Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F5C678593D11EF8DF12C50762E951A.roa
File: 61F5C678593D11EF8DF12C50762E951A.roa (raw, json)
Hash identifier: rYBDaiAEPgzIYPdN+4SkzLCUd7M+7YFGndlukzJHzpk=
Subject key identifier: AA:2F:23:1E:64:26:A2:26:DF:64:C7:AA:2B:A9:D3:B3:9D:2B:40:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A67D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F5C678593D11EF8DF12C50762E951A.roa
Signing time: Tue 13 Aug 2024 06:29:24 +0000
ROA not before: Tue 13 Aug 2024 06:29:21 +0000
ROA not after: Fri 15 Aug 2025 06:29:21 +0000
asID: 273827
IP address blocks: 156.235.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42621 (0xa67d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 06:29:21 2024 GMT
Not After : Aug 15 06:29:21 2025 GMT
Subject: CN=66bafd44-853f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:b4:c2:69:7b:a2:a3:b5:32:a7:b4:99:a8:
d8:81:5f:14:8a:4a:87:f7:5e:c8:e5:ef:7f:72:d1:
34:fd:b1:2e:fb:08:47:ab:45:f3:11:58:f1:0a:e4:
f7:1d:f8:69:37:71:13:9f:ec:99:2b:98:e3:24:7a:
fb:e8:f5:ef:a6:bc:c3:ff:bd:ae:38:15:44:8a:0a:
eb:f6:7e:ee:af:be:87:17:a4:d1:f0:b1:36:45:1f:
56:39:59:b3:44:8b:d0:4a:33:5e:0a:9a:6f:14:9d:
da:1c:6e:2d:2c:ff:37:d7:72:9c:73:69:a2:44:d7:
cf:b3:86:26:93:0a:a5:36:eb:bc:bf:dd:67:8b:97:
93:37:4c:3f:87:2c:2d:0b:8c:1a:d1:f5:1a:50:b0:
d3:f1:90:9c:80:51:9b:d2:bc:05:b9:39:c0:5c:d8:
3a:d7:c6:41:b9:27:75:93:6a:18:9a:3a:f4:85:d2:
8b:b0:4d:e0:34:f2:44:0a:f4:30:19:44:3d:4a:25:
3c:02:ca:71:fe:6c:e6:ba:cf:2a:77:0d:69:4b:c3:
05:2a:48:48:3b:55:6e:e5:08:24:21:fa:ef:3d:a2:
e8:4d:b5:4e:cb:44:6c:69:94:c0:ba:74:e6:83:fc:
2a:c7:df:b8:c5:47:08:a9:f3:74:86:91:fb:e1:bd:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2F:23:1E:64:26:A2:26:DF:64:C7:AA:2B:A9:D3:B3:9D:2B:40:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F5C678593D11EF8DF12C50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ec:26:db:8e:30:8a:fc:9d:2b:99:1b:49:6e:89:06:82:e4:
91:79:5a:a4:43:0e:01:e4:00:0c:cd:43:fa:4d:db:e9:df:e2:
69:da:cf:b2:58:1a:4a:57:3b:11:55:0b:eb:05:55:44:e4:06:
63:c3:c3:88:82:2d:71:ee:43:3e:44:4b:f6:ee:cb:e1:06:cb:
95:18:d5:48:7f:2f:0d:a4:54:5a:24:2d:47:4a:f0:55:81:31:
30:b9:b4:14:c8:39:54:6c:e2:59:4f:dc:de:ba:53:03:80:f5:
cc:84:a1:6d:b5:90:a9:ab:10:76:54:26:50:2e:27:aa:66:aa:
89:4e:88:9e:ac:81:b2:a1:2c:f2:fa:86:19:e2:e8:a5:0c:b3:
42:0c:61:11:b2:ce:74:eb:96:2e:1d:1e:89:9a:28:b6:24:99:
76:cd:00:84:57:52:08:b1:72:ea:b2:c6:5d:e7:da:a2:fb:1b:
11:d5:c1:4d:4e:11:a0:d6:e9:bc:49:b3:cc:6e:8e:bb:41:c4:
c6:c8:a9:83:1f:0f:ab:0c:82:c8:ae:0e:db:46:aa:6a:74:86:
86:0f:7a:1e:4a:7f:dd:bb:f1:b5:57:98:80:95:de:2e:73:e2:
01:1a:99:00:b1:ea:09:27:8c:59:67:d0:7d:29:f0:0d:1d:72:
4d:98:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:33 2024 by rpki-client on console-ams.rpki-client.org