Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D68A824C27DF11EF98E65CEF7CDC24C2.roa
File: D68A824C27DF11EF98E65CEF7CDC24C2.roa (raw, json)
Hash identifier: OSxvtIqJFHCMnuIqJCFHk3zxcITcUodi+bxVoUbXkBM=
Subject key identifier: 16:5D:64:5E:34:27:17:B2:D2:2D:7D:2A:A2:C0:41:7F:45:AE:EA:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 90A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D68A824C27DF11EF98E65CEF7CDC24C2.roa
Signing time: Tue 11 Jun 2024 10:46:20 +0000
ROA not before: Tue 11 Jun 2024 10:46:17 +0000
ROA not after: Mon 12 May 2025 10:46:17 +0000
asID: 263681
IP address blocks: 156.233.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37032 (0x90a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 10:46:17 2024 GMT
Not After : May 12 10:46:17 2025 GMT
Subject: CN=66682afc-fb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:19:ba:d0:73:d6:7a:c3:69:55:11:3c:75:
88:74:0d:8a:ae:b0:08:05:3b:7f:e6:f3:5a:bd:3b:
fa:a6:45:42:50:6a:6c:e1:2e:79:f0:2c:23:51:e7:
ea:b5:40:b8:7f:03:11:f2:74:bc:5b:1a:4d:d3:93:
cd:7e:40:6b:82:11:04:78:f8:dc:03:4e:3b:df:df:
72:6e:ca:c2:24:98:6a:8a:86:72:18:16:98:7b:88:
59:c2:f1:50:98:1b:b1:e1:e8:c3:1d:1f:11:ce:fe:
d8:ab:82:00:7d:36:98:e1:78:03:32:dd:aa:41:77:
8f:f3:73:3b:bb:de:dc:97:62:b4:14:b4:20:57:ba:
7e:c6:70:03:bb:82:5e:88:e6:98:a5:93:7e:0c:28:
40:bd:9f:3e:60:12:75:6e:af:ac:9a:77:fe:b7:75:
b1:b3:aa:53:83:b3:50:de:a3:10:6d:48:6e:c2:35:
88:c8:6f:3f:5b:8d:ba:3f:27:18:2e:68:42:9b:bc:
2b:63:2f:6d:c3:6a:18:a5:8e:ce:51:96:24:44:52:
8a:1b:8a:c3:e3:2e:41:e4:89:79:91:b3:47:db:e2:
ec:20:cc:bb:18:d4:0d:5f:1f:32:10:42:51:cf:9c:
11:f0:3d:67:48:fa:a9:a7:ab:4f:d5:2a:60:97:0e:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5D:64:5E:34:27:17:B2:D2:2D:7D:2A:A2:C0:41:7F:45:AE:EA:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D68A824C27DF11EF98E65CEF7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.110.0/23
Signature Algorithm: sha256WithRSAEncryption
63:7b:ca:81:79:3d:79:96:42:2a:a3:72:5b:57:1f:dd:4e:07:
60:69:14:e0:f8:93:5b:82:61:a7:4d:b3:35:c7:c3:de:b6:28:
8b:67:5b:63:60:af:2c:32:5a:66:b2:3f:2a:60:f7:1d:04:ad:
d8:1a:f1:7f:ee:1d:47:68:45:3d:48:30:8a:80:e6:42:43:27:
39:4a:a2:64:f3:e9:27:85:e0:f0:0d:d9:f6:49:e4:a4:bc:3e:
c1:7c:9e:08:a2:6f:49:5c:f4:00:57:de:33:41:56:7f:42:45:
a7:07:f9:01:09:99:62:bc:fb:d7:3c:ec:f1:af:2b:8c:91:5c:
08:70:27:8d:4e:4d:95:c0:0a:eb:4b:47:75:c0:36:4d:27:df:
45:dc:08:72:02:23:74:f4:6e:c4:3a:52:26:26:fb:27:f3:6c:
ad:37:97:77:6c:ba:66:c2:3d:0f:99:ba:5f:02:74:2d:58:7e:
67:97:39:f3:d9:ed:d4:65:8a:67:ca:9b:45:e2:b6:7e:43:6e:
e4:01:df:8a:19:62:cd:e6:19:bf:39:4b:f6:87:e6:c7:bb:94:
31:03:19:2a:03:f9:d0:95:9c:ab:f9:61:34:e6:da:45:b9:62:
1e:35:7f:8f:48:e8:db:22:4a:49:a6:86:48:33:c3:56:7c:c0:
68:aa:dc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:42 2024 by rpki-client on console-fra.rpki-client.org