Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02B02AE45F1611EFBC89E18C762E951A.roa
File: 02B02AE45F1611EFBC89E18C762E951A.roa (raw, json)
Hash identifier: w7+e4w6h4277Mjzjjn8zMJz1AVIsa2w5xKqMNHBfA5o=
Subject key identifier: D9:B8:50:8F:80:E5:BE:5A:9F:64:94:6F:41:B7:10:CD:2F:77:B5:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA5C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02B02AE45F1611EFBC89E18C762E951A.roa
Signing time: Tue 20 Aug 2024 17:02:41 +0000
ROA not before: Tue 20 Aug 2024 17:02:38 +0000
ROA not after: Sun 01 Dec 2024 17:02:38 +0000
asID: 5065
IP address blocks: 156.229.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43612 (0xaa5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 17:02:38 2024 GMT
Not After : Dec 1 17:02:38 2024 GMT
Subject: CN=66c4cc31-3d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:5c:d6:fe:13:0e:4f:bc:5d:f4:cb:3b:41:
c8:04:ab:b2:ea:95:a8:27:bc:a1:f2:89:3c:ee:05:
01:43:eb:e2:2b:f8:2a:f9:e5:ae:d6:d3:bb:41:df:
6a:98:28:d0:6d:db:ec:76:aa:67:d8:f5:bf:0d:c9:
db:1a:1d:69:9d:1d:c3:91:f0:10:c4:80:7a:5a:35:
d0:bd:56:f3:7b:11:7c:21:4d:62:99:f2:16:1b:fb:
57:e9:83:b7:1b:80:4f:2e:b4:fe:71:26:20:0e:90:
cf:54:22:65:97:6a:45:8f:e5:31:a7:d3:c5:fd:eb:
2a:96:52:d7:9a:62:3a:6a:d0:70:74:35:0d:69:3c:
97:42:b8:83:d6:8e:84:0d:16:20:a8:4c:3e:b8:3f:
4d:f6:80:bc:15:81:52:a7:9d:04:51:75:3d:1a:0a:
67:f3:a4:4d:04:c8:09:9a:16:d6:4e:71:f4:bb:91:
eb:9e:9e:82:ea:09:59:56:bb:de:40:9a:5b:ff:b3:
19:d6:a1:93:b1:02:bd:c2:a1:0d:ae:54:bf:6b:1b:
02:a0:7c:bf:83:76:c1:63:a9:ce:a6:74:45:72:fd:
de:4a:d5:6c:8c:0f:ec:4a:e5:1b:d2:93:de:6a:b6:
5a:4e:a0:a2:fa:c5:06:2b:a0:f1:9b:8c:2f:65:e4:
d2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B8:50:8F:80:E5:BE:5A:9F:64:94:6F:41:B7:10:CD:2F:77:B5:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02B02AE45F1611EFBC89E18C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.52.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9f:d2:86:2f:1f:75:fa:32:48:cb:d1:a6:31:b6:ca:32:f1:
8c:f4:09:d8:04:bb:61:e8:22:cb:f8:84:3c:02:94:93:ce:a4:
e0:1c:ab:2a:fe:2b:86:d6:ac:54:1f:c8:d5:20:9d:9a:f8:42:
1b:21:87:8d:ed:b6:dd:66:85:77:8f:9c:de:d2:cc:9e:95:8b:
4a:1e:6f:5e:e3:81:1b:77:b8:70:34:4d:3e:a3:ff:5a:6e:c9:
98:b9:e9:26:fc:94:c7:3b:85:59:8a:26:6a:5e:a5:9e:64:51:
44:42:56:c4:94:30:b7:42:05:a3:7f:4c:b8:41:90:e4:a4:13:
77:87:74:bc:57:8e:6d:5d:fc:0d:4e:3c:9e:8e:93:6e:29:69:
8a:42:01:5e:e8:81:e9:11:fc:b3:55:a4:f8:2d:7a:5f:42:df:
7d:45:e2:e9:32:0d:96:6c:15:1d:ff:db:55:65:f9:40:d4:60:
e2:9b:c9:61:29:68:01:a5:3e:af:ca:99:8e:af:ea:4c:e9:bd:
33:42:95:f4:4f:00:c9:ba:e0:f9:ab:3d:5f:8f:f5:dd:4c:c5:
7f:70:48:a4:6e:09:15:5d:8e:c8:b4:04:66:8b:79:51:60:ac:
20:b8:a2:a2:0c:0b:64:cc:1c:e8:3f:6f:3e:a3:09:e5:0c:8b:
86:7e:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:17 2024 by rpki-client on console-ams.rpki-client.org