Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7073AC565F1411EFAEE59481762E951A.roa
File: 7073AC565F1411EFAEE59481762E951A.roa (raw, json)
Hash identifier: D9R5qNyUXJc9CaTowrVi8mGITcxlNx/jXKydVrvu484=
Subject key identifier: D7:C2:20:18:FF:3D:D1:5E:0E:69:C4:3C:23:65:B8:D0:1B:70:82:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7073AC565F1411EFAEE59481762E951A.roa
Signing time: Tue 20 Aug 2024 16:51:26 +0000
ROA not before: Tue 20 Aug 2024 16:51:23 +0000
ROA not after: Sun 01 Dec 2024 16:51:23 +0000
asID: 5065
IP address blocks: 156.229.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43598 (0xaa4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 16:51:23 2024 GMT
Not After : Dec 1 16:51:23 2024 GMT
Subject: CN=66c4c98e-7d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:26:ce:43:a8:c4:87:e5:e6:e3:44:0d:8d:
e3:05:07:54:76:d8:65:c7:db:be:a7:00:fb:31:e9:
09:42:8d:3c:82:9a:76:cf:cc:8d:2b:85:24:37:d6:
1e:a2:a4:4c:8c:96:9c:0a:f3:fc:6b:84:b1:f9:4f:
f2:26:b4:d7:8d:41:65:28:49:f2:10:12:ef:e2:d7:
41:e2:35:85:48:12:1a:82:16:39:82:2c:88:1e:cc:
f0:5a:a9:b7:d7:41:3d:3f:93:45:43:2c:1a:4f:58:
6f:c0:6b:cd:aa:6f:16:17:5d:67:7f:62:23:21:6e:
24:f5:c8:ee:64:42:e5:d7:85:b0:6b:84:a1:c8:f4:
f0:bf:5d:bc:b3:63:a9:96:c1:84:bb:9d:fb:46:6d:
cf:1d:ec:18:59:27:a5:23:de:d5:1e:e1:92:48:85:
e3:48:a0:4a:f8:7c:be:3c:d8:13:d2:53:96:f0:e4:
4f:93:da:40:e9:2e:96:0d:08:17:49:3c:74:46:bc:
c0:ee:12:8b:f1:27:3b:f1:46:85:13:ec:34:fe:db:
79:0b:bc:04:aa:6e:53:86:63:8c:da:35:8c:df:cc:
0e:94:d5:38:ed:51:e0:1f:57:fe:6e:99:b3:e9:2a:
7e:b9:17:1d:6d:36:18:45:ee:29:0f:ea:18:ef:d1:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C2:20:18:FF:3D:D1:5E:0E:69:C4:3C:23:65:B8:D0:1B:70:82:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7073AC565F1411EFAEE59481762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.60.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:1e:f7:fa:3f:07:07:bf:e7:be:99:cc:2f:4c:4d:1b:64:66:
9f:50:4f:49:07:5f:e8:8f:b4:3e:d3:04:73:36:c8:b4:18:df:
4f:55:da:95:1b:b8:bc:6a:05:d5:2b:42:7f:00:00:69:53:88:
90:a6:b9:eb:e2:1b:be:24:04:1f:95:63:18:4d:d1:26:df:0d:
1b:e0:b8:62:96:15:48:3f:69:cc:1b:bd:be:f0:d6:b9:33:9e:
cd:fb:11:e4:29:32:6d:db:3f:f0:91:ce:49:0c:f1:5b:31:a0:
f0:c8:14:fb:25:9a:df:08:31:43:82:a4:4d:17:1c:8d:f8:d2:
d2:7b:c2:a4:35:79:92:ae:76:8d:b6:b2:6b:1c:7f:e6:66:15:
4b:6e:bc:10:49:76:fa:ca:f2:f9:28:b1:7c:bc:d7:62:3d:5c:
51:54:fe:f6:6e:17:c7:df:8f:46:5f:c3:9e:34:99:4b:9f:c0:
a5:66:f3:f1:9c:cd:a9:33:47:93:64:13:4f:8b:a0:91:2c:90:
be:2e:1c:a3:aa:09:27:54:ee:cc:94:f3:d9:b3:38:6b:72:22:
ce:90:cd:8a:b3:c9:05:4b:c6:07:ff:c8:77:e2:5d:74:0c:da:
89:75:c3:90:db:67:ab:6f:f6:2d:55:3c:c2:4d:bc:3f:11:4e:
b3:8b:dd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:34 2024 by rpki-client on console-fra.rpki-client.org