Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B88F59CA0C811EF90E8D563762E951A.roa
File: 2B88F59CA0C811EF90E8D563762E951A.roa (raw, json)
Hash identifier: Je18cStpOXoLAawhFUvwALFpXhwPvTfaVlKUSqtB5No=
Subject key identifier: F4:B7:4B:8B:5D:08:26:99:31:07:6F:A8:49:D7:38:C2:6B:E7:ED:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D154
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B88F59CA0C811EF90E8D563762E951A.roa
Signing time: Tue 12 Nov 2024 07:31:46 +0000
ROA not before: Tue 12 Nov 2024 07:31:42 +0000
ROA not after: Mon 02 Dec 2024 07:31:42 +0000
asID: 21859
IP address blocks: 156.225.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53588 (0xd154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 07:31:42 2024 GMT
Not After : Dec 2 07:31:42 2024 GMT
Subject: CN=67330461-5324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:90:e6:cd:b2:59:57:3f:a9:ab:81:0b:b3:
e2:00:76:cb:a0:b0:13:b3:d4:76:d1:4d:6f:9d:49:
e2:c7:6e:b6:f6:fe:3a:ae:6e:21:c1:04:24:7a:0a:
1d:a8:52:4e:af:98:34:de:75:0c:87:34:11:0f:83:
f6:ae:c2:33:32:0f:4c:40:a4:4c:0e:fd:59:9e:90:
33:6d:ac:d0:ac:27:74:6b:33:1c:5f:92:a9:7c:06:
4b:6c:c8:7f:ac:80:f7:23:a9:a3:26:3b:47:db:f1:
8e:d4:cd:c0:3e:cd:09:9f:0a:ab:67:08:00:6e:75:
15:53:01:54:52:26:b5:de:1f:93:b5:06:83:62:2d:
b4:00:6c:f7:e2:36:e3:91:f0:27:c0:14:d1:ce:d1:
75:f1:f3:0e:e7:21:c4:8d:fc:bf:7f:0a:9e:60:1a:
dc:30:8b:7d:e4:33:94:5d:69:f0:1b:cc:a7:bd:af:
36:05:80:44:b4:0d:22:88:14:50:0b:4e:63:7e:85:
fb:a1:04:ee:cb:e6:a9:c8:19:a7:e8:28:7f:4f:41:
56:96:81:32:75:e3:bf:f2:25:1b:7d:7e:7c:9f:14:
50:9c:d1:bb:84:38:10:1a:85:07:73:bf:31:92:93:
b5:88:01:a9:1b:98:82:96:76:d3:ff:e4:3a:88:25:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B7:4B:8B:5D:08:26:99:31:07:6F:A8:49:D7:38:C2:6B:E7:ED:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B88F59CA0C811EF90E8D563762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/24
Signature Algorithm: sha256WithRSAEncryption
27:00:7e:70:20:0a:5e:fb:43:22:19:25:06:42:57:a6:0b:8b:
61:60:57:a7:d3:7e:5a:7c:95:17:24:26:6f:ca:00:0d:97:72:
99:4f:ed:ae:35:f7:08:86:b7:7d:6d:95:a1:44:77:3f:5e:8d:
7c:0c:08:d3:53:d6:f4:81:74:74:a4:23:8a:eb:28:a4:99:7b:
c3:b8:5e:57:1d:8a:5a:f7:44:4e:fc:52:e7:1d:8d:a7:ca:80:
64:73:2e:d5:cb:26:e6:d6:47:66:35:3c:91:d3:f6:9d:94:fb:
d3:c9:91:28:2c:10:72:f3:43:2d:2c:77:3e:8f:d1:18:c0:e8:
c0:9f:5e:4d:dc:51:31:c0:59:a4:67:12:07:6f:bd:8b:c5:b3:
f6:c0:f7:8f:a2:23:9d:3a:7a:f4:9b:58:14:f9:4e:3a:6a:06:
dc:71:ec:2a:fc:ee:88:4f:93:1b:d4:ec:ea:20:68:4d:4b:97:
d2:6f:12:d6:6b:54:20:cb:38:36:49:5a:c4:37:68:33:63:11:
4f:db:d7:d0:76:32:ee:b6:fb:b1:5a:06:37:bd:f3:99:52:27:
39:4a:3c:48:a4:46:20:95:a0:c2:2c:69:e1:a9:f7:50:5f:11:
3c:54:3c:cc:fe:84:79:3b:74:41:e7:af:9f:2a:03:c5:ce:c9:
56:52:80:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:24 2024 by rpki-client on console-ams.rpki-client.org