Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/364F0386A26211EFB56A409D762E951A.roa
File: 364F0386A26211EFB56A409D762E951A.roa (raw, json)
Hash identifier: hIwUefm/DQJax7NvIm+OPXSSSKDe4LXvdYGlVZdA7Sc=
Subject key identifier: 0C:C6:C1:81:68:61:36:B0:5A:E3:E1:08:89:9A:87:52:B7:3D:BB:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D29F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/364F0386A26211EFB56A409D762E951A.roa
Signing time: Thu 14 Nov 2024 08:26:57 +0000
ROA not before: Thu 14 Nov 2024 08:26:54 +0000
ROA not after: Wed 18 Dec 2024 08:26:54 +0000
asID: 142032
IP address blocks: 156.225.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53919 (0xd29f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 08:26:54 2024 GMT
Not After : Dec 18 08:26:54 2024 GMT
Subject: CN=6735b451-42ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:9a:3e:44:7b:2e:de:80:6f:ae:55:a0:8c:
c7:f4:09:c6:5b:33:04:36:f4:b0:25:f2:d6:10:84:
19:e7:b4:4c:09:8b:45:be:6d:bc:93:cf:c5:d3:8e:
b3:73:54:d3:c5:25:3e:ac:1e:31:c6:79:78:8d:5a:
b1:01:68:0f:fa:78:2b:e2:ba:71:57:2b:6a:0c:33:
a3:8c:9e:aa:99:d9:2e:93:8e:98:56:fd:f4:8c:5f:
1c:5f:16:3d:96:84:c4:1e:6f:82:3b:85:c1:f4:c6:
c0:c2:f8:86:a9:07:36:da:7f:f5:4b:67:90:e3:4c:
63:bd:c3:4d:1d:cd:34:22:f3:f7:d5:88:97:dc:c4:
83:b9:86:24:90:8d:fb:b4:58:04:fb:cd:66:4a:4c:
23:4d:c7:a5:f4:89:18:c1:d5:0b:5e:ad:ad:6e:8e:
31:9d:4c:a4:9f:53:51:c2:5b:a0:85:f8:97:8c:de:
10:68:d3:94:f9:79:34:bf:ea:f8:a7:75:a9:37:77:
a9:83:af:0d:65:7e:a6:16:47:09:b0:58:d0:e9:36:
45:c4:55:53:8a:d0:c2:00:ae:df:03:91:76:1c:67:
b8:c0:2b:fc:50:5e:1b:7d:b0:d6:78:73:db:c6:3a:
65:af:6b:a0:a1:3c:f9:65:71:32:33:b0:6a:55:b7:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C6:C1:81:68:61:36:B0:5A:E3:E1:08:89:9A:87:52:B7:3D:BB:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/364F0386A26211EFB56A409D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.24.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:35:64:5c:ce:4d:f4:b5:53:4b:de:97:6a:e2:02:62:43:ab:
74:e1:91:d5:ed:50:31:ec:a6:6d:70:bb:e3:b3:be:03:9c:8d:
e2:68:60:06:cd:51:b3:cc:f1:ab:3e:e1:39:7b:8d:27:65:a9:
e6:b0:fb:96:e1:28:4a:e2:e3:bc:5e:be:cb:3d:b5:dd:78:05:
e1:ff:ab:eb:0e:f6:74:4d:99:a4:28:86:88:55:bd:30:4e:c0:
05:41:23:2b:37:14:00:d6:98:98:26:b5:40:7e:92:c8:18:4e:
dc:71:41:b6:b4:e4:04:b5:64:ba:80:02:ea:90:78:50:b4:ce:
ee:c1:cb:0b:8f:34:95:d6:2a:72:ad:e0:92:77:2c:12:26:18:
27:54:c1:33:2a:ac:62:9e:24:c6:f8:17:d9:42:5e:95:c9:2a:
59:32:80:6b:63:08:55:1f:05:1c:11:eb:e2:2b:06:10:f5:43:
d4:3f:49:1f:26:ff:e4:f9:e3:bf:7c:fa:d1:fc:1f:42:b4:e5:
c0:f9:bf:14:29:07:90:d7:ac:f1:d5:b0:23:be:c9:49:f7:6a:
4c:3d:84:2d:69:2b:93:3d:2f:f7:b6:dd:8a:19:7d:b3:19:ed:
f2:54:fd:f1:2b:74:ea:2b:f4:58:70:b3:4b:bf:e2:fd:2a:18:
aa:7c:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:25 2024 by rpki-client on console-ams.rpki-client.org