Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01CA306C5F1511EFA002DA85762E951A.roa
File: 01CA306C5F1511EFA002DA85762E951A.roa (raw, json)
Hash identifier: ZaVhEm0YHx2fG5yjLOXEV8tQT0Wd63Jwi3M9WMOH3q4=
Subject key identifier: 4C:C5:DB:66:BF:F2:DB:BA:92:84:8C:1B:6F:61:09:8F:66:1E:3D:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01CA306C5F1511EFA002DA85762E951A.roa
Signing time: Tue 20 Aug 2024 16:55:30 +0000
ROA not before: Tue 20 Aug 2024 16:55:27 +0000
ROA not after: Sun 01 Dec 2024 16:55:27 +0000
asID: 5065
IP address blocks: 156.229.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43606 (0xaa56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 16:55:27 2024 GMT
Not After : Dec 1 16:55:27 2024 GMT
Subject: CN=66c4ca82-f58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:ed:97:52:6b:12:03:f7:db:8c:94:dc:7d:
60:41:a8:4f:c7:32:7e:73:11:1f:b2:fa:a0:40:6d:
9c:90:cd:50:30:20:0f:9a:f3:5c:b9:1d:2d:c5:fd:
8a:98:9e:ff:a5:f7:e4:47:df:bc:66:4f:42:30:1c:
31:09:55:84:28:7f:c6:0b:ce:b2:87:4e:4e:f7:dc:
53:86:82:4c:14:97:e3:c0:55:c5:2c:7c:15:19:24:
a8:3f:ac:ab:94:c1:2e:76:8d:45:57:cc:1e:9e:b8:
37:30:b9:9f:69:05:91:51:db:7c:cf:74:f1:7c:3f:
9e:b5:2e:35:c9:1c:92:39:c4:b0:26:f8:2f:78:bb:
34:94:60:dd:62:4f:ba:a1:2f:50:7b:e7:1e:9f:05:
41:ab:7b:55:36:3e:18:69:93:87:76:3d:5a:ec:94:
be:6d:7b:26:ff:ce:4d:3e:e7:13:4e:24:74:33:ba:
14:39:ef:1d:c3:b2:cd:87:df:43:b6:7b:de:b4:a4:
5c:c5:d1:ad:7b:19:81:fc:57:15:e2:cd:ce:80:cb:
0e:8c:f0:ec:70:81:1d:7e:0b:59:bf:2b:87:da:2d:
5e:c4:1a:2c:9e:54:aa:98:9f:b6:6a:8c:9e:1e:94:
35:99:38:de:92:a2:83:a5:2d:65:0a:27:20:4b:0f:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C5:DB:66:BF:F2:DB:BA:92:84:8C:1B:6F:61:09:8F:66:1E:3D:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01CA306C5F1511EFA002DA85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.56.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c1:19:c8:06:11:6b:0e:1d:3d:06:4e:70:94:1a:1e:4f:7f:
10:b1:5e:20:7a:00:ff:00:63:cc:6c:ff:2a:37:7b:7d:a3:63:
9c:9b:d7:5f:e9:bb:ee:4b:2b:63:bc:db:d8:43:a8:ed:c4:d5:
4b:db:7e:c7:66:5a:23:54:cf:48:6f:19:3b:72:d9:48:36:9f:
8f:31:67:c2:45:9f:86:d9:c8:f4:cb:c1:75:28:d4:24:57:ee:
80:f4:38:5c:aa:52:20:8d:9b:74:f7:8d:b3:26:16:34:f0:01:
78:d4:ea:51:4a:20:28:22:fd:7d:96:85:17:97:e7:56:58:27:
71:fb:34:2e:08:d3:cf:3c:80:7e:a7:9d:53:d6:f1:08:72:87:
d6:a7:97:e8:15:2f:8c:18:45:7f:48:30:19:a3:5f:9e:55:d0:
4e:04:89:bf:3b:c8:03:fa:7b:a3:92:0b:6a:f7:aa:c1:c8:04:
b0:86:0b:2b:d8:70:b2:3a:3d:bb:d6:9d:c3:f7:34:47:1e:15:
27:77:3d:8d:98:b2:e1:3c:8f:ba:41:11:e2:63:e6:3b:be:c2:
d6:4e:e8:27:4d:66:5c:ec:b2:b5:50:bc:fc:e2:9c:e8:ac:5d:
23:8b:0d:52:72:00:2b:02:3b:a2:65:76:f5:e1:72:3f:a0:f8:
2a:1d:d8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:17 2024 by rpki-client on console-ams.rpki-client.org