Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61E948784FD611EFAE5AB850762E951A.roa
File: 61E948784FD611EFAE5AB850762E951A.roa (raw, json)
Hash identifier: OV5nWkBzc2ifCWEcgc09mkZPlOTWvAq5WRJ6Z5MYJyE=
Subject key identifier: BB:90:19:27:A6:C1:CF:88:93:00:70:4C:81:B3:F1:88:36:1C:20:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A22B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61E948784FD611EFAE5AB850762E951A.roa
Signing time: Thu 01 Aug 2024 07:19:26 +0000
ROA not before: Thu 01 Aug 2024 07:19:22 +0000
ROA not after: Sun 03 Aug 2025 07:19:22 +0000
asID: 139056
IP address blocks: 156.247.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41515 (0xa22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 1 07:19:22 2024 GMT
Not After : Aug 3 07:19:22 2025 GMT
Subject: CN=66ab36fd-7b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:e8:99:27:d0:86:ce:25:da:bc:ec:44:ed:
a3:96:c0:c2:78:8d:7f:c0:35:96:8e:47:39:e9:49:
8d:d5:4a:fc:54:be:6b:8f:a7:62:44:b0:ef:8d:24:
6d:a4:a7:a9:79:7d:b6:c2:8c:c0:16:26:54:fb:cc:
eb:2d:f1:d2:d0:91:45:a9:0b:be:47:29:0d:e2:bc:
77:bd:7a:d7:6c:a6:9d:6b:3d:2c:82:33:20:17:65:
ed:82:b7:db:07:c5:d1:67:bc:4d:69:ad:40:8a:a0:
a4:30:e9:1c:17:c9:76:d0:af:30:4d:e0:8f:93:d1:
67:83:c6:14:09:80:82:56:92:9e:c8:d3:2f:17:27:
94:28:fd:82:d5:80:91:cf:74:10:e9:09:53:90:18:
b3:c1:83:75:05:49:a5:c8:98:64:69:38:c3:91:ab:
47:17:75:d7:6c:a3:07:75:89:52:b4:cb:27:80:e4:
3c:57:39:ba:c3:d7:04:c3:fe:0b:55:81:82:b1:bc:
1c:8d:90:3b:b9:91:c9:78:0c:5d:d0:79:89:12:2d:
48:fb:bc:c6:08:00:b8:ff:96:4c:73:01:9f:0f:e4:
e3:7c:29:e4:fb:42:f8:d1:cb:e4:2c:ef:d8:66:1e:
89:3c:4c:17:f7:a8:1c:cb:6c:8f:0d:58:a3:35:05:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:90:19:27:A6:C1:CF:88:93:00:70:4C:81:B3:F1:88:36:1C:20:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61E948784FD611EFAE5AB850762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.17.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5b:1c:22:65:24:3a:0b:1c:a3:2f:74:69:bb:bf:d0:70:15:
37:a8:b8:5f:f6:0d:a7:45:8f:23:fd:6e:eb:15:e2:37:06:cf:
33:d6:4d:89:46:7e:97:ec:45:23:71:4c:f5:0d:b2:fa:58:b8:
22:f5:01:e7:3e:16:7c:d5:91:5d:2b:9d:7c:cd:29:31:da:5a:
38:54:c6:8d:46:e7:4a:97:66:01:ff:c6:63:d1:37:6b:e7:cf:
0a:2a:db:71:ca:c6:c4:6c:15:9f:20:99:1e:07:bd:34:42:50:
fb:97:b9:24:75:63:eb:69:dc:b5:64:ba:22:eb:89:97:15:01:
58:2c:4f:26:d1:d9:44:e4:d4:10:d7:72:be:dc:f6:8f:a6:43:
a2:8c:42:30:ea:30:13:84:f7:66:2f:1b:4c:84:c7:95:ca:51:
4d:59:7b:39:87:7c:e7:af:87:cf:72:2c:cf:42:d2:28:bc:2b:
9e:b3:b4:8b:c1:29:44:3f:f4:c9:59:d0:f4:b9:f0:13:1e:67:
52:c7:ef:65:54:75:2e:43:be:14:9c:dc:1f:b7:b5:81:1f:36:
85:9c:cc:aa:a3:ab:a2:cf:d8:de:dd:71:75:f4:75:e1:95:39:
33:c8:ee:f5:68:c1:c5:1f:43:a5:7e:f6:80:70:8d:a8:c1:6f:
44:2f:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:32 2024 by rpki-client on console-ams.rpki-client.org