Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D1ECE4A951211EFA76EDE93762E951A.roa
File: 5D1ECE4A951211EFA76EDE93762E951A.roa (raw, json)
Hash identifier: QQM2R6eV250jxHi6jSJhYwSHlgSqDBXZ01qWXMUySOA=
Subject key identifier: 36:F0:84:A2:AB:17:FB:13:A1:D3:85:E4:61:6A:0A:96:F6:48:3A:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C93C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D1ECE4A951211EFA76EDE93762E951A.roa
Signing time: Mon 28 Oct 2024 09:52:38 +0000
ROA not before: Mon 28 Oct 2024 09:52:34 +0000
ROA not after: Sat 30 Nov 2024 09:52:34 +0000
asID: 203020
IP address blocks: 156.228.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51516 (0xc93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 09:52:34 2024 GMT
Not After : Nov 30 09:52:34 2024 GMT
Subject: CN=671f5ee6-f884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:d6:1c:34:10:9d:a5:4f:f2:bd:3b:86:0a:
64:85:e9:d1:58:7c:02:6a:2e:67:3b:92:94:18:cc:
3c:19:2f:2e:12:be:37:93:e9:01:30:10:f9:8b:83:
20:07:64:e6:75:34:bc:86:1a:ba:6d:eb:2b:77:f7:
be:cb:49:6e:6d:63:52:b7:a1:2d:3d:af:4c:76:bf:
22:72:fa:98:bc:94:1d:44:46:59:80:bf:86:04:12:
f1:49:47:d5:af:7d:25:e8:b7:01:b6:fb:a3:04:b9:
e1:3c:a8:94:93:f2:ad:7e:0d:69:b0:77:db:c7:5f:
21:a0:f2:06:35:a2:0e:18:ce:90:1e:28:2a:19:2d:
1f:f5:f3:0e:e1:ed:c7:90:ae:dc:7e:7f:16:22:b2:
c6:52:f7:f5:0d:9d:ed:06:6d:6e:c3:6c:bc:f5:22:
f8:3a:4d:12:d4:87:f7:71:7e:14:30:36:92:c2:9b:
d5:6e:ba:89:c8:7a:b2:0e:e4:8b:12:2d:22:04:91:
10:e8:45:79:b7:9e:e7:e9:f6:5b:dc:c5:34:14:50:
11:f2:38:3f:2e:b3:f4:41:64:e5:a0:59:e4:3f:ae:
e6:69:fb:9f:5e:85:06:a2:52:cf:58:69:9c:1e:4e:
1d:94:45:1f:75:e4:dd:f1:40:d3:3b:24:e6:1e:c2:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F0:84:A2:AB:17:FB:13:A1:D3:85:E4:61:6A:0A:96:F6:48:3A:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D1ECE4A951211EFA76EDE93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.6.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:90:da:ee:f4:3b:1c:cb:6c:be:86:d2:0a:06:11:26:76:8e:
1c:91:ec:92:f0:43:1d:c8:e5:18:9c:19:1c:e6:a5:cd:e7:c8:
c8:d7:50:2a:83:57:98:1c:c8:41:f3:7b:61:c4:eb:32:e7:6a:
56:27:8c:78:eb:ea:4d:fa:c4:24:36:f6:6f:77:53:0c:77:7f:
72:7d:1a:0b:bb:c5:03:05:30:11:28:d6:64:6d:fe:a9:b5:e8:
5d:8e:e9:64:36:bb:90:74:82:9f:8a:c6:63:ba:f5:29:09:a8:
6f:c3:02:83:1d:92:15:56:86:1d:6d:9f:94:32:9f:df:ee:bd:
b3:cf:36:0a:5d:97:fb:86:59:5d:6e:57:4b:3b:f9:e4:da:ed:
f8:fc:cc:bd:1a:65:d4:24:d2:40:ee:4c:75:19:4c:92:6a:cc:
c5:ba:bd:27:cc:57:81:bc:ad:fe:91:0a:bb:67:55:56:e3:50:
6b:d0:7a:d2:29:ec:e9:84:b4:dd:31:0b:d6:06:bd:0c:a0:c3:
d7:62:3e:bc:7a:1b:1d:d9:98:96:36:86:36:9a:4a:e6:8f:5a:
af:e1:79:3b:a5:25:68:d4:9e:7d:51:23:77:f4:c6:1f:2d:c1:
ce:bd:93:d7:e3:72:6e:da:48:fb:8e:39:c5:0e:22:7d:40:51:
30:ee:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:32 2024 by rpki-client on console-ams.rpki-client.org