Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB92B1381D8D11EF981A1D237DDC24C2.roa
File: FB92B1381D8D11EF981A1D237DDC24C2.roa (raw, json)
Hash identifier: sJF5s1nW5WLsq0JdTmCIMA/Dgk087oMyp8JqL4UX7Gg=
Subject key identifier: AE:F3:93:03:DA:D4:8F:F7:45:E3:26:34:56:0F:42:33:CA:90:E8:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB92B1381D8D11EF981A1D237DDC24C2.roa
Signing time: Wed 29 May 2024 07:35:12 +0000
ROA not before: Wed 29 May 2024 07:35:09 +0000
ROA not after: Sat 14 Sep 2024 07:35:09 +0000
asID: 138195
IP address blocks: 156.237.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36087 (0x8cf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 29 07:35:09 2024 GMT
Not After : Sep 14 07:35:09 2024 GMT
Subject: CN=6656dab0-4efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:22:d0:3d:3a:f8:35:08:f0:80:d5:f7:1f:
05:c2:67:20:b2:09:f0:9e:c4:57:20:2c:ac:ac:00:
be:79:c4:0a:f6:db:42:85:b3:82:a8:ea:a7:c7:d1:
6d:0d:02:26:cf:45:fc:00:d5:b3:4f:ad:be:9a:f7:
ab:de:e6:0a:fd:96:1d:74:2a:6f:bd:42:09:55:73:
1f:fc:9b:a1:ba:93:ee:81:4a:bc:d6:ea:b4:95:cc:
5c:23:39:2a:0c:24:ad:fa:10:b7:c9:88:37:24:e6:
eb:62:51:68:e8:4a:5c:f3:03:48:7c:42:84:84:09:
73:2a:f2:3d:d0:d2:5d:35:0d:40:1a:ee:43:69:f9:
cd:20:96:89:e4:75:c9:21:0a:e2:25:88:58:9a:74:
8d:27:1c:ce:cd:e0:d8:df:04:7f:d7:f3:85:c9:cc:
a7:e5:5a:b6:c7:cc:5f:97:53:3e:5b:c2:3d:39:ab:
d6:08:98:42:9b:8c:f1:5a:50:37:4b:04:b8:23:a6:
67:07:cc:df:bc:cd:d1:1a:34:b8:30:3b:24:d8:31:
3e:14:d9:12:ce:20:89:77:8c:52:4e:76:2c:8a:aa:
e1:66:00:7d:c0:21:6d:70:83:cb:f4:b1:f3:35:bc:
76:ee:88:84:2c:b0:ee:d9:e3:4d:e7:48:c1:97:d7:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F3:93:03:DA:D4:8F:F7:45:E3:26:34:56:0F:42:33:CA:90:E8:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB92B1381D8D11EF981A1D237DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.32.0/19
Signature Algorithm: sha256WithRSAEncryption
97:3f:9a:92:f4:eb:57:79:63:01:0c:7a:f4:3d:65:3e:86:f3:
9a:c9:9f:eb:b8:63:67:cc:d6:f0:99:37:38:03:e4:ec:a8:85:
80:68:b6:ad:49:bb:26:69:a4:fa:81:70:cf:ec:31:a9:9c:d7:
36:08:53:83:62:64:c5:8a:ab:7c:63:3b:9a:dd:56:66:1a:a4:
0b:4a:36:23:b9:07:b4:2e:b7:79:ae:ec:7a:2f:55:8b:d8:89:
49:ea:b4:1d:b4:e5:ae:e2:d2:b6:5f:c6:da:a9:a7:78:fa:dc:
ea:aa:38:cb:d9:a5:8d:c9:56:34:60:8e:d1:3d:1c:57:6d:f3:
40:9f:85:cf:85:03:18:5f:66:29:5a:73:db:c9:f4:31:c4:86:
ea:ae:69:45:17:b5:a9:6d:17:52:58:48:e5:43:1f:5f:df:b4:
33:58:cd:96:c6:60:97:ec:c6:4b:0f:46:7c:2a:33:d9:d0:d5:
85:24:e3:c0:10:8d:3e:ff:c0:84:2e:90:2e:72:b3:6c:76:67:
9e:be:e4:1a:66:71:10:9c:dc:2e:33:8e:9a:cc:0a:e6:b5:60:
0a:cc:db:ea:45:70:10:24:4c:94:fd:93:4b:b5:9b:29:fe:cf:
00:b5:bd:e4:d6:98:79:19:e3:6a:5a:fe:6d:24:27:35:e7:41:
e2:7c:ff:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:11 2024 by rpki-client on console-ams.rpki-client.org