Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F9E20685AD311EF9EC52F7C762E951A.roa
File: 5F9E20685AD311EF9EC52F7C762E951A.roa (raw, json)
Hash identifier: XaAtnxSkAIYc8KGe5VmZqgS015Jzf+TolYEcjT45VDc=
Subject key identifier: 99:1E:61:47:9E:DC:2C:CD:1E:98:06:1C:8E:C5:F6:2C:4A:B5:48:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A775
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F9E20685AD311EF9EC52F7C762E951A.roa
Signing time: Thu 15 Aug 2024 06:55:36 +0000
ROA not before: Thu 15 Aug 2024 06:55:33 +0000
ROA not after: Mon 18 Aug 2025 06:55:33 +0000
asID: 23520
IP address blocks: 156.235.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42869 (0xa775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 06:55:33 2024 GMT
Not After : Aug 18 06:55:33 2025 GMT
Subject: CN=66bda668-710b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:17:29:02:74:41:c2:f0:bd:92:43:9e:c7:
c0:8d:c1:bc:35:47:93:e2:87:5e:77:36:a1:ef:36:
e7:d6:1e:5f:97:b2:b0:d5:87:03:eb:b3:0c:fa:c5:
d2:c8:a9:f8:48:c8:26:f1:ae:a1:a4:9c:f6:f7:94:
30:01:51:36:33:c5:25:24:1d:46:1b:d3:4f:f7:44:
74:e4:3a:d1:70:07:65:e1:fb:c3:0f:39:66:45:94:
63:0d:ac:92:4a:a9:e6:36:1e:06:af:bd:79:00:e1:
19:69:c2:6d:54:0f:bb:b7:83:bc:ad:0f:69:03:2d:
7e:06:73:2c:75:43:c3:59:59:d4:3b:17:9f:e7:64:
25:3a:13:fc:d7:68:8e:55:2f:f0:e4:d1:c8:76:71:
43:05:94:95:61:9c:42:40:4c:14:2b:aa:30:21:41:
a0:13:52:ee:4f:bb:1a:95:df:37:89:b8:b5:61:7d:
1f:22:e1:97:e5:15:b1:55:57:22:05:45:7a:8b:66:
8c:cc:6d:65:bb:29:44:48:67:2a:ca:12:07:34:db:
06:54:23:cf:ed:3a:c9:05:2b:f4:1c:68:cf:16:77:
1c:fe:d6:42:39:6f:bb:9b:01:d0:c5:c0:9c:db:a4:
eb:b3:1a:2a:a2:f2:c9:fd:60:f6:ad:4d:6d:3f:c2:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1E:61:47:9E:DC:2C:CD:1E:98:06:1C:8E:C5:F6:2C:4A:B5:48:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F9E20685AD311EF9EC52F7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.73.0/24
Signature Algorithm: sha256WithRSAEncryption
41:bd:a4:c8:10:6a:df:16:d5:93:87:02:4b:f7:28:77:ac:21:
9c:22:d0:d2:21:dd:08:fa:7f:a7:ee:16:37:0d:3c:bf:39:c8:
1e:f2:e4:5e:45:4a:c5:ec:2f:28:6c:83:b0:f8:1a:4f:44:ec:
a4:ab:f8:05:06:91:0c:63:92:8e:fe:89:59:17:78:36:1f:00:
5d:65:cd:52:68:7c:5e:18:05:d5:de:88:09:52:0a:d5:70:fc:
eb:ed:87:b2:28:41:e9:e8:be:19:1d:31:ce:20:1a:54:7f:f7:
12:ff:52:34:30:60:fb:9a:e1:ee:5c:15:af:77:29:e8:22:af:
b4:04:ff:af:66:ea:6f:31:c9:fd:ac:a0:56:73:b3:c1:2f:37:
19:04:c1:6c:cc:1b:e2:7e:ea:fa:54:5b:db:e3:ed:1a:c8:79:
22:c7:20:eb:2b:53:7a:e1:ce:c6:f9:8b:45:4c:de:8f:70:ec:
c3:d2:a1:ba:11:49:e9:3c:5e:26:34:15:2c:9b:83:85:3e:75:
5e:0a:12:ec:5e:4d:dc:fc:44:d8:8a:14:42:02:b0:93:11:a2:
bb:0b:a1:4e:65:74:b4:d0:21:3f:17:b2:a5:36:f5:fd:6b:1c:
ab:c9:23:6e:d2:12:ed:f7:3a:54:6e:cd:a3:f0:d8:9e:60:cb:
51:13:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:31 2024 by rpki-client on console-fra.rpki-client.org