Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B151312951311EFB3B6109A762E951A.roa
File: 3B151312951311EFB3B6109A762E951A.roa (raw, json)
Hash identifier: sdryOTLD26oVTaZcyuJB0whfWpH+bO9EpkBSYuDUhFY=
Subject key identifier: 8A:79:A7:5C:62:24:07:29:E0:7B:3A:E8:19:D3:28:F5:F5:E0:7A:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C944
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B151312951311EFB3B6109A762E951A.roa
Signing time: Mon 28 Oct 2024 09:58:50 +0000
ROA not before: Mon 28 Oct 2024 09:58:46 +0000
ROA not after: Sat 30 Nov 2024 09:58:46 +0000
asID: 203020
IP address blocks: 156.253.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51524 (0xc944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 09:58:46 2024 GMT
Not After : Nov 30 09:58:46 2024 GMT
Subject: CN=671f605a-7f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:ef:0b:be:72:30:96:7e:be:4c:e7:d4:78:
fd:8e:c7:4a:99:7d:0d:5b:4d:2d:18:9a:9e:d4:30:
4c:f6:58:52:d6:6d:30:ae:d7:d9:66:66:1b:3e:22:
59:df:fa:e3:90:52:1f:b6:3f:a3:88:4b:b1:ea:b1:
3a:70:ef:ea:84:eb:73:d4:3e:28:ea:1f:b9:39:9f:
ec:64:51:4a:41:8f:de:ff:56:7b:c2:48:b2:27:82:
65:02:53:ab:ea:6e:d5:c1:32:c6:eb:09:1f:c2:45:
04:0b:79:5b:b2:03:6e:5e:d0:0a:c3:aa:53:82:b7:
44:94:81:e1:52:dc:95:2c:01:2e:27:4c:7c:0e:aa:
02:d2:d2:85:f8:23:f9:8a:d2:4c:13:ee:49:4d:90:
2d:ae:d6:ab:ce:47:ef:17:d3:9d:50:1f:9a:0a:04:
37:fd:fe:64:f2:5b:7b:54:5d:80:47:58:31:b5:9c:
a1:f9:1c:c4:a8:b2:af:85:03:9f:0e:26:c3:70:8c:
c3:be:8d:65:d0:52:4b:e1:ef:30:83:46:37:3b:a1:
99:a6:1d:e1:f9:a1:98:cd:c3:09:ea:3b:b8:f3:9d:
7a:46:0d:24:86:6d:66:12:f1:cc:d1:1f:dc:7a:95:
01:2a:a6:11:cd:dd:ed:ec:f8:02:e7:59:e7:95:ad:
3b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:79:A7:5C:62:24:07:29:E0:7B:3A:E8:19:D3:28:F5:F5:E0:7A:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B151312951311EFB3B6109A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.208.0/21
Signature Algorithm: sha256WithRSAEncryption
74:8e:cd:59:b1:ee:fb:c8:70:c3:eb:d7:f1:8f:74:16:f8:fe:
67:96:40:c6:36:a6:d4:57:cb:e5:ed:3e:8f:6e:f4:45:54:80:
5b:6a:89:8c:da:a8:c5:93:f4:b3:f9:cc:59:a4:4e:99:a9:da:
02:af:37:47:08:78:36:4c:12:79:fe:6c:9c:16:dd:97:dc:4d:
2d:aa:c9:3d:f8:ea:56:b3:22:04:8a:34:ef:c8:f2:c1:f2:f2:
94:fc:cd:e0:55:9f:3c:60:82:73:d8:5a:e9:c3:3f:ff:10:85:
6f:70:be:56:63:05:ef:4a:24:f7:ec:8a:91:d6:b4:80:ae:31:
46:3e:32:13:3a:74:42:b0:f0:8d:cb:cd:d5:4e:81:01:ae:c3:
8b:47:95:4f:e2:39:d7:b2:8a:ab:02:21:43:b3:13:46:ed:76:
d1:bf:43:b8:aa:a5:17:74:74:c7:af:cc:03:3b:3d:4d:a9:46:
f3:bb:41:84:1d:d3:8b:66:7e:2e:15:4a:ec:45:a6:6c:71:d6:
cd:42:33:86:71:48:6a:5e:f7:15:cf:06:e9:1c:58:c0:aa:ce:
36:d3:f0:b5:a8:1b:1b:be:e0:bb:fd:46:1d:38:bf:fa:ef:93:
ce:d8:64:d0:61:94:15:fe:70:1b:35:ff:10:ee:b0:13:d3:10:
41:7b:15:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:26 2024 by rpki-client on console-ams.rpki-client.org