Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DB5FC805EF111EFA370F592762E951A.roa
File: 6DB5FC805EF111EFA370F592762E951A.roa (raw, json)
Hash identifier: 21zA5EdKbBRZ49/9+Z1Bsg90fsYNVUU6SNfn5+uzLYI=
Subject key identifier: A2:A3:52:E0:8E:9C:74:8C:EA:59:C9:A6:D8:19:04:D5:51:B5:D2:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DB5FC805EF111EFA370F592762E951A.roa
Signing time: Tue 20 Aug 2024 12:40:49 +0000
ROA not before: Tue 20 Aug 2024 12:40:46 +0000
ROA not after: Tue 27 May 2025 12:40:46 +0000
asID: 399077
IP address blocks: 156.251.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43492 (0xa9e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:40:46 2024 GMT
Not After : May 27 12:40:46 2025 GMT
Subject: CN=66c48ed1-80e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:7f:15:68:1b:b1:e4:c6:7c:bf:44:4a:d0:
fb:be:ee:9d:ae:54:b4:6f:55:1a:f3:c0:37:9a:17:
2a:c4:63:b9:f7:46:32:27:c3:7b:83:a2:c2:8d:0b:
6a:d2:2c:c2:4d:74:06:50:93:e0:f9:43:de:4a:4b:
33:75:31:6b:54:08:d7:2c:d6:34:2c:2f:bf:1d:12:
7c:ef:f6:26:ab:f7:d7:8d:48:b3:35:3a:60:13:7a:
a0:27:c6:c9:40:82:a6:c8:df:ea:16:3e:63:b0:80:
46:3d:53:02:99:55:e7:19:34:47:c1:26:05:94:ef:
14:44:e9:a8:9d:8f:4a:a2:c8:0a:b0:b0:60:b2:cf:
b6:42:be:1b:a9:a5:98:a8:29:2c:48:d7:a5:b6:e2:
e2:ae:29:fb:07:bd:54:b0:b4:27:26:9c:cd:df:5c:
12:74:0c:e8:75:0e:aa:09:fc:08:34:d1:60:56:ef:
24:cc:ff:20:d5:5b:1f:5e:7b:69:b3:83:49:94:7f:
bb:4c:50:d3:93:46:75:ae:00:b5:2f:e9:f9:e5:24:
a6:11:3b:80:b9:53:77:98:ec:ab:d3:26:65:90:b6:
74:34:a2:c9:6d:34:a5:fe:a2:d9:48:57:67:c7:8e:
b4:4c:31:4b:43:12:e1:fa:8b:9c:14:8b:fc:ee:9e:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A3:52:E0:8E:9C:74:8C:EA:59:C9:A6:D8:19:04:D5:51:B5:D2:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DB5FC805EF111EFA370F592762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:99:c4:af:7f:9a:28:01:d5:e5:b3:15:15:27:1b:07:14:8e:
82:7b:81:e2:1c:46:3f:e6:8b:0a:b4:33:8e:82:ea:26:96:29:
83:6e:f0:cd:fc:ac:9f:ac:64:1a:5e:a4:29:ee:cb:42:9a:01:
18:ca:bd:ff:30:4a:79:ac:0c:59:da:ce:1c:e1:e7:2e:2d:ba:
3e:38:04:44:4e:3d:38:cc:c3:78:17:7a:22:ba:8c:97:73:2a:
46:dd:03:f4:ba:c9:9f:29:75:cc:f0:eb:e1:3a:dc:06:d7:ab:
c7:0c:99:c4:10:05:7f:b9:5f:2f:75:21:01:d6:a5:5b:8d:01:
b1:dd:87:83:ce:f5:4e:2b:36:c2:31:10:9f:e5:90:c9:35:ce:
62:31:52:be:7b:b0:9c:6e:20:70:56:41:bb:4a:72:19:e2:ed:
d3:f4:9a:a6:fa:28:2e:8c:d5:af:22:d3:24:31:48:b9:02:d7:
80:3c:0a:99:19:06:0e:fd:a2:99:b6:b4:18:eb:d2:f6:5b:39:
52:a6:ec:e3:3c:c6:b1:36:b8:50:7a:d9:a1:1a:8b:6d:25:c4:
2d:c0:7b:67:a6:ef:9d:ec:99:9c:f2:1c:a2:ae:09:e9:b9:a3:
3d:0a:69:c0:0d:3b:5d:35:fc:70:24:b2:68:3c:1f:57:84:18:
17:d5:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:35 2024 by rpki-client on console-ams.rpki-client.org