Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/522C76345EF511EF9B3168AF762E951A.roa
File: 522C76345EF511EF9B3168AF762E951A.roa (raw, json)
Hash identifier: GSQaeUpy2P3cxoFuLK1Mb/tBZZz61LrZpSsoEjgtdlE=
Subject key identifier: D0:10:E6:7F:CC:23:D7:DB:0C:FD:83:5A:26:55:F9:A2:A4:9B:B2:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/522C76345EF511EF9B3168AF762E951A.roa
Signing time: Tue 20 Aug 2024 13:08:42 +0000
ROA not before: Tue 20 Aug 2024 13:08:36 +0000
ROA not after: Tue 27 May 2025 13:08:36 +0000
asID: 399077
IP address blocks: 156.251.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43544 (0xaa18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 13:08:36 2024 GMT
Not After : May 27 13:08:36 2025 GMT
Subject: CN=66c4955a-b64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:0f:70:f0:0a:fc:5a:e7:ea:4c:b5:ce:ba:
b8:b6:21:fd:d0:59:1a:4d:36:75:d6:1e:52:a9:66:
54:80:64:c1:fa:0d:99:03:d3:6c:d9:c7:08:c0:25:
d3:4f:82:eb:76:3e:24:1d:40:f4:75:73:61:54:10:
74:65:41:82:81:f4:a0:f2:bb:cf:f1:44:b5:bc:84:
36:92:ba:a3:1c:51:11:1a:6b:f0:6a:2e:8c:02:26:
44:23:4e:b7:1f:19:19:bf:f4:73:9b:73:22:e5:92:
e6:4e:db:62:e1:b6:f3:43:bb:95:a8:57:ff:a5:79:
89:61:d4:fb:a2:33:82:16:02:9e:4c:73:be:3a:16:
c1:43:bc:7b:50:6b:61:37:37:4d:ec:52:9d:c6:01:
54:35:49:d2:0d:95:fe:fa:38:2a:40:9b:28:36:66:
96:84:95:66:38:d1:34:a4:fb:ee:26:79:9a:7a:68:
bb:31:92:e3:1d:d5:4b:45:4c:23:a1:fc:7d:f1:d5:
79:87:c4:2d:42:c9:34:79:5a:70:5d:7e:1c:8f:24:
b1:29:09:48:7d:e1:d3:51:b4:55:06:ce:7d:9f:5c:
27:73:15:82:93:a0:fe:9e:a7:b5:ad:11:e6:c2:88:
34:6c:ee:ab:7a:83:69:01:b2:5e:32:b5:02:a3:5a:
42:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:10:E6:7F:CC:23:D7:DB:0C:FD:83:5A:26:55:F9:A2:A4:9B:B2:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/522C76345EF511EF9B3168AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.2.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4c:db:ae:65:e7:64:bc:87:5d:bc:7a:15:7e:66:2e:46:fc:
3a:c2:d7:58:b9:6d:50:95:85:49:d1:e6:62:78:bc:b8:09:0b:
da:f5:67:18:de:bc:84:04:04:a7:0c:a0:8c:10:75:2b:23:ca:
4a:39:e2:3a:47:26:f5:06:85:2d:05:bb:29:60:7f:20:1d:c0:
74:aa:ca:56:15:be:89:8a:12:2f:00:4f:c7:c9:67:e0:1e:a8:
74:d8:19:36:83:f8:a5:97:62:6d:04:05:9b:79:28:d3:e0:d7:
c1:b1:52:97:21:b2:53:d7:dd:72:9c:f4:38:e0:de:46:ea:53:
cd:22:58:f6:86:9b:da:48:85:45:05:36:d5:cc:31:fd:c3:61:
23:ec:6f:2a:22:00:00:6a:5d:17:ae:1f:ad:d1:cb:8a:15:76:
2a:db:b2:df:bb:f6:93:4c:89:d7:71:87:0f:fc:df:dd:8d:2c:
c6:14:28:cd:18:b3:39:fa:4a:ac:34:b0:e1:34:c0:ce:b0:9d:
69:72:c5:50:14:eb:49:22:71:26:e9:a1:a4:27:00:dd:95:2c:
7f:ec:fb:91:f3:a8:4a:2a:0b:f5:89:05:70:85:7b:e8:40:c8:
0e:36:74:f5:77:f3:dc:9d:60:6a:63:f9:11:ec:c8:eb:74:1d:
60:9f:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:30 2024 by rpki-client on console-ams.rpki-client.org