Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3378AB05AD611EFA2EF9E94762E951A.roa
File: E3378AB05AD611EFA2EF9E94762E951A.roa (raw, json)
Hash identifier: RErAIV+6c8HLIn6cHEvSCb0NlGZ+ySgMntKyRrsyasQ=
Subject key identifier: 30:D5:2A:BE:D1:BD:C3:05:B3:7A:1B:F5:92:90:39:53:CC:A2:6C:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A79D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3378AB05AD611EFA2EF9E94762E951A.roa
Signing time: Thu 15 Aug 2024 07:20:45 +0000
ROA not before: Thu 15 Aug 2024 07:20:42 +0000
ROA not after: Sat 09 Aug 2025 07:20:42 +0000
asID: 3491
IP address blocks: 156.230.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42909 (0xa79d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 07:20:42 2024 GMT
Not After : Aug 9 07:20:42 2025 GMT
Subject: CN=66bdac4d-6ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:d3:f3:92:36:89:b4:be:55:44:66:ca:ca:
84:20:96:1f:61:3c:45:9b:d4:e1:19:f4:be:85:fc:
41:e0:1c:8d:00:83:d1:3c:46:ae:ed:e5:f8:0d:c1:
73:11:9f:07:72:17:b3:4e:96:e2:2d:66:14:6e:81:
e9:b6:2d:9d:b5:33:27:a8:6f:5f:3a:8a:b2:66:41:
31:5f:e2:e0:7f:fe:ff:a6:80:11:c0:4a:06:a7:9e:
8b:f3:f9:a5:e6:fe:16:f8:ea:9b:32:d4:7d:96:4f:
8a:ba:94:26:a5:63:bc:32:a8:ed:8f:7a:9a:db:9e:
cf:69:48:13:a7:e9:d0:aa:9c:fd:d3:10:dd:58:04:
89:45:59:7b:7b:30:50:dd:9b:7a:e0:15:74:b4:3f:
57:bd:b9:12:d3:e9:e5:4a:38:31:fe:05:9e:45:a6:
45:21:72:c1:ee:67:a9:12:8a:34:95:70:de:e4:6e:
ab:2a:28:65:2a:9e:08:0d:dd:05:19:13:63:28:e8:
65:6e:25:98:1d:38:9c:ab:24:c4:97:cd:2d:d2:5c:
7c:c5:cf:6f:55:b1:9c:39:a9:77:ad:c7:14:a0:44:
34:19:c4:84:69:55:f1:60:6e:ca:27:7a:a5:e3:46:
87:a2:a1:53:e4:53:59:4f:00:98:33:ba:65:35:c5:
05:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D5:2A:BE:D1:BD:C3:05:B3:7A:1B:F5:92:90:39:53:CC:A2:6C:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3378AB05AD611EFA2EF9E94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.3.0/24
Signature Algorithm: sha256WithRSAEncryption
10:91:69:e5:eb:da:0b:3d:fd:0c:db:96:3a:5d:27:8c:e2:70:
2f:5a:16:a6:15:ac:fd:68:b8:10:22:67:ff:18:c7:85:da:a1:
f7:bb:73:9c:c4:29:f2:2a:fc:7c:b8:37:3b:4b:b6:d0:c2:84:
95:70:18:2b:e3:c8:a9:b1:f7:24:51:fd:5c:b3:25:91:ed:d8:
fc:82:ed:05:fe:96:f8:bf:37:b4:df:59:0e:2a:d2:1d:0c:07:
a4:21:20:57:96:1b:0e:ca:e7:8e:57:d3:2b:bb:01:88:f7:bc:
8c:c4:56:bd:96:06:eb:57:0c:3c:cb:36:0a:6f:d8:ab:e8:9d:
66:92:dc:51:3d:a4:83:70:f5:b1:ab:71:76:0d:1b:5b:77:84:
1d:3e:af:ca:43:47:b3:62:b9:c0:fb:cc:63:aa:79:d6:2d:b5:
74:d5:46:fd:f2:26:69:70:70:75:dd:d4:77:9f:bd:d0:bd:44:
f8:ae:d8:0c:9b:9e:22:b0:b7:76:2c:71:6a:99:df:dc:1b:64:
98:76:0c:8a:84:ca:88:0a:86:f6:f8:ae:f0:84:88:78:2d:88:
57:2f:62:3a:85:fd:7c:2d:0c:da:9e:24:c8:cd:6c:34:ff:8f:
47:7f:23:bc:a5:a7:11:d8:ed:60:1b:b7:86:70:75:44:63:09:
8c:e1:4e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:51 2024 by rpki-client on console-fra.rpki-client.org