Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24ACF0D44F1F11EF8FEA1F4B762E951A.roa
File: 24ACF0D44F1F11EF8FEA1F4B762E951A.roa (raw, json)
Hash identifier: W9qKNVtCEeoMhlrhHtQ9ZCSKck6pTNCzCwbQ7kFXpyk=
Subject key identifier: 64:FC:8C:ED:77:0F:60:85:BE:E9:57:43:57:FF:09:72:DC:C8:5B:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A161
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24ACF0D44F1F11EF8FEA1F4B762E951A.roa
Signing time: Wed 31 Jul 2024 09:27:45 +0000
ROA not before: Wed 31 Jul 2024 09:27:42 +0000
ROA not after: Mon 12 May 2025 09:27:42 +0000
asID: 140951
IP address blocks: 156.233.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41313 (0xa161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 31 09:27:42 2024 GMT
Not After : May 12 09:27:42 2025 GMT
Subject: CN=66aa0391-2dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:d9:37:d9:9a:81:87:15:d8:ce:8b:83:89:
10:18:16:d0:bf:78:95:28:a1:8c:24:07:4a:8a:e6:
74:54:c6:39:66:6a:05:17:1b:6c:78:e1:8c:32:72:
5d:27:e2:4d:89:76:e8:bf:c0:73:16:8a:52:f8:b9:
6c:c8:a7:4d:9b:bb:b0:cb:97:49:5e:16:05:21:0d:
b4:a1:3b:02:dc:d8:56:99:52:54:cd:f1:72:1e:d4:
f2:2b:9e:fe:63:69:e8:83:48:f5:ad:6e:8a:86:e7:
cd:fd:a2:da:e8:30:33:6e:7e:a1:33:b6:44:c1:c1:
b3:3a:53:e5:dd:eb:ef:84:1a:97:19:75:5a:6d:3f:
d3:3c:22:ff:5a:7e:fa:b7:4d:7a:2c:ab:2c:5f:cb:
75:52:91:fb:4c:bd:b6:71:8b:9a:83:fa:9a:7b:81:
5b:49:01:b6:94:ff:29:8e:3c:ff:e0:ab:d7:68:52:
98:03:6d:98:dc:c4:a9:0d:54:d6:7a:c3:20:45:11:
ae:8a:ef:c7:a9:0d:5b:d7:f5:0c:02:9b:07:39:68:
6c:6e:44:da:9a:a6:62:37:ef:62:9a:26:08:79:07:
a6:4d:e2:8c:ae:a5:70:ee:32:58:39:67:12:a6:e2:
aa:c8:d7:a9:cb:07:90:8f:29:e3:88:6f:dc:b7:1f:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FC:8C:ED:77:0F:60:85:BE:E9:57:43:57:FF:09:72:DC:C8:5B:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24ACF0D44F1F11EF8FEA1F4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:98:0c:5d:79:f4:f6:61:5c:5b:70:06:ce:b8:24:fc:ac:e9:
8d:e3:f1:c0:4c:b5:44:b1:b1:12:f1:c6:36:89:8e:54:b6:b6:
92:6a:6f:92:46:9e:3a:cd:6d:4f:4a:1e:6d:66:b8:04:a6:e2:
ef:47:fb:a3:75:a9:c6:d0:e3:24:92:2c:40:5d:28:ca:2a:b3:
05:72:b3:11:92:ba:49:66:83:b1:e4:38:0f:b0:71:16:12:95:
50:bd:0d:28:18:19:c9:fb:ca:24:db:8d:55:8b:a3:b6:21:12:
91:a3:9e:61:98:ad:6d:40:63:8c:7f:2b:7c:d9:7e:ff:fe:f4:
e6:5c:b5:f1:b1:6c:e8:78:f4:48:49:bd:13:12:5f:10:05:4c:
de:2f:6b:28:6c:9c:da:48:c1:a0:46:b8:1f:d4:28:ae:22:9e:
d4:77:95:94:62:17:78:85:90:2a:52:e7:ac:83:db:e7:7a:7e:
60:f9:b1:fa:9f:00:40:43:aa:94:76:7a:50:68:7b:92:54:16:
4d:2f:cb:1e:1c:4c:b8:84:6f:9f:64:da:63:a2:a1:8e:e1:17:
00:a6:e7:5c:53:2f:17:84:d4:26:f0:0b:32:82:81:43:66:a4:
d2:9b:ee:b1:7a:00:54:ca:7e:2e:ca:79:52:31:9f:cb:99:ca:
0e:5d:b7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:21 2024 by rpki-client on console-fra.rpki-client.org