Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05F65894983811EF83C69F6D762E951A.roa
File: 05F65894983811EF83C69F6D762E951A.roa (raw, json)
Hash identifier: B1d2BPmDTcc2FKHp698fSVDSqmLkNAwEAzQWLCFuM/8=
Subject key identifier: 0A:71:F6:37:6C:F3:94:80:5A:3E:5C:BA:60:B5:AA:45:79:FC:EF:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05F65894983811EF83C69F6D762E951A.roa
Signing time: Fri 01 Nov 2024 09:59:46 +0000
ROA not before: Fri 01 Nov 2024 09:59:42 +0000
ROA not after: Mon 25 Nov 2024 09:59:42 +0000
asID: 137547
IP address blocks: 156.245.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52121 (0xcb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 09:59:42 2024 GMT
Not After : Nov 25 09:59:42 2024 GMT
Subject: CN=6724a692-2499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:f9:d7:3a:7e:d1:e9:c0:d4:01:c4:0e:6e:
f7:78:0f:51:62:09:2d:f2:a8:45:b4:d9:e3:55:1a:
f8:2e:84:5a:ee:a0:1e:23:70:22:e3:e5:95:12:cd:
4f:f8:c8:2d:59:d6:8a:f6:56:c8:6b:0a:89:4e:c5:
5f:09:9a:24:31:60:cb:19:5f:90:1c:92:90:28:1c:
d4:f9:ff:a7:5a:09:df:6c:09:5f:22:bd:f9:3f:1e:
da:1a:4c:0d:5c:56:3a:81:fc:13:00:b9:16:84:e1:
6e:8c:ab:8f:cb:7e:12:03:66:87:03:14:44:40:94:
6d:91:1f:64:4e:66:8a:81:c0:d5:24:6b:66:f4:1c:
95:9c:dd:18:9d:40:ef:12:70:4f:45:c2:9d:d7:83:
a3:fe:29:7d:6d:38:15:f5:02:bc:11:c6:99:4a:a3:
c3:5d:e8:ae:39:ce:61:34:67:66:3f:bb:ac:6d:b6:
44:53:86:84:2d:78:75:5c:2b:21:0b:49:0b:f6:d9:
88:ce:16:dc:51:ed:d0:77:9b:97:8f:52:b9:81:b9:
cf:a5:fe:be:91:2c:4c:b2:fa:88:d6:17:74:54:40:
e4:64:84:7b:0f:29:dc:87:c2:d0:e6:0c:42:5f:1f:
db:6b:42:90:be:87:8c:a0:59:fa:d7:5e:27:73:00:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:71:F6:37:6C:F3:94:80:5A:3E:5C:BA:60:B5:AA:45:79:FC:EF:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05F65894983811EF83C69F6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
64:71:60:4c:88:6b:98:71:38:c9:6b:01:f7:31:f9:26:48:23:
51:d0:ba:e4:4d:6d:1f:0a:ba:09:42:a8:65:20:2f:85:94:67:
34:da:23:79:d9:55:78:43:11:e5:24:73:e7:8e:9c:a8:fd:de:
60:bb:ac:41:a6:48:a3:79:7f:88:28:1b:ca:5c:ee:ba:2e:79:
4f:08:b1:ac:3f:f2:71:63:c2:28:78:ee:84:7d:52:ec:96:35:
1d:7a:f9:94:9e:b3:66:08:81:10:fc:f8:b3:3c:28:b0:74:09:
71:14:a7:24:42:cd:b3:eb:7d:16:3d:20:f5:11:8b:4a:9d:01:
23:d4:22:3f:f9:01:77:ec:f4:57:1b:ca:86:a4:7e:97:bb:fc:
74:ca:81:0f:72:94:ed:be:40:a2:3d:db:df:a0:b4:12:58:32:
4b:4d:0e:71:c5:d9:62:e4:ef:13:76:9a:23:a0:4a:f6:33:57:
79:5c:cd:d2:a6:3d:dd:2d:7b:bd:6f:52:e1:ae:14:db:cc:4c:
d2:c8:2e:0d:6f:8f:1b:42:18:4f:02:fc:e5:2d:d4:94:13:b4:
a2:11:0b:f7:8c:7b:2c:7f:4a:7f:81:2f:7e:de:26:6d:27:e5:
5e:7c:33:77:88:22:1a:2b:a9:2d:02:5c:88:0a:30:f1:d0:04:
9f:52:ef:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:18 2024 by rpki-client on console-ams.rpki-client.org