Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F508840766911EFA2B4E35D762E951A.roa
File: 2F508840766911EFA2B4E35D762E951A.roa (raw, json)
Hash identifier: OYve1CjuAEKb+gZQmuFEu2jtjnfMlpgQDHQCFIg8Kas=
Subject key identifier: 62:CF:2A:48:93:D1:95:7B:0C:5B:1D:01:DD:8D:84:49:A8:FE:BE:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B80B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F508840766911EFA2B4E35D762E951A.roa
Signing time: Thu 19 Sep 2024 09:26:01 +0000
ROA not before: Thu 19 Sep 2024 09:25:57 +0000
ROA not after: Fri 08 Aug 2025 09:25:57 +0000
asID: 133199
IP address blocks: 156.247.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47115 (0xb80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 09:25:57 2024 GMT
Not After : Aug 8 09:25:57 2025 GMT
Subject: CN=66ebee29-2d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:3d:b2:11:58:d5:d6:2c:87:47:f6:bc:11:
ea:c5:d8:c0:ac:8b:4b:36:85:76:82:10:8a:54:18:
49:f3:db:2e:83:40:5e:ee:bd:b0:76:56:f7:60:37:
b4:ad:86:f1:f6:3a:ce:56:64:b5:1b:78:bc:d6:59:
c0:82:4c:9d:c2:7c:eb:8e:55:53:f1:a4:88:6a:1d:
af:bf:dd:d1:b7:e3:39:97:b1:b5:8e:26:0e:6c:1a:
06:c8:15:eb:07:59:3c:21:cd:5a:4b:7d:f3:aa:3b:
6c:9a:ff:6f:77:06:78:41:e7:e2:db:03:2a:5a:c3:
d1:90:30:6f:a3:2c:61:b7:93:9f:f0:eb:8f:b8:97:
6e:a2:8c:1e:42:8b:cd:58:a0:5c:71:21:55:56:4c:
7a:f6:6d:d5:e4:67:66:d7:4a:32:f1:73:7b:fe:62:
e6:17:a5:aa:ca:43:93:91:04:2f:1e:9e:71:cb:9a:
63:99:ba:18:fe:ee:98:df:f0:2e:f8:30:86:8e:ae:
f6:6a:8a:14:95:75:6c:91:b8:74:6c:2c:9c:e9:4b:
1f:f4:f5:9a:f1:b8:05:6b:05:a4:b0:9e:71:75:6f:
fe:cb:88:85:2f:27:3a:b6:49:75:33:24:a7:7d:2b:
56:4c:3a:d0:b9:fe:46:cf:74:49:e1:80:6f:ab:2a:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CF:2A:48:93:D1:95:7B:0C:5B:1D:01:DD:8D:84:49:A8:FE:BE:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F508840766911EFA2B4E35D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:e7:ca:7c:92:b0:5c:41:a7:59:d5:1d:9a:17:b9:7e:d5:ae:
85:ff:ac:ec:76:5d:5d:d1:5a:0e:35:5a:63:08:ba:59:04:b1:
78:66:93:d0:1f:13:e7:b7:c7:f0:3e:6b:05:9d:d1:9d:e7:df:
dd:2e:8a:ac:f9:f7:bb:36:37:fa:34:8c:5a:cd:23:52:09:e9:
58:58:9d:9d:d6:f7:66:b8:06:51:86:57:0c:39:e1:7e:86:93:
fe:42:de:60:3b:4c:4d:78:52:d0:75:48:8f:4c:70:d5:cc:62:
60:54:b5:d7:35:74:a6:ee:1f:41:1e:49:b3:39:a7:af:dd:b0:
be:84:c3:85:d2:89:07:cb:70:6d:c7:6e:14:78:3d:5a:ef:9e:
0b:5d:be:c3:2e:e5:69:57:d4:3f:44:f4:4d:14:b3:cc:55:c6:
0f:93:8c:29:c1:35:dc:22:c6:9c:6e:43:89:29:7f:12:6b:08:
9e:95:1a:7d:fb:d8:d0:44:7b:32:d5:27:73:86:e0:ff:05:bb:
7b:29:91:98:b6:53:a7:02:69:e5:43:ab:de:f1:48:5f:71:6b:
bb:14:16:d5:9c:00:ab:8c:c2:ec:dd:e2:de:fc:d6:c8:76:4e:
28:0f:39:c2:c2:c0:a2:69:03:30:47:8d:99:c4:a2:b6:ce:fb:
78:ec:fe:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:23 2024 by rpki-client on console-fra.rpki-client.org