Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2DFA5E0141611EFB9DDE622017001B1.roa
File: E2DFA5E0141611EFB9DDE622017001B1.roa (raw, json)
Hash identifier: T08tsCjEIRX2pzIk+x9aoW8+y0KYAKg/AijG9mNDp4U=
Subject key identifier: 01:15:3F:EF:66:9C:58:20:ED:5F:CA:0C:D3:A0:A8:9E:46:29:C9:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8AA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2DFA5E0141611EFB9DDE622017001B1.roa
Signing time: Fri 17 May 2024 06:30:00 +0000
ROA not before: Fri 17 May 2024 06:29:57 +0000
ROA not after: Mon 12 May 2025 06:29:57 +0000
asID: 41095
IP address blocks: 156.227.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35491 (0x8aa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 06:29:57 2024 GMT
Not After : May 12 06:29:57 2025 GMT
Subject: CN=6646f968-3691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:9c:9c:b8:6b:90:47:2f:8c:2d:35:5c:e9:
f3:8f:4d:97:87:10:cc:b6:6a:c1:41:01:9a:8b:81:
a6:e9:37:7d:cc:fc:1f:e9:d6:1f:44:b6:f1:fa:d7:
eb:c2:39:99:0e:4b:2c:ad:07:2b:36:f7:38:23:44:
b7:02:f3:4b:df:11:98:3c:df:06:e1:f3:53:6c:20:
9e:20:0c:3d:49:66:a7:af:7d:a3:9a:79:54:21:e2:
ed:81:fb:80:28:03:73:a2:fe:29:0c:21:79:6f:67:
45:6d:25:09:ef:1d:4e:62:6a:25:de:15:36:a6:ed:
b8:c2:aa:d5:61:f3:c3:64:ba:86:34:28:7b:10:26:
48:df:0f:e5:59:38:4f:b1:34:89:65:fc:bc:76:5a:
14:0a:c3:ed:41:25:a1:4d:9e:1b:04:bb:b6:6a:44:
1b:a8:90:26:c2:19:38:ed:10:1d:92:f4:06:6e:7d:
b8:df:d8:fa:c4:46:72:2f:12:4f:26:c9:1f:d7:3f:
c8:99:19:f2:3e:aa:6b:cd:cc:50:22:77:02:cb:f8:
9c:5c:ff:2f:e5:4c:8b:41:00:5b:82:47:02:bf:96:
4b:59:11:33:04:39:5b:2c:7a:10:13:9b:3a:02:2e:
d2:93:6a:77:8f:37:2d:d3:4d:98:d2:0d:7a:7c:9b:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:15:3F:EF:66:9C:58:20:ED:5F:CA:0C:D3:A0:A8:9E:46:29:C9:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2DFA5E0141611EFB9DDE622017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.7.0/24
Signature Algorithm: sha256WithRSAEncryption
97:7c:53:83:62:f1:e5:7b:81:5a:b9:a5:9d:32:44:f2:0c:ee:
03:87:7e:e1:8a:72:ec:a3:9d:1a:60:3c:e8:4e:12:52:4c:20:
f5:e1:a8:7a:06:1d:b1:5f:10:17:2d:61:f1:2f:b4:44:20:1e:
d3:76:4e:76:68:a5:71:bf:df:8c:0f:45:2b:06:d1:40:89:06:
53:39:ea:76:e1:30:4a:19:c7:59:47:eb:a3:fe:e1:88:05:3b:
e2:89:16:cc:a7:f5:61:eb:15:05:76:13:37:98:29:da:3a:71:
56:18:15:53:c9:98:88:cb:53:12:96:4c:e2:1c:4b:59:e9:12:
6a:5c:cc:b6:21:3b:d0:1a:9d:96:2b:cf:7e:c2:be:cb:bf:b0:
b1:bf:78:e0:8b:c0:6f:5c:7c:86:b3:8d:ca:c8:49:b8:50:bb:
08:b4:6c:90:ea:45:d4:da:17:e1:b6:94:ed:ac:44:e4:c4:7c:
34:fd:ef:df:fe:a7:95:83:b7:14:4f:ac:37:22:cd:24:0f:72:
d6:fb:f9:02:37:14:ac:f0:0f:bd:44:e7:ba:06:0b:c8:a2:a6:
90:67:00:b6:4d:de:43:ec:58:d0:dd:74:1f:eb:45:a4:3d:ed:
23:1b:a7:27:49:e4:fd:79:0b:ec:64:20:ce:28:93:57:bb:53:
87:52:f7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:10 2024 by rpki-client on console-ams.rpki-client.org