Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A8D1DCA8EC011EFA4F3E746762E951A.roa
File: 4A8D1DCA8EC011EFA4F3E746762E951A.roa (raw, json)
Hash identifier: QOw8GwunuNV+xYmX7XozplkINOWM060liIp6khD5D4c=
Subject key identifier: E4:CE:3C:E2:D5:FA:4B:18:0D:CF:AD:4B:45:81:44:68:9B:CF:31:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C736
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A8D1DCA8EC011EFA4F3E746762E951A.roa
Signing time: Sun 20 Oct 2024 08:50:01 +0000
ROA not before: Sun 20 Oct 2024 08:49:56 +0000
ROA not after: Sat 10 May 2025 08:49:56 +0000
asID: 215071
IP address blocks: 156.227.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50998 (0xc736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 20 08:49:56 2024 GMT
Not After : May 10 08:49:56 2025 GMT
Subject: CN=6714c439-a7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:78:0a:4a:36:79:17:e4:d0:00:09:cb:83:
b5:35:1c:4a:87:c4:69:f6:7e:2a:91:48:23:64:12:
9c:c9:54:51:c9:2c:fc:13:63:05:9f:28:64:32:92:
e9:e1:d2:1e:9a:b3:61:7e:ee:3c:b9:79:d9:e4:83:
bc:31:b2:23:0f:f3:38:b9:e1:ed:ce:10:e7:07:74:
c9:73:60:e0:d9:12:37:82:97:27:7c:1b:01:0c:53:
19:d1:75:e9:7e:5c:d7:1b:71:a0:ff:76:28:a4:d3:
71:d5:47:0e:f8:85:96:22:4a:01:4c:f8:3b:bd:cc:
cc:0e:d6:1f:36:fa:38:ac:42:b8:80:f3:c9:05:e9:
2d:b5:55:95:12:dd:fc:14:ca:42:bb:3c:36:46:c1:
ba:a0:ec:86:11:0a:5b:fc:8a:86:f2:8b:8e:a9:bd:
6e:39:aa:b3:75:ee:dd:a6:fa:4f:10:dd:a2:f5:73:
cf:fc:7f:7a:23:56:f1:d9:31:81:f4:b7:8e:bd:d3:
16:dc:19:bc:2b:38:f8:73:0e:5a:d9:03:65:d8:df:
7d:95:96:33:22:d1:35:0f:7d:b5:60:39:e1:76:df:
58:8a:94:ce:71:e7:89:0a:d5:75:99:a6:3d:2f:60:
0f:9c:a9:2b:b1:b8:e2:03:f5:fe:69:67:30:48:99:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CE:3C:E2:D5:FA:4B:18:0D:CF:AD:4B:45:81:44:68:9B:CF:31:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A8D1DCA8EC011EFA4F3E746762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.5.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e9:c0:9b:84:37:62:81:b7:9d:38:bd:b9:58:94:98:e6:e3:
40:88:cc:80:04:1e:9b:4e:3f:7d:7d:ef:d0:02:e0:cc:81:0c:
d3:31:7a:f2:c4:9e:2c:4d:d4:9e:f7:aa:4e:42:30:3e:c1:53:
2d:a5:dd:17:cd:05:cb:b3:81:a6:33:5b:66:59:8b:30:7a:e2:
77:b4:31:34:29:4f:70:05:0d:9d:a0:c4:6e:da:bb:7b:10:cc:
64:a6:d8:f0:4a:09:3d:1a:e8:c0:fd:8e:0b:22:e4:ba:12:46:
c1:54:ef:d0:8d:6a:4a:b5:13:a6:5f:18:e1:b3:f8:ff:4e:14:
80:92:a7:64:a3:80:fb:a4:aa:80:7a:59:4a:55:40:ad:fd:7c:
34:3c:06:50:62:b8:f6:a7:c3:f6:1a:fa:f5:32:9e:8c:47:f3:
8b:ff:c7:74:52:ac:d6:4c:5c:a0:9d:f6:23:0e:bb:e4:2b:c5:
25:18:28:50:18:21:a4:ad:27:34:fa:b4:78:33:1d:88:77:4c:
db:a6:57:4f:36:26:32:d2:ab:d2:48:ba:21:2d:9b:4c:97:fb:
a1:fb:1f:ed:11:fe:9f:35:be:bb:40:fe:17:2f:7f:0d:fe:ae:
76:1f:7c:11:99:10:77:4a:c9:13:9d:03:f4:da:a1:74:7b:03:
63:7c:2c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:29 2024 by rpki-client on console-ams.rpki-client.org