43:22:a3:8c:87:73:b6:b0:0b:01:49:ce:36:
de:2e:23:0e:a9:a6:b8:73:ac:f9:c1:a8:e9:02:7f:dc:df:6f:
4e:a9:f1:4d:c1:f7:be:9a:9e:8a:5f:46:06:c6:9b:ac:6c:52:
42:90:40:27:c6:8f:9e:73:a2:19:a4:ec:1a:92:f2:09:43:a6:
6c:c1:51:7b:21:6a:03:26:c2:e8:7d:46:31:64:f4:c7:e4:dc:
4b:5e:1b:1b:31:f1:42:45:92:da:a8:14:26:2f:de:3b:ad:42:
26:45:55:66:6f:bb:9f:05:ad:12:7f:f2:fc:73:78:09:6e:95:
33:d6:02:ab:6f:59:92:e0:3e:80:02:c9:c1:c3:0d:cf:14:70:
d9:02:b6:6d:c7:e2:b6:a1:39:ae:1d:24:2c:b6:9b:93:dc:61:
bc:08:42:38:cb:5f:18:dc:1d:bf:2e:d3:94:47:39:86:b7:8d:
bb:92:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:10 2024 by rpki-client on console-ams.rpki-client.org