Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BAEB18C767611EFBE3F95AE762E951A.roa
File: 2BAEB18C767611EFBE3F95AE762E951A.roa (raw, json)
Hash identifier: cFzG98NYZoe4Nmj7FrBup45gjTmWDUHtrgC7RHMqMh4=
Subject key identifier: 34:03:C4:2E:96:A0:C2:EF:02:5A:7F:D2:C4:DF:06:70:B7:F7:28:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B831
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BAEB18C767611EFBE3F95AE762E951A.roa
Signing time: Thu 19 Sep 2024 10:58:58 +0000
ROA not before: Thu 19 Sep 2024 10:58:55 +0000
ROA not after: Fri 08 Aug 2025 10:58:55 +0000
asID: 133861
IP address blocks: 156.245.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47153 (0xb831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 10:58:55 2024 GMT
Not After : Aug 8 10:58:55 2025 GMT
Subject: CN=66ec03f2-b379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:03:80:cc:14:c0:58:57:5e:10:cb:7b:18:56:
94:2a:61:cf:49:2b:7d:c4:6e:72:9b:7f:7d:09:8d:
6d:5b:4a:23:01:60:6b:8e:36:b8:81:e1:51:02:40:
67:9e:6e:a3:50:0f:2c:ac:5e:41:02:dd:80:38:ec:
70:77:d8:1a:0f:ea:c4:77:a2:9c:8e:be:a4:7e:bd:
31:e3:5b:eb:31:64:2a:c7:43:4f:be:a3:4c:ff:ef:
6d:52:5a:9f:dc:8a:1d:4e:3a:0b:67:ea:e6:25:82:
21:4e:5e:b6:e7:0b:81:2d:8d:e5:a0:cf:73:4d:71:
3f:18:45:85:62:bd:67:2d:e2:b1:c2:cb:cb:5d:6c:
64:72:05:a7:14:c1:01:73:ab:b9:a2:87:c4:6e:44:
37:68:55:3c:39:65:60:6a:d6:11:be:3d:65:18:4f:
d5:5e:62:b8:8c:ae:fe:f9:82:27:6a:3e:e1:18:a3:
79:4e:21:a6:a6:67:0f:d8:9d:4f:65:83:c3:1e:da:
ec:bd:22:57:6c:fb:02:94:03:31:ac:26:76:f8:8b:
e4:86:f5:86:6d:8b:48:48:be:e7:fb:58:74:67:10:
fb:92:98:70:f2:98:5a:2a:be:46:62:3c:78:33:29:
89:9d:71:76:cd:1c:6d:75:16:8e:a0:87:86:68:e9:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:03:C4:2E:96:A0:C2:EF:02:5A:7F:D2:C4:DF:06:70:B7:F7:28:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BAEB18C767611EFBE3F95AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c0:e2:ec:f2:6d:a6:2a:49:ff:f3:62:c5:5c:27:89:a9:b3:
1e:17:41:88:cb:4c:77:7a:5d:6b:71:07:7e:58:0f:e0:f6:1a:
3b:18:2d:ba:23:e1:02:43:47:c8:f5:60:49:c1:92:12:05:c3:
8d:35:2d:9b:f6:c7:cd:cf:58:6e:01:43:3e:d0:92:bf:45:22:
84:b0:cb:f3:60:e2:ce:0d:38:03:1b:8d:53:d3:43:cb:99:95:
b8:73:ac:c2:1c:a0:48:9f:12:27:4a:3c:4a:0c:0c:ca:56:3d:
0f:40:1d:ff:df:7c:86:91:83:b4:ce:0c:0c:5d:37:d6:fa:dc:
fa:29:24:67:93:d2:8a:d5:56:b0:73:0c:c6:f1:fe:fa:a4:b3:
68:d8:77:9a:d2:7b:c2:49:59:f6:9d:d0:ff:9f:25:80:f2:9d:
b6:ee:61:f4:33:31:01:52:9c:9a:c8:13:8e:f6:60:12:33:19:
99:75:4f:e7:f9:ad:59:fe:97:3e:c2:33:9b:2b:16:11:6c:c4:
9b:ff:a0:35:df:66:61:7c:e6:1b:2f:d3:66:9f:67:9c:64:ef:
50:39:14:f1:50:28:e6:a4:29:b0:78:02:a6:33:cd:e5:20:2f:
8f:cb:ac:5f:53:2a:d9:0f:b7:81:01:24:60:1b:f8:23:f4:17:
57:93:53:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:24 2024 by rpki-client on console-ams.rpki-client.org