Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37102A405EEF11EFA7259384762E951A.roa
File: 37102A405EEF11EFA7259384762E951A.roa (raw, json)
Hash identifier: aq5Yy6s7Xraidbn14755HT+Dv/+J720MPEYqVOuSVdo=
Subject key identifier: 10:6B:EF:96:CF:91:6F:60:1B:5E:9D:2A:A7:EC:47:A5:80:65:34:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37102A405EEF11EFA7259384762E951A.roa
Signing time: Tue 20 Aug 2024 12:24:59 +0000
ROA not before: Tue 20 Aug 2024 12:24:53 +0000
ROA not after: Tue 27 May 2025 12:24:53 +0000
asID: 399077
IP address blocks: 156.251.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43462 (0xa9c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:24:53 2024 GMT
Not After : May 27 12:24:53 2025 GMT
Subject: CN=66c48b1b-a81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:ec:37:3a:dc:4a:d6:4d:a2:01:71:7f:f0:
41:d1:b3:b3:48:7d:61:3d:58:a2:42:0a:4b:de:b2:
a5:c3:dc:46:5e:5e:42:56:ec:b5:ea:8f:98:a0:50:
59:a5:ea:54:c4:93:55:12:50:ad:91:4b:92:5c:a3:
9a:f6:7c:ca:51:ad:20:dc:af:69:01:e1:93:dd:7f:
92:5c:b4:67:5f:0d:21:79:cf:bf:a3:51:a8:3d:93:
4d:31:c1:f9:f1:1f:3f:e2:8a:84:78:90:94:b8:de:
74:45:70:76:32:87:e2:68:65:2f:4a:bd:69:67:2e:
ef:97:8e:6d:73:50:f7:0f:76:65:88:4a:14:d6:c2:
c6:36:99:26:72:9c:28:5e:e2:41:50:f3:33:eb:92:
1c:09:1b:e7:63:b7:62:dc:23:be:71:7b:be:02:09:
b1:d6:7e:2b:9c:0c:04:65:c8:69:88:0d:ad:fa:4f:
e8:05:be:4e:23:08:a7:f0:10:f1:d7:e9:3c:24:4b:
de:b5:ee:16:72:a2:96:84:28:5f:0f:f5:f5:96:1e:
73:29:a8:a8:ac:09:90:6e:b5:ff:1a:9b:20:3f:ff:
e3:c2:a0:81:69:b5:09:5d:f8:0f:95:83:5e:18:e6:
04:e0:1b:4f:1b:49:d6:85:b4:91:3b:4e:0f:49:1d:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6B:EF:96:CF:91:6F:60:1B:5E:9D:2A:A7:EC:47:A5:80:65:34:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37102A405EEF11EFA7259384762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:67:5f:3c:c1:f9:c4:5f:fa:f5:60:db:e8:ae:1e:be:e0:17:
e1:cc:05:be:50:30:1e:b8:e0:8e:12:fa:1a:8c:08:0f:3c:9e:
cd:54:2e:13:13:c8:28:58:cf:89:f9:90:f8:55:ba:2d:81:d9:
4b:24:ed:65:09:b5:3b:b4:f8:29:cd:bc:59:0a:3b:ce:52:81:
05:96:f3:33:6b:e7:d9:cd:09:56:1f:0c:eb:30:3c:4d:a3:31:
f3:2b:3b:3d:a9:50:94:61:8f:e5:6c:1f:48:0a:6f:fd:84:77:
33:8d:98:77:ea:48:5f:94:13:8c:d6:00:59:64:5e:b9:4a:3e:
74:4a:ec:6e:19:87:2a:ae:d4:df:4c:0c:4f:a3:0c:f8:7c:e8:
bd:5e:be:1a:ac:1e:d0:72:a8:0f:a1:8e:61:ba:9c:26:4a:9b:
6c:d7:37:81:05:55:44:67:fd:8c:92:82:e1:56:00:e2:d5:d6:
64:fb:76:fd:92:44:4a:82:cb:75:1f:96:7f:55:81:9b:de:cd:
d7:0e:e7:ea:4c:18:cf:f5:c9:56:5e:20:5e:a1:8f:a8:cd:4c:
6d:3c:c6:ec:dc:5c:e8:83:74:d1:1c:f2:25:5e:33:cd:f8:c6:
a6:4a:4b:1b:9a:45:4f:e8:62:6d:b6:e9:da:79:7a:db:cc:60:
b6:7a:a3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:25 2024 by rpki-client on console-ams.rpki-client.org