Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/251E3D9A953111EF8E397E55762E951A.roa
File: 251E3D9A953111EF8E397E55762E951A.roa (raw, json)
Hash identifier: Wl6S6x68uiboD6Z+Bbffz/CnUyMtmztLHxuDKKcX89Q=
Subject key identifier: 14:6B:F9:7A:70:8D:91:98:33:E8:55:24:CC:0C:6D:A6:BB:99:68:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C965
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/251E3D9A953111EF8E397E55762E951A.roa
Signing time: Mon 28 Oct 2024 13:32:58 +0000
ROA not before: Mon 28 Oct 2024 13:32:54 +0000
ROA not after: Sun 05 Oct 2025 13:32:54 +0000
asID: 132839
IP address blocks: 156.250.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51557 (0xc965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 13:32:54 2024 GMT
Not After : Oct 5 13:32:54 2025 GMT
Subject: CN=671f928a-414a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:b8:29:c6:92:1d:31:89:41:f7:3d:ef:9c:
cf:06:2b:fb:8c:d4:f1:b7:11:f0:de:89:7f:1b:02:
50:99:24:24:3f:86:31:00:c1:8e:3d:07:17:f7:53:
fa:81:30:41:4e:b4:35:b7:81:2a:70:3a:c9:8b:f0:
24:40:6f:6f:df:dd:c2:97:de:9d:0e:c5:cb:2e:17:
01:16:87:f8:43:db:4b:a9:a7:a3:eb:d7:9b:d6:f1:
d2:f1:99:7c:09:0b:3b:15:02:22:58:81:83:99:50:
4f:c0:78:f1:a1:71:9c:bb:5d:85:12:76:7c:0d:95:
6f:11:1b:3b:97:a4:97:c2:51:f8:0c:3e:60:50:a8:
a3:8c:7a:a5:eb:88:bd:c8:1a:82:9a:c6:6e:4f:8c:
82:c2:97:1b:8b:b8:c8:50:39:08:ee:e0:3e:0f:26:
54:ba:7a:75:3a:09:a4:5f:0a:2f:b7:af:27:0e:11:
33:e8:be:cd:d9:2f:03:85:93:4e:a2:ba:d9:a1:93:
8d:48:2a:b6:50:6f:2a:01:25:d2:52:f0:b3:9d:24:
59:d6:76:f0:03:f7:06:18:51:24:5f:c7:d9:55:94:
c3:ab:33:32:bf:c3:1e:eb:22:f2:2d:2d:05:bd:a7:
69:76:aa:a3:80:eb:21:2a:b5:89:4f:a7:48:d8:ea:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6B:F9:7A:70:8D:91:98:33:E8:55:24:CC:0C:6D:A6:BB:99:68:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/251E3D9A953111EF8E397E55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.128.0/17
Signature Algorithm: sha256WithRSAEncryption
40:a8:c6:b5:40:d6:56:41:04:8c:84:38:4b:1d:a7:8a:c7:c6:
f3:3f:21:b7:a4:63:1c:4a:8b:26:9b:51:63:85:69:86:17:14:
3b:de:f4:31:ca:d8:21:4c:d1:1b:3e:0b:23:0a:a6:75:cb:9d:
56:8a:87:8a:d2:f6:04:5f:a6:85:2c:de:ae:fd:a1:65:d6:7e:
0c:f5:d7:62:6c:ec:82:23:c1:5c:8f:78:39:1b:56:07:f7:24:
b9:06:ef:9b:ad:7b:fa:2c:bd:ca:b2:be:13:f5:3c:71:96:56:
be:f7:91:62:39:3e:2d:8c:e8:f2:5f:7c:00:5f:aa:72:b8:9a:
a4:97:18:1e:b7:c8:ec:93:ea:dc:84:cf:1f:5f:4a:3f:0e:1b:
32:37:d2:d6:e9:59:9c:a5:35:4e:57:e1:dc:b5:33:65:27:ca:
21:c0:d4:7e:30:0e:98:5d:34:ac:9f:0b:2d:62:db:a2:6f:df:
19:e6:b7:3a:68:8c:a3:2e:f4:8b:48:51:72:bd:11:5b:1f:d6:
6c:64:c6:96:5c:b9:e3:52:0e:dd:68:45:90:16:5e:30:2c:fb:
89:f7:f7:7f:7e:06:d1:bc:e4:b9:9d:48:4e:d8:88:db:e9:1e:
de:62:eb:b8:02:ba:14:fd:3f:2e:41:94:25:96:0c:16:12:d7:
ae:70:61:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:23 2024 by rpki-client on console-ams.rpki-client.org