Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D6DF3587E3911EF8C8E9591762E951A.roa
File: 4D6DF3587E3911EF8C8E9591762E951A.roa (raw, json)
Hash identifier: FvYOFvFiFe+eQ73F6BYYNSJiUf0CNn6Woe1fgYlsf7s=
Subject key identifier: 0D:F6:29:0F:A5:88:74:17:4F:0F:D9:1C:EF:81:73:15:37:A2:8B:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BC57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D6DF3587E3911EF8C8E9591762E951A.roa
Signing time: Sun 29 Sep 2024 08:03:25 +0000
ROA not before: Sun 29 Sep 2024 08:03:21 +0000
ROA not after: Mon 30 Dec 2024 08:03:21 +0000
asID: 17561
IP address blocks: 156.236.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48215 (0xbc57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:03:21 2024 GMT
Not After : Dec 30 08:03:21 2024 GMT
Subject: CN=66f909cd-5940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:40:70:e4:4a:c5:e1:2b:f3:12:d1:19:db:
5a:ef:98:b8:04:1a:ba:0a:df:22:19:56:a2:50:90:
68:35:94:f3:a7:30:2b:c0:79:1f:aa:33:7f:9a:bf:
47:c1:fb:c3:e8:82:8f:15:f4:d6:1e:77:e3:e0:e6:
5a:60:47:71:9c:c1:e9:78:fc:f6:c3:3f:fa:2a:18:
3d:03:d8:ee:f4:43:bb:b1:37:73:4a:d7:e6:0e:ea:
5a:30:de:29:30:53:c5:0b:c9:44:ba:0d:60:ac:ba:
30:3a:31:96:35:c5:a8:20:2e:32:f2:b5:44:3e:dc:
9b:ee:b0:60:4b:f0:75:cd:83:0b:d1:5c:25:f2:53:
f5:5e:8a:65:c6:d7:2b:5a:b8:c9:6c:6d:a2:b9:9d:
78:39:c4:1a:24:2a:99:f6:e1:d6:e6:a8:2f:15:83:
1a:a0:e7:05:db:01:4b:74:54:53:78:44:37:78:54:
34:ac:d1:58:cd:b9:48:fa:95:41:55:70:c7:50:08:
b4:85:50:18:bb:b8:8c:53:96:4b:b0:42:4a:a3:76:
59:9e:40:44:f4:83:eb:28:5f:ca:fb:32:7a:6a:94:
d2:c2:ad:50:72:68:75:33:89:3d:03:50:46:78:14:
f3:c0:f7:3c:1d:75:20:20:a6:ac:3f:38:5d:21:ba:
b1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F6:29:0F:A5:88:74:17:4F:0F:D9:1C:EF:81:73:15:37:A2:8B:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D6DF3587E3911EF8C8E9591762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:27:8b:a2:2c:06:36:c9:45:b6:f0:4b:7c:eb:a2:51:d3:0a:
93:57:08:6a:f2:64:9c:e2:6f:78:26:46:04:1b:53:ab:18:90:
33:f6:44:13:37:6b:e8:c6:69:02:35:ff:9c:0b:78:38:53:73:
4c:26:6c:e7:ae:05:c3:99:f9:91:9b:88:6f:45:e5:fc:9b:05:
a6:00:1b:2b:9f:f2:39:00:0a:00:04:b3:40:59:65:b8:83:f2:
0c:79:65:fe:a0:90:e2:cf:40:30:5e:67:08:e6:fb:19:be:1f:
74:33:dd:78:27:68:73:0a:9c:96:c2:d2:12:19:89:19:cc:28:
03:87:ce:a2:6e:5a:52:cd:60:8a:ad:9b:76:d9:5b:a4:b3:95:
3a:6a:d1:d7:dc:86:a4:df:0e:39:77:f8:96:84:ad:46:41:4a:
25:9e:59:f1:47:d7:2f:35:ad:01:83:55:a6:ac:b2:3f:04:24:
8e:67:37:df:2d:a8:a5:88:33:e4:50:aa:5f:f9:f7:40:49:7e:
7b:bd:4c:c0:e1:42:ea:8d:79:5d:8d:57:80:0a:98:4d:2e:97:
50:1d:d6:13:ed:2b:90:4e:0a:ff:48:25:83:d8:7a:ea:98:01:
84:52:dd:22:cd:ae:ee:b4:62:2b:d0:78:49:ba:f6:0f:c0:e0:
88:f5:d9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:28 2024 by rpki-client on console-fra.rpki-client.org