Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/092D90E85EF111EFAEBA6B90762E951A.roa
File: 092D90E85EF111EFAEBA6B90762E951A.roa (raw, json)
Hash identifier: /XjVhG7u9cHLVqBG23DE46nQcCjizGiKVoZ/aeKnamM=
Subject key identifier: 9C:04:E8:14:D2:65:BF:23:39:DC:F0:95:20:1B:D3:10:A3:03:40:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/092D90E85EF111EFAEBA6B90762E951A.roa
Signing time: Tue 20 Aug 2024 12:38:01 +0000
ROA not before: Tue 20 Aug 2024 12:37:57 +0000
ROA not after: Tue 27 May 2025 12:37:57 +0000
asID: 399077
IP address blocks: 156.251.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43486 (0xa9de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:37:57 2024 GMT
Not After : May 27 12:37:57 2025 GMT
Subject: CN=66c48e28-bfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:33:c3:71:5b:ff:de:fc:c7:dd:3e:ad:0b:1a:
99:6e:02:7c:87:9a:c0:47:fe:80:f1:2f:3f:b8:e1:
28:49:f1:fb:ab:99:75:11:bf:2e:8b:6d:69:78:d5:
9f:cf:5f:20:49:d4:3f:3f:cb:75:7e:e8:66:e4:cd:
98:31:47:e0:39:6c:3c:7f:ee:10:23:15:a0:f2:13:
12:28:f4:72:1c:56:5a:b0:db:70:53:24:0d:7d:26:
de:aa:a8:07:b4:59:6b:37:0a:ce:76:6c:5b:2f:f4:
60:ee:b1:17:ad:4e:a4:0e:66:2b:c0:62:9c:94:82:
2c:f6:45:59:77:54:f8:82:31:3b:7d:f3:a5:0f:35:
80:b1:c5:f0:2d:86:63:32:66:97:7d:2e:9a:9b:9d:
09:60:6c:e8:37:ad:f5:d3:3c:42:e9:aa:4b:1b:14:
1f:2f:64:73:c7:1d:cd:16:92:0e:fa:94:ec:e8:0c:
ca:40:27:27:97:f2:e9:0b:23:9b:9a:fb:c1:7b:fe:
f8:88:d4:6e:eb:b4:ce:92:44:12:41:15:45:be:6f:
41:be:ed:f4:fe:bd:0d:76:9b:5c:b6:48:6a:b9:7b:
80:a3:21:25:6d:61:bc:45:d7:f6:c4:3b:83:da:87:
3d:f9:e3:e0:d4:4a:9b:73:15:eb:b1:22:2a:56:45:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:04:E8:14:D2:65:BF:23:39:DC:F0:95:20:1B:D3:10:A3:03:40:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/092D90E85EF111EFAEBA6B90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d5:d5:2d:fa:b2:f1:c1:e4:14:c9:29:19:01:1d:a7:c9:9f:
bf:64:a5:04:ae:35:31:bc:5a:19:43:35:9b:c8:d8:ac:15:81:
84:a7:b9:3b:b9:5b:e7:66:8e:5e:96:9c:a8:c2:2f:20:19:09:
5a:20:72:0a:e4:dc:9f:83:ad:e3:7d:f4:e8:60:6b:a0:e6:98:
c7:fd:f5:44:f8:39:13:a0:2d:05:57:66:94:55:e9:65:96:da:
ff:85:2f:10:a0:af:03:68:06:ac:1e:26:e4:0e:87:69:18:a1:
08:d9:cc:2e:98:11:58:92:21:a3:6e:14:27:34:91:0e:bc:a9:
d9:48:ca:41:9c:2e:5d:cd:e5:c3:87:1a:a2:7f:a4:78:f4:d2:
8c:e8:44:55:c2:bd:e3:23:dc:bb:a7:32:5c:65:5c:5d:90:9c:
a6:24:4a:46:35:71:f1:2f:b2:90:7f:0b:7f:0b:02:a1:fd:1f:
86:63:7f:ef:ff:d4:8d:f0:9d:99:9f:29:f8:3f:36:52:77:55:
bc:f6:66:93:01:ca:75:0c:ff:ec:34:f3:99:d8:1f:eb:35:39:
61:61:1e:c7:a9:d1:1f:40:66:2e:b8:21:0f:91:02:87:80:2c:
d0:4f:71:8d:70:db:96:d3:2d:f3:77:ba:69:0b:2e:b5:e9:fc:
1b:da:04:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:17 2024 by rpki-client on console-fra.rpki-client.org