Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D536B74818011EF91AED3B6762E951A.roa
File: 4D536B74818011EF91AED3B6762E951A.roa (raw, json)
Hash identifier: GKT71SITC8TW1SfORbqEvqWWN2H7LV7c2csxHnhU6WM=
Subject key identifier: 24:27:45:40:05:2A:05:3C:0A:A8:9E:1E:44:74:FF:9D:2B:1A:29:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BE87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D536B74818011EF91AED3B6762E951A.roa
Signing time: Thu 03 Oct 2024 12:09:12 +0000
ROA not before: Thu 03 Oct 2024 12:09:09 +0000
ROA not after: Sat 27 Sep 2025 12:09:09 +0000
asID: 135600
IP address blocks: 156.249.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48775 (0xbe87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 3 12:09:09 2024 GMT
Not After : Sep 27 12:09:09 2025 GMT
Subject: CN=66fe8968-1595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:59:19:42:f4:cc:07:37:21:47:9b:a8:8e:
55:6e:83:ec:ac:10:ed:55:ac:b3:1c:b6:fe:61:1e:
fc:78:23:68:6e:92:68:90:e2:dd:f9:aa:b5:20:43:
9a:ef:de:86:d9:d2:81:f4:2c:f5:d4:e0:40:77:84:
c2:36:65:66:c5:f2:46:b9:3b:d5:c1:6f:54:ac:91:
46:ba:5d:4c:f4:57:0d:1c:a2:63:ad:c9:a5:19:f4:
57:5e:ca:65:bf:a7:18:6c:c5:2c:86:30:d0:48:03:
08:90:99:66:da:a1:49:5e:c7:09:e3:50:da:d2:f9:
47:2e:b3:be:28:81:f4:1c:8a:09:78:86:b5:ae:8c:
a0:e6:b2:62:04:51:69:05:4a:32:8e:a1:d6:e1:29:
82:0c:10:e5:72:2f:3b:ec:49:31:e8:b3:46:18:85:
10:f1:2d:e5:74:ea:ff:42:a2:c8:0d:d1:ce:79:77:
99:d5:f5:d7:8c:ae:17:51:ed:ae:e1:d6:6a:52:5e:
96:89:58:6c:24:f5:e7:3c:7f:48:a7:47:9d:2c:51:
84:3b:63:19:25:4e:ed:6f:fb:04:e0:c6:c9:7e:4b:
e3:7c:6a:89:26:9c:47:ee:ef:e1:02:7e:28:0b:3d:
89:ea:56:20:46:55:35:6b:6d:cf:0d:dc:90:4f:bd:
15:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:45:40:05:2A:05:3C:0A:A8:9E:1E:44:74:FF:9D:2B:1A:29:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D536B74818011EF91AED3B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.8.0/21
Signature Algorithm: sha256WithRSAEncryption
14:91:60:4e:d9:e7:c7:02:a5:af:c8:fb:1b:b4:67:e4:96:30:
c3:b5:dd:7c:54:51:a2:15:26:59:e3:4f:ba:04:c7:93:6e:1f:
04:02:79:29:67:65:85:b5:cb:b0:52:58:9a:b6:3c:69:57:d7:
f7:ac:db:68:72:f4:99:bb:14:30:cc:93:77:2e:a2:8f:6b:89:
16:7b:af:70:ad:db:67:7d:00:f9:ea:7e:88:ae:78:82:a1:e4:
0d:5a:ea:35:d3:19:96:5a:c7:f5:8a:e3:d2:51:91:64:6e:88:
06:87:0a:3d:8e:96:c9:12:5b:f7:82:2c:35:07:45:b0:e2:ec:
ae:80:68:51:01:cd:52:aa:87:28:17:96:49:79:f0:ba:0e:0e:
fc:2c:38:6d:54:32:8b:9e:9e:60:b6:68:48:a2:b6:3f:10:3f:
76:01:fd:ba:34:01:c5:9d:32:ea:1d:79:1e:63:81:01:4c:00:
c6:5d:da:11:12:e1:d2:30:46:61:75:d9:9b:c3:e3:44:bd:79:
80:6e:4a:cd:98:c6:8e:37:91:2b:78:13:99:e7:e7:b0:2b:fe:
44:2d:71:00:f8:44:2f:b5:bf:23:54:5c:10:b3:26:46:a6:00:
ef:66:e3:c5:bf:0a:91:5f:46:56:75:58:41:ed:70:47:fa:33:
23:83:49:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:29 2024 by rpki-client on console-ams.rpki-client.org