Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/082277EE976911EF9036A957762E951A.roa
File: 082277EE976911EF9036A957762E951A.roa (raw, json)
Hash identifier: Jms6r2E2jRw+Vmaj/vVqlIC/7TqkKPwZpCyFJ8I//wM=
Subject key identifier: 1D:1E:3B:1E:1B:0C:83:56:16:13:32:5D:3F:5A:42:61:7A:CB:1E:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/082277EE976911EF9036A957762E951A.roa
Signing time: Thu 31 Oct 2024 09:18:04 +0000
ROA not before: Thu 31 Oct 2024 09:18:00 +0000
ROA not after: Fri 13 Dec 2024 09:18:00 +0000
asID: 138915
IP address blocks: 156.244.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51990 (0xcb16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 09:18:00 2024 GMT
Not After : Dec 13 09:18:00 2024 GMT
Subject: CN=67234b4b-208f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:30:ff:14:bd:d8:7f:e9:ce:a2:33:55:af:
97:67:be:bf:67:c7:78:9e:43:69:a7:cb:7e:b0:44:
a2:e3:81:82:6b:2d:be:2c:b2:7e:57:4d:5c:0d:4e:
88:fe:dc:21:ed:d0:bf:27:ea:59:f6:4e:09:b7:93:
d0:c6:d5:e2:e4:f8:4b:92:60:ba:1e:0e:2f:c7:9d:
f5:cf:28:b2:2d:8c:ff:ab:99:8d:80:4d:2f:b3:66:
ff:50:51:35:57:3d:ff:7e:99:72:2d:37:91:d4:2a:
28:14:ef:a1:cc:54:83:28:d1:01:30:73:51:89:fc:
77:fc:e7:31:a4:58:1f:4c:31:d1:57:21:61:6f:f6:
9d:f8:b2:42:32:d0:e4:bd:7d:c2:e6:95:4f:6d:13:
ee:48:5b:0c:81:1b:ab:5c:dd:29:8b:f0:fa:9e:80:
3f:aa:40:69:07:3f:bf:16:08:b2:e0:d7:5c:4c:4d:
e4:34:9d:29:30:d8:93:9e:01:a8:21:54:fc:e6:70:
50:8c:4a:97:44:f4:fa:6a:dc:6f:4c:78:80:71:17:
c7:8d:90:5b:c1:d9:20:fb:1b:48:67:e4:01:8d:ed:
fd:35:b1:5d:8d:d0:f3:81:19:2e:8f:7f:35:41:19:
39:39:98:55:92:20:49:80:dd:38:be:71:81:c3:2b:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1E:3B:1E:1B:0C:83:56:16:13:32:5D:3F:5A:42:61:7A:CB:1E:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/082277EE976911EF9036A957762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.40.0/23
Signature Algorithm: sha256WithRSAEncryption
87:e2:74:51:d4:15:43:3b:40:c5:c9:03:05:bf:be:49:61:0c:
bc:51:bc:4a:89:3f:c4:31:3a:6d:1d:c5:97:4b:ef:4e:44:b0:
05:97:82:4b:4d:c1:b2:e1:c2:57:a6:b7:f9:25:97:05:c9:b9:
f8:0f:0b:48:c5:76:cb:62:ce:78:ae:a9:de:a0:30:4a:81:dd:
4b:37:99:a7:29:6d:53:9c:09:a3:1f:b1:ed:dc:76:d0:76:6d:
8f:50:77:94:bd:4f:a4:26:8c:33:09:29:d1:93:91:b9:1b:ea:
0b:c6:1b:79:2f:17:ad:55:2d:f2:b7:3b:b2:34:6b:e9:c3:06:
85:f3:bb:a8:bb:59:84:23:01:de:c3:a5:16:5a:a6:0c:93:cb:
f0:16:be:dc:ea:a0:96:f2:56:ba:bf:2c:cd:51:cd:69:9e:85:
eb:c3:53:bc:ed:80:26:30:8e:5a:31:0b:1a:57:b7:12:94:0a:
af:f2:f0:4d:db:e2:23:bc:50:66:4a:8a:87:60:d1:61:e5:c7:
07:2e:18:89:72:6e:af:0d:3e:7d:df:1b:6b:93:7b:82:1f:22:
65:f4:4e:34:53:56:d8:de:1c:12:af:c5:8d:41:3b:97:04:92:
68:e4:c3:77:01:e8:a0:9a:66:2d:02:06:1f:1a:1e:6d:8b:c6:
0b:6e:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:18 2024 by rpki-client on console-ams.rpki-client.org