Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02E8A2CA47E211EFABE0459C762E951A.roa
File: 02E8A2CA47E211EFABE0459C762E951A.roa (raw, json)
Hash identifier: v9dKzarKrcI9ohd0vjG3YxYnSBm8Rviay6n8afbrFQ8=
Subject key identifier: 6F:68:65:01:F1:E9:81:AD:A6:1F:16:80:32:C0:9F:16:68:E3:2B:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02E8A2CA47E211EFABE0459C762E951A.roa
Signing time: Mon 22 Jul 2024 04:22:31 +0000
ROA not before: Mon 22 Jul 2024 04:22:28 +0000
ROA not after: Sun 01 Jun 2025 04:22:28 +0000
asID: 133007
IP address blocks: 156.247.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40485 (0x9e25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 04:22:28 2024 GMT
Not After : Jun 1 04:22:28 2025 GMT
Subject: CN=669dde87-9c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:46:d7:c1:32:15:d3:81:d0:03:5b:46:f2:
92:d3:b8:06:68:8b:44:e8:43:ea:78:0b:e1:d4:a0:
1f:cd:50:05:3b:7b:62:3e:45:bf:1c:5c:ef:61:62:
6a:8d:3b:b9:c6:6b:fa:28:31:d1:0a:e2:e1:61:3a:
04:6b:4b:db:23:71:80:6a:e4:a1:00:39:e0:1f:a2:
bb:a1:13:8b:9a:c5:d0:9f:e5:c8:f5:33:f3:30:36:
e6:28:fc:66:19:22:65:38:20:84:d6:01:47:ac:36:
cb:85:47:19:c1:8f:d2:5f:57:f6:44:11:98:74:6a:
ad:51:d6:40:4e:67:30:22:b1:4f:08:43:e4:70:cd:
bc:26:1a:36:16:23:70:a1:d2:ab:20:0e:81:6a:e8:
0b:27:5d:02:9f:e6:77:78:c3:f6:b6:a7:44:75:f5:
aa:ad:1c:38:07:47:6b:ff:10:f3:a5:d1:ff:b0:84:
ae:0e:33:8a:cf:cc:7b:16:16:48:1a:bb:08:8a:c6:
fe:d8:be:ec:a1:71:f6:7a:04:be:87:e9:e7:ea:62:
4d:53:11:a5:6e:0a:2c:3b:65:1c:fc:1f:37:e0:31:
6c:4d:74:ab:fd:13:34:38:37:d3:ea:41:0e:50:53:
f7:b9:f7:e1:87:52:59:84:b7:22:b1:89:7b:3c:ac:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:68:65:01:F1:E9:81:AD:A6:1F:16:80:32:C0:9F:16:68:E3:2B:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02E8A2CA47E211EFABE0459C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.1.0/24
Signature Algorithm: sha256WithRSAEncryption
61:73:33:89:16:b1:40:a7:c8:75:6f:14:5d:eb:5c:ae:21:df:
db:27:b9:c7:4a:4e:41:73:a8:c7:2a:f0:5b:9b:98:a2:1f:c9:
00:64:49:60:2e:20:6d:8c:70:bf:0a:a1:e3:61:54:bb:3a:a8:
dd:b7:ac:9f:23:07:0d:fd:23:23:22:16:c8:b8:11:e7:31:6c:
a9:fa:ed:f0:a8:97:a3:33:ce:32:7e:b2:49:40:bf:74:9d:16:
73:d3:d4:c6:8e:db:06:1b:7a:60:3d:73:d8:11:64:22:40:0e:
3e:5f:0b:ac:bc:2f:f6:a3:35:60:03:f7:44:bf:6a:e6:68:5a:
04:40:e3:40:53:a9:1d:09:e3:91:71:82:67:43:78:88:44:ca:
4d:92:10:d9:dd:1c:70:de:65:57:0e:1d:fe:f0:7f:64:90:62:
8b:ec:71:53:8b:d4:2c:3f:7a:74:dc:35:e5:9a:5e:9d:68:a2:
af:a3:e3:ee:3a:07:a4:79:ec:68:6a:04:73:29:d1:eb:2c:e8:
60:81:48:ef:0e:8e:ab:af:60:e1:76:5a:5d:cd:8d:00:5b:d2:
df:ce:30:a4:4c:ed:7f:9f:54:5c:af:f8:79:ab:5a:75:d2:42:
2d:4f:49:0c:8a:a9:07:af:34:5a:1e:fa:06:2a:90:12:cd:a1:
49:8b:1d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:17 2024 by rpki-client on console-ams.rpki-client.org