Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E311E0701D1011EFAE005F347DDC24C2.roa
File: E311E0701D1011EFAE005F347DDC24C2.roa (raw, json)
Hash identifier: 205NrdgGpdKAiVUPQ3Vo+n1rDKweLVRk1xml2ZH6q5E=
Subject key identifier: E9:42:DC:93:E0:72:95:E3:17:C1:49:0F:4A:C8:83:8E:B7:23:79:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E311E0701D1011EFAE005F347DDC24C2.roa
Signing time: Tue 28 May 2024 16:39:44 +0000
ROA not before: Tue 28 May 2024 16:39:41 +0000
ROA not after: Sat 07 Sep 2024 16:39:41 +0000
asID: 138195
IP address blocks: 156.241.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Sep 2024 16:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36024 (0x8cb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 16:39:41 2024 GMT
Not After : Sep 7 16:39:41 2024 GMT
Subject: CN=665608d0-ec3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:61:de:7b:c2:e1:a8:2b:cf:73:f1:c0:52:
2c:70:de:30:2d:75:b5:10:37:4e:d8:dd:b6:af:4f:
91:5d:5c:29:13:f9:05:64:e1:b9:9d:40:1c:cb:73:
f0:b8:54:66:03:1f:9d:c1:f8:98:8e:db:8c:02:45:
81:fb:8d:1b:00:95:b0:74:6b:cb:dc:f9:a9:66:6f:
1e:ec:be:29:d0:9c:1a:8f:26:6c:05:b6:ce:b1:a4:
0d:ce:63:6c:26:ae:a8:39:57:1a:90:86:d4:e4:ed:
c9:77:51:e6:33:16:2d:c2:e0:5e:00:49:f9:87:a9:
18:a7:f2:b0:8b:22:dc:1f:67:1d:1e:9a:29:12:30:
5a:40:22:dd:8c:e5:7c:a2:3a:0c:03:d8:75:9d:96:
6a:4c:2f:c5:25:d8:d1:1b:cd:19:aa:48:3f:a5:f3:
66:4a:43:bb:4a:75:52:21:12:72:85:72:7f:47:6a:
56:38:90:5c:64:15:0e:cd:a4:5d:96:bb:2c:66:3a:
85:44:d8:4d:21:b5:19:e1:3b:36:de:85:95:b9:1e:
74:cf:ec:4e:4c:90:0e:af:a1:6f:56:c4:68:e9:77:
df:8c:5e:7c:be:ef:0a:48:70:00:eb:b9:59:b7:0e:
1a:b2:41:f5:1d:fa:35:af:52:5d:31:91:b2:29:cc:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:42:DC:93:E0:72:95:E3:17:C1:49:0F:4A:C8:83:8E:B7:23:79:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E311E0701D1011EFAE005F347DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:1d:41:e1:e1:75:d5:4f:b7:45:fc:43:38:9b:3d:5f:01:91:
2e:a4:0d:15:a5:3d:ee:68:80:e3:cf:db:a8:8b:e0:f2:07:b7:
a4:dc:54:cc:5a:fe:5d:74:cf:af:c5:6a:19:b0:c0:e6:29:32:
1a:c4:99:f9:ab:ff:17:04:ee:d9:fc:01:b7:81:ae:5e:46:bf:
a6:b9:59:fb:ac:fa:c1:7e:8f:9d:59:0f:62:d4:76:5f:f3:aa:
7d:99:e1:40:cf:b5:a5:99:2e:c4:55:2a:19:d5:ed:72:71:a7:
9f:e9:41:5c:03:82:44:e4:cb:f7:b6:db:00:97:17:2b:74:48:
bc:8d:1d:d3:3d:55:58:ed:c7:bd:3f:eb:de:95:55:d9:9a:21:
48:08:f3:ea:3f:57:05:df:25:9b:22:ec:f9:1e:69:2e:a6:d9:
98:dd:aa:d3:ec:69:5f:c9:99:6f:c9:41:ad:6a:14:04:e2:ac:
02:f7:57:c8:74:5b:05:37:ea:45:b0:e3:c7:0d:f0:8f:61:a5:
b7:83:7c:b0:0b:9c:49:ea:90:84:d4:7a:2e:f2:e0:f9:65:6c:
ec:ce:42:f4:69:15:cc:d8:38:8b:e3:c2:05:54:66:66:1c:98:
f0:e0:48:71:c7:c8:bd:c2:6f:3b:f4:33:f1:aa:26:fe:8e:62:
1a:60:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:10 2024 by rpki-client on console-ams.rpki-client.org