Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1926A5685F1711EFA48FF293762E951A.roa
File: 1926A5685F1711EFA48FF293762E951A.roa (raw, json)
Hash identifier: UUEkHN36bLgtcaPjJCYJw53XegETb6S6LAVr8EYS7cU=
Subject key identifier: 60:3E:5A:01:19:DE:F9:EF:00:41:7D:E5:E7:F5:A1:55:D1:35:51:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1926A5685F1711EFA48FF293762E951A.roa
Signing time: Tue 20 Aug 2024 17:10:28 +0000
ROA not before: Tue 20 Aug 2024 17:10:25 +0000
ROA not after: Tue 21 Jan 2025 17:10:25 +0000
asID: 63199
IP address blocks: 156.229.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43628 (0xaa6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 17:10:25 2024 GMT
Not After : Jan 21 17:10:25 2025 GMT
Subject: CN=66c4ce04-b112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ab:ae:86:1e:a4:56:1c:af:bb:3d:5f:29:bd:
5d:0d:40:0e:b7:32:e9:45:2a:8c:34:42:85:2c:62:
d9:4d:2f:db:ee:8d:e3:d2:c6:f4:a2:ae:11:ed:bd:
74:c6:76:0f:f3:c0:cf:ce:c5:1f:01:46:de:57:fb:
7a:5c:31:fa:fb:e1:49:9a:45:a4:1c:a4:79:c3:47:
47:3d:4c:94:24:ce:af:45:7b:2b:ea:a2:cb:5b:ef:
6d:34:66:e1:09:21:a5:46:b3:1f:d9:92:f6:4e:2e:
d1:ca:75:88:98:87:dc:8c:00:bc:08:92:ef:6d:3f:
e0:d6:65:4b:9c:ed:69:6c:f3:a5:9e:14:14:ae:fa:
95:40:f6:82:5d:8f:f4:83:78:76:aa:32:cd:8a:c4:
50:34:ca:47:6a:e7:83:d8:a6:f2:81:f1:4d:b5:72:
f6:5a:e7:0a:a3:a2:59:7c:6d:8b:59:49:5d:32:11:
5c:f1:f7:25:92:ca:23:2a:34:88:a6:49:de:14:18:
af:d0:2a:f1:d5:3b:5c:48:7a:b3:20:00:66:20:11:
9e:f1:46:f4:91:5c:fb:ac:c2:84:b2:ce:df:d0:a2:
9a:72:34:8e:b8:2a:eb:c5:e9:1e:24:bf:7a:7f:7f:
d7:a4:b9:e1:cc:93:61:94:b8:85:d7:f2:80:19:5c:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3E:5A:01:19:DE:F9:EF:00:41:7D:E5:E7:F5:A1:55:D1:35:51:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1926A5685F1711EFA48FF293762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.118.0/23
Signature Algorithm: sha256WithRSAEncryption
27:ac:95:a1:22:1f:4a:6f:4f:2d:af:d3:d3:dd:59:5c:78:79:
ec:b7:b9:d0:2a:6c:af:26:c1:2d:d9:6c:5d:5e:63:3c:a8:23:
74:a2:d1:7e:ae:13:a4:50:b8:9a:23:a6:84:f8:01:c3:7e:3d:
8b:8d:75:83:72:6b:bb:48:b4:74:5e:a8:07:61:91:dd:2a:1d:
5f:a3:d8:ae:38:31:18:35:c3:43:05:35:e8:78:61:ab:ce:8d:
16:b5:e0:c8:20:64:6a:a9:63:9f:96:1e:29:22:48:63:55:df:
4d:02:92:76:8a:37:01:00:68:4c:d7:1d:35:62:98:67:37:c7:
81:c4:9a:26:65:4f:9c:bf:21:8b:0c:29:3a:55:74:30:bb:18:
c1:cd:56:45:66:e9:ad:0d:04:1c:00:32:9e:25:88:09:ee:8c:
a7:73:7c:21:09:76:aa:36:4b:26:bf:14:4d:d2:a7:db:66:ff:
95:29:4f:e7:43:90:00:26:d7:e9:73:35:24:28:7d:6f:2e:02:
33:4b:99:42:26:95:b1:94:4b:8c:6c:5d:4d:b5:04:9a:32:3a:
04:f0:c6:35:b5:e7:9a:d6:19:65:70:97:60:1f:47:90:82:48:
24:aa:0a:45:53:07:b6:29:53:76:40:2f:fd:92:f2:ab:6d:50:
83:01:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:20 2024 by rpki-client on console-fra.rpki-client.org