Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/577857C896B011EF826DBC46762E951A.roa
File: 577857C896B011EF826DBC46762E951A.roa (raw, json)
Hash identifier: B1FnHeGwp6Kz3OC18yiSamyKmc303TrPmdXHg7juMdc=
Subject key identifier: FF:1E:6D:EE:2A:74:AD:C9:E5:EB:94:C1:B3:51:2E:3D:80:7F:71:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CA27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/577857C896B011EF826DBC46762E951A.roa
Signing time: Wed 30 Oct 2024 11:16:00 +0000
ROA not before: Wed 30 Oct 2024 11:15:56 +0000
ROA not after: Tue 03 Dec 2024 11:15:56 +0000
asID: 269070
IP address blocks: 156.249.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51751 (0xca27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 11:15:56 2024 GMT
Not After : Dec 3 11:15:56 2024 GMT
Subject: CN=67221570-5551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:45:29:3a:45:5c:18:c6:8b:d7:77:43:af:
6b:e7:57:c3:ff:ee:31:d5:a2:2d:67:2e:5a:2e:4c:
ae:5d:9d:03:70:84:2b:de:ce:3b:b4:b7:a6:c6:1e:
32:1a:99:b7:dc:d0:75:fa:1d:ea:3b:90:88:55:ab:
64:cf:6a:25:54:6d:e0:60:f7:34:84:1b:29:e9:50:
a3:4a:e4:de:e2:23:2a:25:07:61:91:e1:bd:a8:85:
6d:7e:9c:84:68:f8:7c:9b:e6:97:dd:36:d0:68:a6:
af:cb:f4:c8:ca:d8:7d:62:ae:cb:a5:c3:b6:51:81:
86:4e:b7:d6:42:76:f0:6f:6b:38:b8:60:bb:f3:f9:
1e:66:07:36:16:7c:2f:63:c6:09:12:75:2e:0e:e5:
4e:0e:a5:1b:15:3f:3d:ca:03:89:bd:0a:34:23:da:
43:f1:bc:dc:6d:74:35:51:1a:77:21:c7:6a:9a:95:
37:c8:83:a4:10:f2:6b:92:f3:34:04:31:db:cb:1f:
34:1f:b4:cd:39:50:3f:e6:46:16:8b:7d:1b:d6:5b:
66:53:2a:b9:b4:e3:22:6c:8c:a9:d3:15:4a:af:2c:
99:77:3a:c0:63:56:dc:82:de:34:23:b8:2d:5f:fc:
b5:5a:df:0b:4f:be:92:8f:b0:0b:fe:95:38:7b:1e:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1E:6D:EE:2A:74:AD:C9:E5:EB:94:C1:B3:51:2E:3D:80:7F:71:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/577857C896B011EF826DBC46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.65.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0d:8a:57:81:5d:f8:cf:35:20:1e:1d:4f:bd:10:c1:e0:a6:
3a:c1:df:a4:27:fa:3a:48:c8:5c:96:6a:9c:90:48:bd:8d:42:
2f:07:9f:de:4d:3a:35:b2:20:e1:c1:13:29:3f:e4:9f:18:70:
e2:fc:ae:e8:f5:98:b8:17:a0:9a:f6:f6:5f:75:8e:a2:8c:71:
d1:e7:1a:b0:db:3d:02:f0:85:1a:29:da:b1:3f:97:7d:f1:2d:
45:08:b5:00:67:44:fb:ed:ae:39:88:14:18:bf:db:fd:cd:e5:
c1:bd:05:85:b7:d7:7f:da:ce:fd:2a:39:71:06:a0:9e:bd:4c:
d9:47:ad:cd:6a:af:c8:e6:b2:8a:9a:a3:40:f7:81:20:95:a5:
c4:8f:49:c2:92:97:15:70:1e:5b:9b:f1:3e:36:39:e1:12:1d:
ab:b5:5b:de:7b:86:30:7e:5e:3c:36:af:fb:56:48:29:d9:b9:
bc:39:38:16:27:f1:d3:07:ed:fa:72:c1:d6:1c:1d:e0:9b:a6:
4c:f1:cc:a1:32:a0:d4:75:45:fd:c9:13:b8:46:9f:77:14:48:
9c:99:0f:95:dc:ce:69:61:53:94:64:bb:17:06:06:bf:8f:ab:
65:97:32:fe:4e:eb:f3:b3:ab:a4:51:58:d0:93:02:3c:f0:a4:
62:b2:c6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:31 2024 by rpki-client on console-ams.rpki-client.org