Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/130F2A2C912311EF844DCE4D762E951A.roa
File: 130F2A2C912311EF844DCE4D762E951A.roa (raw, json)
Hash identifier: MG9VFkxdr4ZEuDAo+dkEaaOztRdMobQ318wIPey/YWg=
Subject key identifier: 51:9D:51:FB:68:F3:6F:F2:E9:AD:42:57:CF:33:05:B0:00:FE:62:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C7D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/130F2A2C912311EF844DCE4D762E951A.roa
Signing time: Wed 23 Oct 2024 09:42:10 +0000
ROA not before: Wed 23 Oct 2024 09:42:06 +0000
ROA not after: Fri 29 Nov 2024 09:42:06 +0000
asID: 203020
IP address blocks: 156.235.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51157 (0xc7d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 09:42:06 2024 GMT
Not After : Nov 29 09:42:06 2024 GMT
Subject: CN=6718c4f2-f4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:20:1e:cf:23:e6:a0:0e:e4:75:1c:b9:b2:
a0:4e:e9:68:ed:5d:ad:84:e3:ac:2a:7d:37:c8:01:
75:0f:0d:fc:7b:6b:e6:72:4c:56:b2:8e:8c:92:93:
4e:54:c6:43:62:4a:e5:80:30:da:d1:1a:e6:81:b1:
2a:21:ae:d4:3e:16:70:9e:5b:05:e6:51:47:cd:e9:
d7:7a:c6:11:43:fe:f8:12:a4:b9:7d:51:6b:51:a7:
38:ef:27:b4:82:75:12:a5:63:1d:c5:b4:78:5b:86:
15:9f:05:51:54:1c:ce:76:74:1e:4a:d8:13:72:27:
f1:f7:57:c7:d0:d4:84:b5:ee:ef:d5:e0:dc:9e:fc:
98:d1:98:f8:6f:86:81:fd:86:2e:73:53:9f:32:bc:
ec:0b:82:9d:b9:57:c9:bf:7a:98:6e:78:8d:20:11:
f7:1f:09:bc:3a:da:d4:93:cc:5b:9e:fc:47:6a:23:
76:9f:46:7c:6a:82:12:6b:f1:00:19:1f:dd:da:8f:
df:5c:5a:58:8c:ee:8f:cc:54:16:69:d5:86:32:dc:
fc:62:93:94:6c:cc:68:ac:74:f9:f0:28:52:70:56:
2d:cd:49:a0:df:2a:f2:d4:74:a8:8d:1a:8a:f2:42:
6d:4e:a2:28:b6:41:46:2a:69:65:5c:90:81:48:5c:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9D:51:FB:68:F3:6F:F2:E9:AD:42:57:CF:33:05:B0:00:FE:62:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/130F2A2C912311EF844DCE4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.64.0/22
Signature Algorithm: sha256WithRSAEncryption
af:b5:1d:9b:bf:5c:1c:d8:83:b0:ba:44:82:c2:bb:ea:1b:d0:
be:2a:c1:d8:9b:80:4d:46:a0:d0:9d:0f:a8:02:72:9c:7a:8b:
37:38:7d:77:2c:d1:86:17:ac:83:53:f8:7d:64:55:34:aa:61:
f1:2f:6c:a0:ea:95:4f:f9:eb:75:05:36:99:1f:23:d4:44:89:
69:4b:c8:ab:39:08:b9:de:c3:1a:2c:9c:26:dd:e8:c0:4c:7b:
97:f9:d5:fa:4b:fd:92:52:04:b5:28:4a:5a:01:3c:3b:b1:f7:
25:f8:15:7a:99:c7:d3:cd:18:dd:58:5e:1a:c4:8d:03:c1:bc:
ba:34:4a:83:36:a5:d3:cd:24:a9:19:0e:93:52:a8:63:76:99:
7b:bb:dd:d9:b8:3e:e2:ab:61:65:8b:31:1d:5e:a3:d7:df:b8:
eb:f5:ea:59:3f:fc:f2:01:a0:85:12:12:f7:93:75:98:85:12:
ff:3f:77:d0:e6:9d:60:60:1c:e3:34:d1:30:d9:66:41:ca:0b:
44:1b:7e:34:7e:2d:32:d7:18:c8:f0:3b:16:b7:5b:eb:ed:2a:
4a:92:67:cf:c6:e4:38:7f:5e:b2:6d:08:39:7e:38:67:49:34:
75:4d:57:d0:e7:7c:e6:69:3a:b5:c8:b7:9f:0e:13:41:10:99:
29:1e:94:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:20 2024 by rpki-client on console-ams.rpki-client.org