Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB8371FA3AA211EF98855E8C762E951A.roa
File: FB8371FA3AA211EF98855E8C762E951A.roa (raw, json)
Hash identifier: L9QVN6eDlj89K2c8ntYb4GPyq4iIjGD9lt6N7668+Eg=
Subject key identifier: 2F:A2:A5:12:89:65:2B:28:41:39:18:92:C9:CE:28:61:BD:6B:37:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 991B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB8371FA3AA211EF98855E8C762E951A.roa
Signing time: Fri 05 Jul 2024 07:48:35 +0000
ROA not before: Fri 05 Jul 2024 07:48:32 +0000
ROA not after: Tue 07 Jan 2025 07:48:32 +0000
asID: 63199
IP address blocks: 156.230.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39195 (0x991b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 07:48:32 2024 GMT
Not After : Jan 7 07:48:32 2025 GMT
Subject: CN=6687a553-48bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:9a:28:00:bc:b9:3c:cf:a4:e0:55:23:9a:
09:07:5b:1a:78:db:a3:d0:20:e7:8c:3a:13:31:5e:
62:f0:60:34:dc:4f:42:e1:10:8d:3b:c5:6c:ad:b7:
f1:f8:30:96:6e:d0:af:67:d3:89:bb:e2:b3:35:8d:
97:76:6c:88:37:cb:3f:ea:2c:5d:4a:2a:bc:2e:0a:
f0:a1:56:53:2d:a7:48:e7:4b:b1:ba:05:6e:41:9b:
ad:fa:d1:f6:19:32:f8:83:0b:bb:de:59:e9:b6:04:
93:a7:6f:0f:e6:30:d7:3d:d8:e3:e7:d9:d0:9e:c6:
75:0e:b1:50:4c:ab:cb:4b:b3:0b:0f:00:8f:eb:01:
ed:56:b1:b7:53:6e:f9:d0:1d:d8:66:87:11:98:2f:
48:ed:df:be:e4:81:f2:63:d0:67:80:f8:cc:06:49:
34:b5:a3:a3:ac:33:ab:05:10:ce:b9:51:67:a8:99:
9f:cb:5b:03:99:f8:f5:ee:d2:47:0f:13:48:a6:55:
03:3a:11:23:ca:e7:9d:9f:50:82:fa:d5:85:72:43:
92:3f:37:66:89:96:7d:3c:05:04:01:d0:17:52:43:
20:42:45:09:16:c7:69:7e:7e:98:53:2b:a3:e5:d6:
78:09:29:2e:e5:7d:e5:90:6c:3c:84:11:1d:90:eb:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A2:A5:12:89:65:2B:28:41:39:18:92:C9:CE:28:61:BD:6B:37:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB8371FA3AA211EF98855E8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.48.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:49:b9:25:38:cf:12:f8:42:98:c3:df:83:e0:ed:f7:7c:c6:
e2:c1:aa:fe:f6:52:61:aa:9e:74:4e:5a:d3:4e:6e:5b:c3:8a:
8e:47:de:51:3d:ae:f3:cc:d7:f1:d6:5b:89:3b:75:44:8a:12:
fa:b7:b8:df:f9:35:81:12:ad:cd:e6:31:cb:3f:0e:3a:7a:90:
6c:7b:6a:1b:7f:5a:93:a4:1b:19:0e:70:c6:98:3b:69:c8:ce:
5f:46:5f:f8:1d:9e:15:fb:0c:f9:14:67:96:c8:a8:2b:3f:00:
59:3f:2f:7d:2a:56:33:9a:eb:af:94:bf:87:61:d8:48:6e:6a:
d5:b0:d9:89:e5:ab:fc:21:b1:7a:9b:ed:bb:fa:d1:f9:12:01:
08:68:ee:87:07:7d:f8:69:54:99:01:fd:8b:cc:ca:6c:77:47:
a1:65:68:b5:98:fe:be:6f:21:29:46:9f:42:59:3e:fe:a6:df:
50:4a:d7:60:3b:49:f3:54:79:d6:5d:2f:c9:43:1a:8a:c4:47:
0b:5e:3f:25:25:a9:4c:84:b3:a7:66:da:cd:47:92:03:1d:77:
41:c9:6c:44:c0:b4:0b:ee:fe:f1:b3:d5:a7:10:a7:f1:b6:f0:
50:cb:d1:ed:90:b6:3c:88:a2:ce:f5:8f:07:0c:5b:49:fa:ee:
ea:5c:e4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:43 2024 by rpki-client on console-fra.rpki-client.org