Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35B4076E5EEC11EFA529B171762E951A.roa
File: 35B4076E5EEC11EFA529B171762E951A.roa (raw, json)
Hash identifier: qXobp5r3pj0Eg52QmpeRCoWTzxvkaQmTato3R605x+M=
Subject key identifier: 5C:69:AB:FF:B6:D8:27:49:1C:30:AB:E1:E6:82:8C:15:51:DA:7B:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35B4076E5EEC11EFA529B171762E951A.roa
Signing time: Tue 20 Aug 2024 12:03:28 +0000
ROA not before: Tue 20 Aug 2024 12:03:24 +0000
ROA not after: Wed 27 Aug 2025 12:03:24 +0000
asID: 138995
IP address blocks: 156.245.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43428 (0xa9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:03:24 2024 GMT
Not After : Aug 27 12:03:24 2025 GMT
Subject: CN=66c48610-816c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:17:78:76:ea:51:9f:01:51:c3:da:ac:c6:
e7:6e:99:aa:cb:55:5d:73:28:16:a4:ba:61:0b:1a:
3d:44:4d:42:dd:b1:2e:ce:3c:15:e5:32:78:62:a1:
f0:95:16:39:c9:0b:e8:7f:03:71:83:93:27:be:4a:
b9:bb:09:1d:b2:a7:a8:59:a9:ab:50:42:30:b2:d5:
a7:6e:e9:9f:ef:24:a5:9e:c4:85:8c:64:f5:46:cf:
cb:dc:da:68:af:e9:4e:b1:dc:d8:15:1e:1d:78:55:
39:86:fc:5a:2e:07:d2:80:31:0f:6b:fc:45:1a:d7:
0f:bd:8a:e4:49:fe:57:91:b7:03:7a:40:00:33:43:
18:be:42:c6:e0:39:e6:03:3a:f0:7f:e3:e9:24:5e:
58:15:e4:0c:82:41:e5:4d:92:9a:c8:e8:a0:17:0f:
e5:96:be:fe:4a:68:4f:2f:23:16:8e:9c:d7:11:ea:
2a:8c:4c:4b:73:1e:87:cd:10:a7:51:dc:ad:7a:3e:
49:d9:8a:68:4c:99:3d:e0:78:cc:ff:a8:6c:75:43:
47:e0:5f:86:63:43:41:81:fc:34:7a:32:aa:33:c3:
c9:43:92:db:c8:80:65:9c:f9:0a:1c:14:74:1f:0b:
ae:33:03:03:00:82:7f:2b:b2:86:bf:da:17:64:6a:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:AB:FF:B6:D8:27:49:1C:30:AB:E1:E6:82:8C:15:51:DA:7B:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35B4076E5EEC11EFA529B171762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:df:f8:49:55:a7:43:05:29:80:4d:cb:45:45:09:34:10:d9:
fc:0a:14:78:12:d5:26:9e:3f:b9:4d:2d:37:28:bb:ed:8f:89:
bb:6a:d9:2a:e4:6d:1c:2a:68:19:0b:ca:8d:b7:80:97:e5:3c:
ca:15:df:b2:e9:50:72:dd:ad:c1:2a:1a:31:a3:8d:34:9d:58:
71:32:51:da:45:31:ff:ae:e6:ef:cb:d3:4c:b6:97:8e:a0:b0:
fa:4a:5d:7b:89:07:d5:93:ee:a4:1a:e4:7b:da:a0:19:9b:81:
84:16:cc:66:c1:18:0c:2c:84:0b:55:79:31:f0:c7:b1:f4:c0:
8c:f4:87:bc:07:c2:e1:1a:b2:c1:2f:8c:c5:3c:6e:da:ea:3e:
ce:f9:7d:10:89:8f:e7:08:83:b3:51:1d:b9:74:51:65:5c:8f:
0a:c5:52:57:32:6c:72:b6:3e:0c:1f:72:12:43:24:94:4e:23:
dd:f5:c1:a1:5f:f7:d4:29:ea:b3:f6:36:84:05:55:0e:a1:a1:
fd:07:09:7e:45:31:c5:ea:09:e8:64:4e:e3:63:6a:04:ae:4a:
05:3e:90:4e:2f:0d:e0:b0:8d:f7:d0:59:52:ff:64:0f:99:a8:
2d:15:07:8f:e8:e8:4d:cd:ec:6a:86:9d:14:28:c6:95:8b:59:
e1:58:d0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:25 2024 by rpki-client on console-ams.rpki-client.org