Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA101AB033A311EF9024D68B762E951A.roa
File: DA101AB033A311EF9024D68B762E951A.roa (raw, json)
Hash identifier: V1ArbKeuC1BrFSZUGqPjSrdvTfuKHRqMz6GgVSu6cXo=
Subject key identifier: 61:6B:75:E0:6B:9D:79:37:3D:D9:E3:96:11:18:4A:A4:49:0B:BC:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9591
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA101AB033A311EF9024D68B762E951A.roa
Signing time: Wed 26 Jun 2024 10:07:10 +0000
ROA not before: Wed 26 Jun 2024 10:07:07 +0000
ROA not after: Mon 30 Dec 2024 10:07:07 +0000
asID: 984
IP address blocks: 156.227.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38289 (0x9591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 10:07:07 2024 GMT
Not After : Dec 30 10:07:07 2024 GMT
Subject: CN=667be84e-f1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4f:ba:d8:fb:dd:21:74:ca:13:6a:95:cd:cd:
e2:7a:97:d4:2a:e1:29:97:1d:4d:35:d4:0e:9d:5f:
7d:7c:94:7c:44:cc:44:9a:d8:23:5b:b2:56:a3:32:
79:6c:23:94:97:54:ac:b3:83:67:aa:b4:81:d6:c7:
a3:79:02:98:16:b8:56:aa:56:b7:03:e6:ae:85:7a:
70:92:a0:24:b7:69:0e:de:5f:44:f2:44:a7:da:28:
70:1c:66:25:48:b6:cf:48:1d:30:1e:d9:de:c7:55:
61:c3:4a:34:77:35:6b:ac:46:e6:ec:b2:7c:ff:a9:
dc:39:f5:28:e3:8c:ee:31:e8:1a:ab:c2:65:cf:a3:
dc:41:4d:d3:21:b7:0e:d4:22:8d:9f:a5:d5:a4:8f:
d8:21:63:a2:1a:05:87:f4:45:00:dc:7a:e0:ca:07:
d4:a9:f9:d9:a1:e2:65:a4:c8:99:35:30:6d:8f:43:
8a:fe:6b:88:2c:e5:7c:93:b6:0e:75:b4:c0:9b:4c:
c8:a0:35:3f:5a:10:5f:a5:3f:6f:7e:32:b1:91:e9:
0d:9a:a0:99:4e:23:bc:62:3b:70:b7:6c:60:ea:32:
27:e8:5b:bb:bb:d8:af:9c:6e:29:c5:10:a4:e1:c7:
00:1f:52:1c:29:ab:6d:42:dc:6b:ab:b9:4c:af:f3:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6B:75:E0:6B:9D:79:37:3D:D9:E3:96:11:18:4A:A4:49:0B:BC:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA101AB033A311EF9024D68B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.128.0/18
Signature Algorithm: sha256WithRSAEncryption
8e:7e:ee:6d:c0:ed:6e:9e:71:1c:10:f6:c8:f8:67:87:e3:52:
bb:a1:0d:2a:25:4b:d4:3c:9b:05:00:ab:19:68:29:3e:79:68:
cd:7e:1a:49:4b:73:4b:45:43:c2:e7:64:87:8d:d6:6e:d7:63:
04:06:62:77:4c:fe:12:7b:f8:88:93:1d:48:04:66:30:95:47:
a6:d3:91:3b:ae:6e:a7:0e:29:ec:d2:22:fe:34:de:6d:14:b2:
e3:e9:a8:5d:33:c4:9b:bf:21:da:b5:2d:d3:96:c3:cf:3e:87:
e8:79:fb:1a:8e:66:b8:69:19:71:89:6f:74:6e:00:1f:4d:5f:
fb:38:c7:94:f9:b5:95:76:46:7f:ba:23:35:89:0b:79:ae:57:
76:20:c1:83:1c:3c:8d:98:0c:64:df:7a:93:56:82:65:07:de:
2a:d7:ad:3e:91:a9:65:61:7c:ea:dc:43:34:26:ec:c0:65:bd:
db:91:de:08:1e:15:d6:4f:80:06:49:63:c0:7c:6a:07:fe:d9:
1d:c0:25:d9:2a:84:02:5c:76:3f:1d:b5:8d:86:48:9c:0f:3a:
d5:8c:29:67:93:96:5e:a9:7c:c1:c4:b8:8f:69:df:0a:5e:ae:
99:30:3a:60:4d:86:33:79:3f:c1:ec:d4:b1:18:ed:2f:15:bd:
b0:06:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:42 2024 by rpki-client on console-fra.rpki-client.org