Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E8B18E2605511EF8F86B244762E951A.roa
File: 6E8B18E2605511EF8F86B244762E951A.roa (raw, json)
Hash identifier: z19uygfbVuXhZmBPybxCQl+fRv+eBYeYImA/ZmBGg/8=
Subject key identifier: C9:E1:17:B2:1D:6C:EE:9D:E6:AA:D8:E4:2B:85:CA:D7:C2:08:2E:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AC5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E8B18E2605511EF8F86B244762E951A.roa
Signing time: Thu 22 Aug 2024 07:09:11 +0000
ROA not before: Thu 22 Aug 2024 07:09:08 +0000
ROA not after: Fri 21 Feb 2025 07:09:08 +0000
asID: 24875
IP address blocks: 156.245.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44127 (0xac5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 22 07:09:08 2024 GMT
Not After : Feb 21 07:09:08 2025 GMT
Subject: CN=66c6e417-eac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:89:f9:a3:29:1f:c2:55:0e:bf:55:d1:f1:
b2:a4:0c:20:1f:8d:d3:9c:00:58:32:06:ff:23:24:
16:01:bb:02:63:58:e7:43:97:d3:eb:d0:07:90:f9:
45:fa:98:75:57:3c:42:dd:b1:6f:f4:d8:21:fc:38:
5a:e4:1e:ee:6b:6c:85:ae:eb:1a:c4:8b:a9:b5:b4:
19:7e:54:0a:bb:9d:39:6e:5e:60:d3:ad:83:49:e7:
d7:40:60:a5:02:fe:fc:ff:3d:80:19:94:11:45:d9:
78:2e:b5:5a:18:d0:0a:ab:2e:58:48:31:56:dd:0d:
b0:90:fe:00:fd:62:0b:69:8e:b6:54:6a:87:71:c4:
82:7e:e7:23:04:d6:c2:8d:6d:ad:29:7e:c6:19:5f:
10:09:34:1e:c6:51:77:76:97:a4:e9:45:cb:7a:6b:
38:81:9e:d8:be:a3:97:9c:73:fb:60:e3:f3:28:62:
7f:ff:d3:aa:08:8b:8f:65:32:57:2b:cf:68:c7:68:
57:d0:71:18:00:7f:c3:f5:02:68:b8:1b:2d:e6:6b:
68:ad:25:85:7b:b0:f8:a3:6b:30:50:b9:73:6d:75:
f5:12:13:b9:bd:f5:a8:a6:ea:84:b9:df:b5:62:cf:
c9:e0:4f:85:77:68:e1:1e:6e:35:f9:2d:3a:33:75:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E1:17:B2:1D:6C:EE:9D:E6:AA:D8:E4:2B:85:CA:D7:C2:08:2E:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E8B18E2605511EF8F86B244762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.8.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:48:51:b1:16:41:8b:d2:38:89:20:3c:37:0b:5b:91:b9:b0:
81:ef:62:d8:2e:40:ce:3c:6e:b5:07:5d:0b:16:7b:a1:b4:a8:
f2:c9:f2:36:11:44:de:0e:63:b7:d3:4c:47:40:53:ba:e5:30:
30:98:b4:02:e4:92:f9:58:d6:db:d8:46:62:73:75:f9:6f:d3:
d6:8b:1e:0c:d0:a2:09:21:ea:6a:88:8d:62:30:e5:4d:95:f8:
f0:7b:da:2b:5e:37:56:9a:f8:70:18:ea:04:a2:7d:03:69:fd:
80:80:ca:44:5e:a2:7b:c4:ea:72:f8:dd:13:f3:02:f3:2e:90:
2a:a8:14:26:d4:cb:8d:2c:f3:b6:a6:e4:ab:20:3e:f7:03:a7:
73:bd:9b:f8:d8:2f:0e:76:b5:42:ce:25:e2:a7:f5:27:44:7a:
8a:a7:58:d4:cd:ec:f5:b9:9f:2b:fe:4d:e5:0c:6a:39:2b:19:
7d:a0:a5:22:8f:48:14:54:64:c0:8f:d1:ac:fc:1b:17:17:73:
b6:0f:5a:47:f2:4e:a7:62:eb:03:e2:dc:ea:f2:a0:a4:61:73:
a0:c6:10:14:e7:43:b3:89:30:71:ad:02:ed:be:fd:f3:e8:48:
35:8e:20:b3:10:60:d4:7a:5c:2d:1d:23:23:76:1b:83:bb:c5:
5d:53:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:34 2024 by rpki-client on console-fra.rpki-client.org