Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4758DF125EC911EFAA277C84762E951A.roa
File: 4758DF125EC911EFAA277C84762E951A.roa (raw, json)
Hash identifier: WMjSUKktTDyJZ9HQI5MbKA0b9orELhCprYm3Ew6y/y0=
Subject key identifier: 3B:62:82:FE:46:F7:80:46:49:20:50:CF:AC:86:BC:9C:73:01:95:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A96A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4758DF125EC911EFAA277C84762E951A.roa
Signing time: Tue 20 Aug 2024 07:53:25 +0000
ROA not before: Tue 20 Aug 2024 07:53:20 +0000
ROA not after: Tue 13 May 2025 07:53:20 +0000
asID: 138415
IP address blocks: 156.224.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43370 (0xa96a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 07:53:20 2024 GMT
Not After : May 13 07:53:20 2025 GMT
Subject: CN=66c44b75-cae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:99:83:ce:ff:4d:49:5e:41:5d:72:81:42:
f2:aa:e6:c8:4e:f5:dd:32:70:c9:ea:c8:1b:1f:50:
be:8b:6e:16:3e:54:b4:e9:27:a4:33:6a:52:f4:f3:
f7:b8:ae:76:de:43:97:da:78:f3:db:3c:79:b6:ba:
25:02:43:5d:61:f5:1a:c3:84:3a:a0:a4:1b:39:ed:
4b:6b:e3:fa:f8:e2:39:9a:9c:b6:4d:86:b3:bb:78:
97:01:ac:9e:6e:f3:c7:9b:c7:95:62:1e:7a:fa:4e:
57:89:3e:65:3f:53:19:85:39:37:d0:eb:1a:d4:36:
01:5c:d9:fd:cc:d1:38:0e:75:e7:ff:da:9d:07:84:
1d:8a:dd:ef:40:ff:23:3c:ec:97:1b:ec:38:de:25:
a1:c2:7d:4b:a1:84:f5:5b:5d:7e:52:6d:41:9c:8c:
cf:0f:e2:17:96:76:58:25:42:3e:78:a2:82:b3:5a:
66:39:e7:68:79:00:29:37:30:74:ee:94:4d:0f:d8:
65:9f:22:56:06:3f:2a:d0:ed:54:42:1f:77:a4:74:
56:c3:d1:10:bf:28:89:d3:4f:99:58:93:f8:31:b5:
22:d7:11:d7:71:54:de:a2:d8:85:98:5e:f2:6c:1c:
72:08:09:df:56:5b:32:48:86:29:19:5d:b9:b3:89:
07:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:62:82:FE:46:F7:80:46:49:20:50:CF:AC:86:BC:9C:73:01:95:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4758DF125EC911EFAA277C84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.90.0/24
Signature Algorithm: sha256WithRSAEncryption
41:86:53:01:af:a4:3f:fd:df:00:59:e4:06:84:78:b9:10:cc:
51:d7:31:83:23:17:1f:b9:e6:4a:d0:8c:3a:44:b0:2d:64:96:
a5:ac:cf:be:48:19:da:53:0d:12:a5:b2:39:c3:8a:8d:a1:c2:
06:31:51:37:c2:c4:2d:2a:b0:3b:38:89:0d:e1:eb:cc:c7:1f:
d1:28:8f:64:a9:c6:22:ff:18:c3:be:e3:78:b6:41:3e:85:86:
80:e9:5b:e2:01:4d:99:69:6f:82:0c:6e:84:49:f0:5c:1b:c7:
71:c9:dd:96:39:5b:0e:c6:3e:31:ad:ea:13:0c:e3:86:d4:b9:
f7:ce:04:bc:ba:a9:46:a5:05:2c:8b:a7:b5:ab:52:f4:75:ea:
b8:01:3a:1e:10:bd:a1:c2:44:e5:e5:3a:2a:e1:15:ba:76:72:
1a:97:40:13:6f:7e:5d:0f:d9:3c:68:23:3c:f1:b8:4f:a8:b1:
42:d4:f3:df:83:3a:90:ff:7e:17:2d:82:d9:78:0e:b0:5d:13:
fc:75:77:bc:5f:3a:47:22:ff:38:03:96:21:ef:ec:5b:e1:a4:
bd:f3:eb:9c:66:6e:3f:7a:54:44:24:42:3b:23:dc:0f:62:ca:
a2:48:9d:bd:ac:22:88:4c:86:00:80:b3:72:3b:d9:78:c9:22:
57:f8:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org