Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/287F90AC5EEE11EF9F6CB47D762E951A.roa
File: 287F90AC5EEE11EF9F6CB47D762E951A.roa (raw, json)
Hash identifier: wn3W0axHDmgRJjwhpvy2ap0LB2yyypaud+8/Fdq/muw=
Subject key identifier: 9C:4C:4A:B6:53:95:92:57:A5:9B:84:99:1B:2B:34:37:B7:D0:B1:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/287F90AC5EEE11EF9F6CB47D762E951A.roa
Signing time: Tue 20 Aug 2024 12:17:26 +0000
ROA not before: Tue 20 Aug 2024 12:17:14 +0000
ROA not after: Tue 27 May 2025 12:17:14 +0000
asID: 399077
IP address blocks: 156.251.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43448 (0xa9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:17:14 2024 GMT
Not After : May 27 12:17:14 2025 GMT
Subject: CN=66c48956-ef72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:13:c4:4a:c1:d2:5e:b2:b4:38:89:dd:45:
df:03:a2:a4:b0:e3:b5:4d:21:52:73:77:52:df:77:
97:3b:07:2b:61:7b:e8:26:a2:b0:7a:92:a6:85:75:
b7:69:ec:d0:ba:9f:74:89:e2:e0:32:68:15:79:c4:
8f:70:91:f0:46:52:8b:d7:6c:5f:5a:ef:d0:c2:16:
4d:8c:a6:7b:d6:c0:23:c5:b5:70:67:2a:7d:44:22:
7b:c9:29:db:96:40:85:20:59:f9:d2:52:ad:96:1b:
6e:e9:30:35:ba:0c:5b:27:d1:bb:00:95:21:59:0f:
c7:11:76:7d:d8:68:ed:35:85:ae:4d:dd:f0:e1:c3:
fb:74:c7:64:cd:52:8d:48:04:55:96:a0:9e:40:cc:
0f:5c:28:e4:a2:aa:69:d0:b4:5f:13:be:83:0b:5a:
6e:b0:dc:b6:25:07:cf:76:79:01:7d:d8:d6:f3:d5:
7c:8f:38:47:55:34:bf:7a:ee:a5:1b:bc:cd:56:70:
a6:31:fb:3f:94:55:05:4e:06:c2:f4:cd:51:18:b1:
c5:28:a9:94:97:43:3d:a0:2f:af:8a:4e:d2:08:0c:
c9:12:42:fe:b6:74:a2:db:bb:20:50:87:d8:4a:a8:
1c:89:71:3a:4b:93:2f:9f:33:94:51:2f:f0:ed:37:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4C:4A:B6:53:95:92:57:A5:9B:84:99:1B:2B:34:37:B7:D0:B1:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/287F90AC5EEE11EF9F6CB47D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.53.0/24
Signature Algorithm: sha256WithRSAEncryption
67:0f:89:ad:c8:7f:83:e8:e8:3e:f4:0e:70:a9:21:3a:84:5f:
2b:44:d2:8f:9f:52:7a:94:ed:ee:82:75:dd:50:d9:ea:f9:cb:
a4:45:0c:da:cc:61:70:b9:86:7a:24:ed:8a:d7:f6:7f:2a:2c:
0d:eb:d0:d3:72:c7:94:e7:9b:0f:de:53:ed:af:d2:07:96:1c:
26:0c:86:26:2c:85:6e:64:b6:85:0b:c3:d5:6f:dd:ab:60:0e:
b0:25:d4:a0:52:49:d5:fb:b9:93:df:13:ef:dd:19:78:3b:31:
63:5d:80:12:de:5a:0f:fa:15:9b:ec:0d:6b:e7:b1:4e:a0:3b:
17:8c:68:35:02:0c:22:9b:4d:bb:86:49:2d:83:96:aa:cd:71:
12:0c:69:c5:1e:1e:d3:72:cd:ab:d2:94:d5:aa:f5:70:56:36:
68:b0:37:32:6e:5e:e0:0e:4a:be:40:e7:b9:03:c0:b2:82:52:
4e:9c:14:40:3e:72:6c:55:80:be:47:1a:a0:a8:49:01:b6:61:
03:5a:91:ab:df:af:74:ff:8a:12:57:27:30:95:b8:9a:71:93:
a1:c3:37:45:3b:bb:14:11:ab:22:1a:a9:0e:5a:23:1f:34:97:
48:53:04:b7:3e:3e:bf:f5:f0:5a:31:89:e7:c6:08:b8:6f:16:
70:c5:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:22 2024 by rpki-client on console-fra.rpki-client.org