Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF4305E0062C11EFBB42423B017001B1.roa
File: EF4305E0062C11EFBB42423B017001B1.roa (raw, json)
Hash identifier: RZfDpYCdI26mkLk6faLS15C06Y4lHqGGRTdCvghSO5o=
Subject key identifier: 59:3A:B4:FE:15:28:98:E3:C6:3C:A1:1D:DC:C9:1D:AC:BB:BA:1F:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 86B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF4305E0062C11EFBB42423B017001B1.roa
Signing time: Mon 29 Apr 2024 13:32:34 +0000
ROA not before: Mon 29 Apr 2024 13:32:30 +0000
ROA not after: Sun 15 Sep 2024 13:32:30 +0000
asID: 142286
IP address blocks: 156.250.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34488 (0x86b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 13:32:30 2024 GMT
Not After : Sep 15 13:32:30 2024 GMT
Subject: CN=662fa171-ac17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:cb:c6:90:11:03:5c:25:7d:f2:56:c6:33:
8a:f1:95:16:dd:10:aa:b2:85:87:2e:e2:70:2e:53:
e6:de:ad:a0:5b:fb:36:52:21:23:ee:23:fc:d5:46:
e6:91:20:71:c1:2f:23:5e:24:c5:c6:61:da:58:95:
d9:7e:a0:98:82:0d:2b:ef:80:61:37:76:07:bf:c8:
6f:53:63:97:36:10:59:2e:1f:19:82:98:ff:74:f1:
9b:c7:f3:2d:e3:59:e6:56:d9:da:04:cb:8e:4b:5b:
5b:03:3d:f7:d1:11:82:06:9c:97:d0:6d:a1:84:11:
bd:ab:92:8b:7e:5d:48:b9:14:36:35:c2:c0:7b:41:
af:26:da:c2:74:39:ca:8d:29:36:02:87:05:f1:4c:
c0:ae:bb:79:f5:54:5e:07:a4:cd:bc:21:06:47:c5:
4c:dd:11:11:64:2a:61:59:5c:8d:93:4e:ea:81:dc:
59:8f:18:8e:c3:6d:fc:2a:16:da:65:6b:03:26:b0:
71:8f:85:64:f2:c2:2b:b9:e1:4c:d7:c3:a2:5c:e3:
dc:fc:2f:f6:0a:51:5d:9b:cf:4a:0a:33:b4:ee:15:
2e:17:32:94:0c:ca:1e:d7:13:1c:19:85:13:05:04:
e7:b0:2d:35:35:b1:80:1d:7d:f0:72:16:55:7e:93:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:B4:FE:15:28:98:E3:C6:3C:A1:1D:DC:C9:1D:AC:BB:BA:1F:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF4305E0062C11EFBB42423B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:d5:01:02:76:42:4e:36:b2:0e:31:d2:a1:1d:a6:c1:7b:f3:
1f:d1:81:2d:e6:b3:7e:d8:81:27:9f:d6:1a:45:cb:62:94:ef:
4c:44:d9:66:3f:59:fc:52:84:96:4a:7b:32:cf:1c:58:ad:83:
75:e0:3f:34:db:3a:d7:7f:71:b0:a6:bf:5a:3c:c3:34:db:da:
67:4c:4f:22:05:35:91:53:32:e2:64:24:1d:90:dc:ff:1a:e3:
ad:fd:c3:a8:b5:00:7e:6c:48:dc:eb:ee:39:36:af:60:b2:46:
6a:5c:9d:fe:53:67:42:ff:0c:cf:be:e1:d0:ea:21:db:5c:85:
87:3b:8e:44:72:4d:7b:43:58:16:32:8c:57:99:9b:47:3d:f6:
cf:37:66:9d:7d:1b:17:1d:84:3f:ed:c2:14:bb:18:c6:d8:83:
e6:78:0f:b9:65:cb:06:71:3e:cd:fb:56:74:db:72:8e:3a:6f:
9b:e3:4d:46:0a:2a:81:ea:9f:46:e4:f3:e6:d9:61:3c:ab:35:
9d:c3:b4:fe:3d:7b:91:06:8a:e3:67:a9:bc:a1:af:38:90:3e:
d4:5e:61:49:81:f0:41:9e:6d:01:22:01:c1:eb:a8:60:7d:cf:
3f:42:28:e3:d8:22:25:7d:e3:fb:16:20:c2:f0:1d:38:d9:a0:
28:bc:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:11 2024 by rpki-client on console-ams.rpki-client.org