Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3E3EA108AD011EFAA8F287C762E951A.roa
File: E3E3EA108AD011EFAA8F287C762E951A.roa (raw, json)
Hash identifier: ZDsrRhqetmFTgIq0Nn58iLfRcqUjYNaEX+sjKdwADUE=
Subject key identifier: 18:E0:9C:77:D7:F6:C1:07:A4:9D:3D:32:0A:DD:17:1E:80:6E:16:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C4E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3E3EA108AD011EFAA8F287C762E951A.roa
Signing time: Tue 15 Oct 2024 08:38:45 +0000
ROA not before: Tue 15 Oct 2024 08:38:42 +0000
ROA not after: Fri 25 Oct 2024 08:38:42 +0000
asID: 147302
IP address blocks: 156.238.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Oct 2024 08:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50407 (0xc4e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 08:38:42 2024 GMT
Not After : Oct 25 08:38:42 2024 GMT
Subject: CN=670e2a15-dcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:26:5b:70:8c:33:75:e4:e4:80:e5:57:19:
2f:54:73:e2:04:78:b7:88:6b:f4:9f:4e:a1:73:be:
12:dc:83:0b:c3:ce:ea:20:8d:1a:15:94:12:dc:d7:
0f:8d:11:00:04:56:e8:63:87:fe:f6:f0:40:ba:27:
f7:13:78:3b:d3:10:75:02:3f:de:b6:4d:7c:79:03:
5a:fc:19:39:9c:58:6a:25:48:1c:25:44:be:9b:97:
a3:62:cf:36:34:1c:59:4b:c2:34:e1:e6:a6:69:c3:
a6:86:0d:09:07:9c:99:3c:57:f3:a6:65:bd:85:2f:
d7:1d:92:65:a1:ac:27:21:f7:8e:04:a9:7f:c4:15:
a8:77:04:af:7c:b4:43:38:0e:6a:41:c7:82:c7:13:
6f:59:54:b2:6c:88:88:df:d0:d0:ee:96:16:74:a9:
56:30:a1:1d:fc:ee:d1:13:de:96:58:6f:af:68:e1:
50:58:01:ed:82:fe:78:51:ba:32:4b:6b:15:ce:08:
a8:0b:a8:a2:50:81:19:3d:13:a9:54:9e:94:80:67:
7b:61:21:9a:06:45:ba:72:c2:e4:bc:76:9a:aa:b7:
ad:47:9e:2f:70:8c:ac:5d:d1:c9:92:15:66:5f:36:
1b:cb:58:39:6a:75:2f:96:ea:a9:0b:43:6a:7c:bf:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E0:9C:77:D7:F6:C1:07:A4:9D:3D:32:0A:DD:17:1E:80:6E:16:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3E3EA108AD011EFAA8F287C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.70.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:69:83:69:46:ce:af:51:1e:0a:07:df:b2:94:e5:19:17:44:
2f:82:26:4f:52:bf:f4:fa:10:5e:9f:47:65:dc:93:10:09:f2:
42:31:bc:95:44:00:0d:d7:2d:86:bb:a3:9f:89:ea:25:6e:eb:
bb:32:a2:06:36:bd:ff:40:96:d7:b8:b3:9d:38:2a:7d:a5:72:
9e:88:a4:1d:37:13:2a:6b:42:7a:61:dc:52:33:2c:cd:ab:fd:
c9:59:34:46:c3:2d:33:03:cf:7b:4c:03:6a:d4:a5:f8:65:8f:
2a:96:68:3e:a7:99:e7:33:4b:e4:1c:23:53:1a:b2:47:ba:6b:
65:f0:37:55:92:b7:f0:ce:4a:28:e3:11:fa:8e:60:41:1e:9d:
83:95:7d:15:f8:ce:ac:35:66:f2:b8:76:51:97:35:f0:20:3e:
7c:76:f0:37:2d:74:58:b5:15:07:5e:4d:b3:50:e2:09:1d:e4:
e2:ab:db:fd:30:e0:37:5e:e4:74:21:78:a5:83:b8:4c:84:79:
c4:2b:49:68:6e:9d:f9:fc:e1:2b:78:66:7a:68:41:17:2b:7b:
57:2e:dd:b7:5e:d8:82:a7:62:0b:bd:76:26:3d:e3:74:13:fb:
d6:7d:ee:49:dc:81:79:a7:85:5e:cd:0e:34:be:7b:e4:8e:2d:
3b:27:bf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 11:38:40 2024 by rpki-client on console-ams.rpki-client.org