Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/493B6B1A767511EFA03686A8762E951A.roa
File: 493B6B1A767511EFA03686A8762E951A.roa (raw, json)
Hash identifier: 2+HziCr5eWzpmW2rDm6iZoC9Iy09PhfDK0s9BPnam04=
Subject key identifier: 47:3C:7F:DB:4B:26:20:42:4A:03:61:92:5E:47:CD:5D:FF:60:BE:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B827
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/493B6B1A767511EFA03686A8762E951A.roa
Signing time: Thu 19 Sep 2024 10:52:38 +0000
ROA not before: Thu 19 Sep 2024 10:52:35 +0000
ROA not after: Fri 08 Aug 2025 10:52:35 +0000
asID: 133199
IP address blocks: 156.245.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47143 (0xb827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 10:52:35 2024 GMT
Not After : Aug 8 10:52:35 2025 GMT
Subject: CN=66ec0276-906e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:c3:36:51:81:8d:2a:30:91:3b:ad:71:25:
4d:6f:14:ba:b7:e9:36:28:d6:01:6d:36:d0:4d:04:
02:e6:8e:cb:88:55:c9:92:e3:52:a1:5e:29:6f:4b:
e3:8f:60:c0:10:d4:05:00:9c:35:a3:f2:3f:fa:62:
bd:2c:ef:8d:90:2c:ce:6f:9a:e5:f2:8e:24:b8:55:
31:2d:c8:f6:fa:9a:5c:4e:db:07:9f:2a:d6:1a:1d:
cf:ad:59:28:53:ee:3b:8c:68:13:90:14:c8:a0:07:
ca:8a:d5:bb:9d:91:06:8f:7a:c8:e2:c0:2b:aa:4c:
2b:de:7a:d9:3e:b9:bd:d1:8e:74:24:f1:ff:d3:21:
a7:44:02:a9:8b:36:79:94:17:d7:b2:95:86:c2:4e:
1e:c6:db:ba:fe:04:cd:50:16:21:a9:3b:f6:0d:ee:
5e:1d:8c:ed:ba:04:16:d7:2f:e6:5d:90:14:b0:c7:
e9:77:f5:d7:4c:3e:98:1d:17:cd:13:52:6c:49:f1:
87:4b:aa:2e:13:c9:83:f9:e0:66:1a:e6:e8:59:2b:
83:c9:7b:d9:ad:c5:d3:fb:ba:76:2c:2a:7f:24:fb:
19:9c:f6:2a:c5:20:3c:bd:37:f7:7c:7e:e3:be:b0:
ad:a5:e5:0c:44:59:2b:f9:91:32:8b:c0:3a:94:65:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3C:7F:DB:4B:26:20:42:4A:03:61:92:5E:47:CD:5D:FF:60:BE:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/493B6B1A767511EFA03686A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:6c:19:1b:d0:3d:10:76:de:5f:5d:4d:70:21:4a:87:91:d8:
29:f2:85:48:d6:2b:16:0f:5e:ce:31:a4:5b:06:b2:5c:21:26:
51:17:fa:48:ae:95:2b:76:cc:60:7d:43:00:46:fe:b8:b7:db:
5f:8d:d7:3b:84:1f:78:6b:3e:8c:fb:47:01:12:44:77:95:bb:
bb:96:91:7e:63:fa:dc:7f:cb:53:56:2a:5e:3a:07:09:a7:d0:
80:f1:89:a1:25:fa:40:67:b4:6d:1a:70:17:e5:7d:f3:61:4a:
7c:75:5f:e2:5e:71:f3:94:ee:b1:e1:ea:65:be:32:07:4f:f1:
4a:bf:b9:e8:c9:96:40:96:67:d2:d9:4a:43:81:1e:c6:6b:ee:
4b:71:34:9e:7a:be:1e:39:4f:75:8a:69:42:26:81:e0:50:ac:
62:92:1b:ee:6e:75:42:76:4b:7a:a1:20:65:80:2a:52:98:e3:
46:cf:95:8e:5c:4f:41:10:67:76:e3:39:3d:9e:22:27:a6:dc:
68:86:0e:27:9d:cd:21:bb:e7:fb:20:11:1e:f9:a4:56:74:b7:
a8:44:9a:ac:a1:01:aa:d4:b3:bd:cc:5c:a7:4b:d0:f2:50:e6:
92:51:d8:d7:6e:66:61:c0:f5:33:53:b0:a9:5b:3f:ae:52:79:
29:46:b7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:27 2024 by rpki-client on console-fra.rpki-client.org