Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7429BD605DCD11EF9426FB84762E951A.roa
File: 7429BD605DCD11EF9426FB84762E951A.roa (raw, json)
Hash identifier: cSEW3Ck20I3n0yRD2m5cpHfZCHR5z6pnYWXcg83RiX0=
Subject key identifier: 71:F5:06:83:FF:E9:8F:3C:CC:95:CF:AE:56:E3:0F:97:D4:E6:8E:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A863
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7429BD605DCD11EF9426FB84762E951A.roa
Signing time: Mon 19 Aug 2024 01:50:47 +0000
ROA not before: Mon 19 Aug 2024 01:50:44 +0000
ROA not after: Thu 31 Dec 2026 01:50:44 +0000
asID: 17561
IP address blocks: 156.245.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43107 (0xa863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 01:50:44 2024 GMT
Not After : Dec 31 01:50:44 2026 GMT
Subject: CN=66c2a4f7-5c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6b:d7:97:9f:9b:e7:61:6e:c3:f1:aa:ff:a3:
fa:7b:b6:17:b3:33:65:43:78:00:d3:e2:33:16:f9:
a1:8e:b5:eb:6f:8a:66:73:53:98:f1:98:11:55:a4:
98:be:ee:63:e3:2f:a2:8b:5f:5c:80:0f:57:68:de:
f0:50:c3:af:68:e1:71:4c:b1:5c:4f:a9:49:b2:48:
bf:f8:e8:ca:6e:3f:75:7f:bd:0c:b5:3d:87:8d:78:
b1:a0:fa:70:79:70:7e:fb:1a:a3:b4:d2:b6:35:72:
81:9d:cc:72:b7:d9:0f:0b:e0:d1:eb:f8:b7:e8:ad:
33:db:7d:df:b0:6f:be:1a:5d:2f:81:e8:40:ef:20:
46:98:0d:99:d9:91:ba:88:86:b9:39:db:3c:45:db:
1e:54:e0:3f:30:02:01:eb:c1:3c:56:32:3f:2b:ad:
50:ca:37:29:06:48:d1:63:a0:ab:f5:27:ca:1f:76:
62:18:05:97:9d:41:b6:96:d0:2b:44:f1:7b:11:06:
d0:22:db:b2:f8:3a:f1:d9:ca:71:7b:bb:52:cd:a0:
77:80:d8:57:45:03:8c:8a:6b:50:d5:96:b1:30:f6:
d8:18:da:9b:54:97:f1:0d:39:a1:d8:82:26:d5:e9:
5f:16:40:a8:2b:f9:c3:83:8d:aa:17:c1:71:51:2c:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F5:06:83:FF:E9:8F:3C:CC:95:CF:AE:56:E3:0F:97:D4:E6:8E:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7429BD605DCD11EF9426FB84762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1d:d4:d4:94:55:d9:19:bd:44:6e:9b:c1:dd:b7:f1:c2:07:
03:87:2b:16:98:89:de:d1:05:77:87:cb:8c:72:e5:e8:ba:1c:
da:35:04:3c:07:4c:3b:d6:08:ed:de:be:2e:c5:f2:44:61:98:
51:d3:83:a6:79:91:cf:58:71:4c:cb:5f:b1:99:1d:39:c8:26:
10:9c:aa:c2:4c:23:4e:6b:f3:43:b3:d6:29:f4:f4:b1:a9:fa:
75:40:b6:66:fe:9f:fb:1c:5b:4a:1a:c8:75:39:58:c1:ad:d9:
e9:5b:a2:10:29:df:a6:e7:3d:16:f1:25:37:71:a5:36:48:d2:
79:94:48:d0:bc:f6:5c:02:e6:c8:13:78:aa:09:39:1f:b4:48:
76:0a:a9:84:62:f9:16:01:eb:23:ad:a6:2c:82:7f:9c:b6:8a:
2d:29:41:7f:54:e7:bf:38:33:11:81:2f:80:d9:91:17:61:69:
93:b5:11:72:ea:e3:ed:84:69:0c:61:48:ab:1b:12:61:1b:9c:
be:f0:b3:44:20:81:f7:ce:c5:70:4a:29:46:6e:4e:e8:2c:c3:
17:d3:ba:a0:12:0d:c7:2c:4a:8b:43:05:bf:f6:59:c6:a7:c0:
55:22:71:2b:2f:a4:57:6b:7f:91:ce:fb:8c:59:35:d4:8f:7f:
61:f9:f2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:36 2024 by rpki-client on console-ams.rpki-client.org