Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45101C2CA2CA11EE8E6EBC33D25BE465.roa
File: 45101C2CA2CA11EE8E6EBC33D25BE465.roa (raw, json)
Hash identifier: KPjWZzK9uO9qelpWWRoELYgidZOctM4tv8TFJ2oVSZ0=
Subject key identifier: 23:0A:56:19:13:00:04:AB:C2:DB:A0:54:5F:04:7A:67:F5:11:F8:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 58F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45101C2CA2CA11EE8E6EBC33D25BE465.roa
Signing time: Mon 25 Dec 2023 02:06:52 +0000
ROA not before: Mon 25 Dec 2023 02:06:49 +0000
ROA not after: Mon 13 Jan 2025 02:06:49 +0000
asID: 139057
IP address blocks: 156.251.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22768 (0x58f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 25 02:06:49 2023 GMT
Not After : Jan 13 02:06:49 2025 GMT
Subject: CN=6588e3bc-c952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:d9:8d:91:16:19:86:37:14:7a:00:b6:56:
19:a9:ba:49:e2:59:ad:af:6e:69:9a:78:56:df:8c:
5d:55:05:81:c8:3e:94:57:45:0d:6b:27:d6:bc:10:
38:f0:4f:68:ee:89:b9:3a:ea:99:69:06:2d:02:29:
ad:94:95:e0:84:0e:ba:21:82:da:25:b1:3f:c1:82:
a4:f1:d0:13:e4:7d:5b:4b:be:fe:ca:10:3f:27:f0:
ea:5a:c7:32:1c:2c:c5:81:e6:66:f4:b9:d1:42:35:
2d:94:3b:9c:11:46:a5:8a:c4:0c:c0:b0:bd:c4:97:
99:6f:e9:bd:35:0b:d2:b4:96:69:14:db:af:c3:6f:
ab:99:22:b8:7c:09:79:30:bc:96:30:9b:42:bc:8d:
c5:a4:6e:a4:50:08:82:36:ee:d2:6e:5a:7a:55:71:
b0:f0:17:85:60:f8:cc:ad:ba:72:49:e4:31:27:52:
c7:09:64:e3:13:98:0f:c0:8c:f5:b9:da:77:ab:1f:
3d:0b:23:c3:fb:07:74:c7:28:6f:be:8a:e4:eb:07:
10:b6:65:36:39:8a:a0:d1:59:d4:24:ec:d4:4e:bf:
2f:03:9d:63:fe:42:04:c4:da:5f:a6:ff:8c:c2:df:
62:16:aa:10:d4:68:30:d6:91:e4:ec:82:f1:ce:ab:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0A:56:19:13:00:04:AB:C2:DB:A0:54:5F:04:7A:67:F5:11:F8:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45101C2CA2CA11EE8E6EBC33D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:19:ea:84:00:79:1f:8e:dc:bd:52:be:26:52:3d:1c:97:ee:
c8:d2:88:79:b7:a2:d8:51:1f:25:ca:b1:ff:f2:f0:6b:11:fa:
d7:d5:8a:75:b3:7c:b3:45:ca:a6:6c:63:cd:f3:aa:7d:2c:4e:
1f:64:de:76:04:97:55:c4:9e:ec:37:ca:bd:48:3b:81:8a:40:
95:67:ba:09:ae:96:48:a1:f8:b7:10:d4:ff:92:f8:c4:34:7c:
4f:c7:ec:bb:d2:61:c2:b8:07:66:33:52:a2:89:24:11:67:9c:
8d:8c:8c:e4:6f:7e:c2:62:ea:a1:5b:3c:94:cc:7d:63:28:c8:
fc:28:0c:38:a1:f0:d9:80:53:8e:47:b7:4d:4a:bc:bc:99:41:
12:cc:7b:2b:04:8b:79:cf:7c:57:7e:bf:c2:7b:46:33:41:93:
37:3a:e7:3c:9e:34:d4:88:c9:05:01:eb:b1:e9:d7:35:94:23:
33:9c:cb:7b:9d:e0:fc:eb:22:ac:a0:e9:45:29:78:d0:16:11:
70:69:04:26:c6:d4:7a:10:60:79:21:c0:d1:fc:3a:90:b6:b6:
68:0a:94:e5:59:ea:d0:f3:21:85:68:b6:16:32:26:ff:b6:92:
b2:f8:24:3e:c6:04:aa:65:30:43:31:a5:46:bf:85:39:02:a9:
af:73:cf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org