Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E77ED44772311EFB27BD773762E951A.roa
File: 3E77ED44772311EFB27BD773762E951A.roa (raw, json)
Hash identifier: r7Whb0IVnQmTZOL0zw39eHv83tBwUBmJHn4jDfwIXro=
Subject key identifier: 7E:5C:A3:CC:69:D4:CF:81:04:D6:E2:09:0A:B9:C6:80:6F:52:3C:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B8ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E77ED44772311EFB27BD773762E951A.roa
Signing time: Fri 20 Sep 2024 07:37:53 +0000
ROA not before: Fri 20 Sep 2024 07:37:49 +0000
ROA not after: Tue 03 Dec 2024 07:37:49 +0000
asID: 135377
IP address blocks: 156.229.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47341 (0xb8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 20 07:37:49 2024 GMT
Not After : Dec 3 07:37:49 2024 GMT
Subject: CN=66ed2651-f612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1b:75:67:1f:8d:46:41:9e:00:9e:74:14:e2:
51:eb:b9:99:b7:dc:d5:cf:3a:05:c7:44:f6:aa:0c:
5d:8a:3b:a3:70:af:92:bb:da:db:9c:64:66:53:c2:
cd:27:ac:a0:b1:4d:3a:a3:e6:b1:fa:fa:12:f4:15:
59:1f:c5:f1:e6:9b:a1:8f:c6:11:57:eb:57:0f:29:
ce:d6:ad:eb:03:70:5f:69:47:83:1c:c8:ef:9c:f7:
ee:8c:d6:50:b5:55:13:bf:e1:c6:58:95:9f:db:2d:
73:bb:54:65:75:c1:20:fc:bd:9f:fd:fe:17:24:43:
6c:10:7a:6c:8a:5f:d9:83:d5:e3:cc:5e:8f:dd:3c:
3b:4d:4c:0b:a5:4d:d1:4d:28:9e:fe:40:5b:e6:eb:
45:1a:a3:f3:17:20:27:0a:cb:6f:33:b5:07:62:85:
0c:7d:2c:8c:e7:a5:3b:47:b3:ad:ce:ed:9f:0c:82:
96:cb:6f:ad:6f:71:75:72:c6:a1:cc:18:80:3b:9e:
10:65:ae:8f:59:f2:61:7b:70:14:8d:e4:7f:62:ff:
a0:4d:db:e2:4d:74:4c:2b:cb:54:55:31:f1:86:b9:
e8:6b:9f:36:ff:e9:d4:4b:cf:0f:38:33:fd:47:8d:
8b:1e:a3:43:50:37:b1:69:d2:96:7c:28:8b:94:81:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:A3:CC:69:D4:CF:81:04:D6:E2:09:0A:B9:C6:80:6F:52:3C:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E77ED44772311EFB27BD773762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.23.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3f:2f:5e:68:2b:9d:90:88:89:5f:f3:7d:dd:0f:39:28:9c:
74:71:3c:36:d0:8a:f3:73:5f:af:62:7e:25:fb:21:41:0b:2e:
f7:28:d3:5b:0e:6c:4c:6b:07:d9:75:6b:3a:51:88:83:ec:3b:
a9:a6:73:0a:6d:81:41:fb:f8:fb:c6:57:95:c4:97:ce:e6:0f:
ba:4b:0c:5c:ab:44:d6:38:28:dd:4b:28:6f:49:82:50:4a:14:
95:3b:5f:2e:24:38:de:e3:0a:18:e3:7b:64:39:d3:7e:db:49:
77:0b:91:fd:59:67:f0:fe:13:e8:ef:76:da:6a:53:3d:c0:0e:
b6:b2:cd:35:7f:fb:eb:61:4a:b0:8c:e9:b5:f3:70:7a:5a:6e:
f0:c3:05:d7:fa:1c:e3:3b:2d:a7:ea:95:03:ca:1d:f7:bb:f5:
04:97:b4:21:1d:7a:a5:54:ac:b9:47:59:8b:f7:9b:7f:b0:eb:
42:4c:8b:9e:32:75:aa:ba:81:ea:90:ba:22:b5:18:82:9d:9e:
f1:ab:a4:74:25:35:46:27:cf:55:96:e1:59:96:ae:a3:22:b8:
3d:a1:13:d3:8b:b5:03:da:b6:27:4b:28:23:f0:2f:7f:09:b8:
c6:ad:f7:5c:19:2c:25:6e:79:0d:08:49:37:f8:87:cb:7d:a0:
88:97:ee:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:26 2024 by rpki-client on console-ams.rpki-client.org