Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2299761A976C11EFBEC9466B762E951A.roa
File: 2299761A976C11EFBEC9466B762E951A.roa (raw, json)
Hash identifier: idGQEJPKU2C/fbOB7HsdxLHaMzSnMst0uGJ25LABIXA=
Subject key identifier: 1C:E7:AD:83:5B:29:9A:62:27:71:71:17:D1:CD:B9:6E:F5:F4:94:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2299761A976C11EFBEC9466B762E951A.roa
Signing time: Thu 31 Oct 2024 09:40:16 +0000
ROA not before: Thu 31 Oct 2024 09:40:13 +0000
ROA not after: Sat 21 Dec 2024 09:40:13 +0000
asID: 138915
IP address blocks: 156.227.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52024 (0xcb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 09:40:13 2024 GMT
Not After : Dec 21 09:40:13 2024 GMT
Subject: CN=67235080-d9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:53:9b:6c:69:8e:c5:ab:63:10:4b:b0:8c:
7f:a5:a3:87:6e:1c:d4:aa:8f:eb:b4:11:a8:b8:f8:
97:e7:a2:e9:0e:79:81:e5:55:32:56:44:8e:a3:95:
3b:0d:92:46:b0:71:13:dd:70:3a:6d:79:7f:f0:94:
14:9b:b4:0b:5a:72:33:06:3d:34:a4:a1:b1:fc:ff:
d9:78:d6:ad:3e:d4:89:6c:87:62:84:dc:2b:62:e9:
bd:51:04:52:b8:7f:de:ca:ff:2d:a8:28:9e:b7:dd:
df:8e:a7:12:06:20:8d:e9:3c:41:65:11:6f:1b:7a:
23:93:25:6b:48:55:60:06:4b:c2:60:0d:cf:9e:82:
c1:29:bb:16:81:ef:7c:9d:30:16:90:c6:e1:3f:e2:
c5:5a:ea:0f:08:c3:1d:b9:c1:31:0c:15:74:55:c2:
de:e1:b3:15:db:b3:dc:9e:ac:fb:8d:8f:46:49:cb:
0b:a2:8b:35:0d:a1:07:90:df:25:1c:37:e3:7d:dc:
79:57:3a:48:e9:74:05:b2:d4:c7:e2:6f:13:ec:0c:
a6:6f:e4:a7:10:46:c5:90:d2:14:5a:06:5e:24:10:
34:7f:84:70:07:42:7d:57:ce:33:19:c4:de:07:43:
9f:e9:ff:f6:a1:89:2c:37:4f:5c:3e:2f:e7:79:e0:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E7:AD:83:5B:29:9A:62:27:71:71:17:D1:CD:B9:6E:F5:F4:94:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2299761A976C11EFBEC9466B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.193.0/24
Signature Algorithm: sha256WithRSAEncryption
57:54:d6:fe:88:6e:c9:a8:94:8d:69:bc:cc:43:85:d1:36:65:
2c:c6:51:5d:75:a6:6a:5a:79:9a:39:fb:b3:94:e5:3e:ab:7c:
72:c4:7e:14:36:83:4f:22:4a:f6:19:47:f0:af:1e:23:f6:92:
43:3e:2e:3c:00:0a:a6:b8:a9:b9:b5:25:6e:03:46:77:df:09:
7d:b9:b3:15:d7:aa:f4:12:88:06:aa:3b:b9:37:21:ae:ea:cf:
13:1c:96:b6:47:74:c4:e2:f7:77:99:25:d3:06:e8:e1:0a:61:
53:2c:7c:d4:78:30:35:5c:0b:8b:ad:b1:0d:4d:3a:9a:1b:7e:
bf:b5:3e:23:c0:84:32:49:98:0e:c0:7c:af:5e:aa:5a:7f:72:
be:1d:ed:6a:8c:60:f1:e1:02:06:8b:aa:7d:f1:ea:b6:95:e2:
61:ce:05:7b:ee:76:9b:a9:e4:e4:5a:6e:74:cb:1d:b5:a1:a4:
51:b6:13:56:db:df:c6:6d:fc:f2:d5:a0:6a:60:cf:39:db:dd:
c8:7d:64:d5:c6:ae:c3:36:fc:e4:89:8c:d4:df:61:77:28:b4:
4c:84:8a:f7:0d:36:a4:a5:c2:88:e4:1c:b2:70:6d:6c:78:c6:
82:84:1c:bd:12:f9:f9:91:2c:1e:33:1c:35:e7:f2:e0:50:58:
80:33:3a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:21 2024 by rpki-client on console-fra.rpki-client.org