Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4564E75A9C1D11EFA51C2586762E951A.roa
File: 4564E75A9C1D11EFA51C2586762E951A.roa (raw, json)
Hash identifier: ag4NFb6vPp8KPc80InJPzYRqGaSSeo1Ha0S38TYkiU8=
Subject key identifier: 0D:F9:C2:98:2B:48:6C:0C:6E:56:5B:FD:40:ED:3B:B3:E3:6E:E0:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CF20
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4564E75A9C1D11EFA51C2586762E951A.roa
Signing time: Wed 06 Nov 2024 08:58:20 +0000
ROA not before: Wed 06 Nov 2024 08:58:17 +0000
ROA not after: Wed 01 Jan 2025 08:58:17 +0000
asID: 149440
IP address blocks: 156.227.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53024 (0xcf20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 6 08:58:17 2024 GMT
Not After : Jan 1 08:58:17 2025 GMT
Subject: CN=672b2fac-12bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e5:c4:62:46:b3:98:45:da:b8:0e:81:c1:7d:
39:a9:0c:eb:0d:66:79:74:1d:cc:c4:af:36:a4:e2:
64:85:f9:d2:0f:e1:d8:09:9e:ae:84:a9:f6:f0:a9:
6d:09:90:4e:6f:be:9d:4d:4e:43:d1:88:e4:1c:d6:
ff:69:f9:05:33:9a:af:94:10:4b:d6:62:1f:49:31:
2e:9d:6e:d0:59:7e:02:3f:73:ae:20:18:ab:49:af:
7d:10:a6:f6:52:06:a6:a6:bd:65:fe:ea:69:b0:2d:
12:7d:de:e6:85:c7:a6:8c:76:db:2d:77:62:53:61:
2e:23:b0:8d:d6:f0:c9:19:43:52:f4:44:92:e3:9e:
17:ca:2e:8a:b9:0f:c1:7c:70:88:a7:f6:8b:18:6f:
d8:31:26:30:4a:5d:5e:ff:8f:b2:3f:da:93:d3:ce:
d8:e8:82:ea:54:1f:8d:e8:ba:f3:ba:b2:bf:59:e2:
99:86:a0:55:31:9c:e4:5e:55:15:64:bc:18:9d:37:
cd:c8:73:b4:4d:07:27:3d:37:df:06:5c:5f:9f:12:
16:f2:82:b6:9a:f3:16:2f:98:bf:3e:9b:bd:5b:5f:
25:da:ea:6d:9d:80:ca:c4:5b:50:d3:e5:a2:09:5b:
6c:dd:d4:69:2b:76:2f:17:87:f6:e5:d0:5e:ff:25:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:C2:98:2B:48:6C:0C:6E:56:5B:FD:40:ED:3B:B3:E3:6E:E0:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4564E75A9C1D11EFA51C2586762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.0.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c2:6e:cb:3a:8e:c1:e3:ca:76:64:43:5f:ee:b6:86:39:22:
2a:04:8b:e1:72:48:01:bd:79:22:18:60:22:ff:43:28:71:43:
9b:fe:49:97:18:78:56:8f:08:7d:ca:57:81:19:a2:b7:31:62:
77:8c:fd:a3:10:1f:35:09:c2:03:db:24:54:30:e4:3b:c3:24:
19:6d:8c:6f:44:df:bc:cb:81:1f:25:a2:11:de:5f:fd:d3:7c:
5a:51:a6:0c:11:9e:e5:b2:d2:a6:82:2b:09:ef:b6:f5:37:a3:
c0:44:91:83:a4:81:21:b4:f4:89:11:ff:ef:1e:9c:b6:f2:6c:
a8:38:12:ee:87:9e:7b:f6:43:aa:1f:a2:b4:7e:0a:11:00:30:
00:84:42:5c:1e:23:97:49:4f:b4:66:53:00:b5:c0:4b:24:81:
cc:47:d5:68:e4:5a:3d:eb:e2:10:16:c1:23:4e:3a:7a:8b:9d:
de:25:41:8a:74:5a:2c:3d:d2:3f:d5:f0:1e:0f:4b:e5:7d:cc:
32:ab:24:75:04:2f:9f:0c:07:37:fd:5a:bc:f3:10:38:09:c5:
3b:4a:d6:d9:73:0c:c9:6b:ab:d6:3e:7a:4b:77:5f:9d:f5:e1:
9d:f2:cc:44:03:56:84:94:f1:00:c6:bf:91:09:ad:6f:86:c6:
1c:99:bd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:27 2024 by rpki-client on console-fra.rpki-client.org