Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4826315E86F811EF9346229F762E951A.roa
File: 4826315E86F811EF9346229F762E951A.roa (raw, json)
Hash identifier: V3VeDwqoLf3+SIxKHmNmeLwOOKgHFxZKgzf6Cw3rd/U=
Subject key identifier: 8C:18:9D:3D:F3:1D:F3:B6:35:D0:3F:AB:2B:16:93:6A:F3:85:29:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C2E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4826315E86F811EF9346229F762E951A.roa
Signing time: Thu 10 Oct 2024 11:10:39 +0000
ROA not before: Thu 10 Oct 2024 11:10:35 +0000
ROA not after: Fri 20 Dec 2024 11:10:35 +0000
asID: 142286
IP address blocks: 156.225.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49891 (0xc2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 11:10:35 2024 GMT
Not After : Dec 20 11:10:35 2024 GMT
Subject: CN=6707b62f-1e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:b0:81:8d:44:86:05:ac:75:d3:df:cb:38:
7e:e1:20:87:92:aa:b6:05:91:82:1d:65:d6:58:0b:
4e:b1:b9:89:05:c5:54:9e:f1:22:0b:d8:1b:ae:39:
1a:c7:03:61:00:df:9e:af:28:4a:7c:86:08:35:5a:
42:b9:78:f8:b4:c3:b2:ab:a1:82:30:cb:8a:c9:6b:
a1:a8:b1:5e:98:63:cd:96:2a:16:4f:74:b0:47:11:
a5:88:45:9a:2e:b0:fc:1e:86:8e:24:b5:da:67:af:
68:a3:e4:2f:eb:1e:7e:77:c0:4b:16:fa:58:34:0f:
55:57:e6:08:ae:dc:25:a8:d4:10:ec:73:72:b0:85:
76:8e:0c:86:32:63:39:ee:28:24:6a:3f:00:89:c7:
1b:2f:0d:ad:17:82:df:c1:a0:0e:8b:24:a7:48:e8:
e7:6e:e7:0f:50:dc:23:99:bf:71:77:73:e9:79:07:
29:68:79:04:70:9e:46:61:8c:16:2c:e8:bb:54:38:
9d:d0:62:b8:69:43:42:f5:7a:fb:9d:41:47:66:6c:
73:57:51:b6:3c:3b:51:c2:7a:c2:47:23:bb:6e:f0:
c4:fb:e6:b5:17:df:13:48:d9:b5:9e:25:b0:44:28:
e9:76:47:1d:e8:1b:ad:29:45:a2:d3:35:1d:0a:5d:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:9D:3D:F3:1D:F3:B6:35:D0:3F:AB:2B:16:93:6A:F3:85:29:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4826315E86F811EF9346229F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.144.0/20
Signature Algorithm: sha256WithRSAEncryption
39:af:77:00:2c:7f:31:b6:ae:49:9a:41:43:76:f9:c9:46:e7:
b4:6a:0a:80:01:12:a3:7f:8d:c6:37:6f:be:0d:f3:f0:24:4e:
26:60:db:da:f5:22:88:61:5e:9f:44:70:51:aa:97:22:a2:b5:
54:dc:45:2b:19:78:6a:a8:a8:15:5e:f1:38:0a:d3:f2:d4:f9:
c8:05:52:2f:47:60:b4:26:64:46:f1:da:91:18:a3:37:12:26:
dc:30:86:ba:5d:91:57:b7:df:b0:85:28:a3:72:de:ca:79:0d:
8d:7e:38:b4:7a:91:ce:b6:9f:9d:1c:28:75:c3:aa:82:64:63:
fd:a4:ee:e1:0c:2d:e5:0b:b7:db:28:57:7c:7e:af:8b:5e:eb:
76:da:ea:c6:b2:25:a7:15:60:ea:cf:0d:a9:02:f6:aa:29:bb:
e2:39:a6:7a:5a:04:5d:88:24:86:76:83:ea:2e:03:68:17:ce:
54:66:a8:36:25:95:9f:d2:77:ac:ee:83:85:c3:06:4e:c2:38:
7e:6e:23:b2:ec:af:22:60:fd:b1:a2:25:d6:84:82:10:9c:c9:
40:65:ae:d9:a2:0a:0e:33:77:e3:1e:28:8d:3f:a4:98:cd:7d:
f2:d8:f9:51:68:48:ad:8c:8a:31:b4:12:78:87:15:b4:7e:0a:
7b:80:f5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:27 2024 by rpki-client on console-fra.rpki-client.org