Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/841FDE5274D411EF9E139374762E951A.roa
File: 841FDE5274D411EF9E139374762E951A.roa (raw, json)
Hash identifier: w0A4IeyXIcPk9Wv2y/uAUtMRaFMtCzg7VC0kNCzCpsE=
Subject key identifier: D6:4B:78:81:A1:A6:EB:C8:2E:8E:19:DC:55:39:E0:C7:27:BC:E8:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B7C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/841FDE5274D411EF9E139374762E951A.roa
Signing time: Tue 17 Sep 2024 09:09:17 +0000
ROA not before: Tue 17 Sep 2024 09:09:14 +0000
ROA not after: Fri 20 Dec 2024 09:09:14 +0000
asID: 4766
IP address blocks: 156.227.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47042 (0xb7c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 09:09:14 2024 GMT
Not After : Dec 20 09:09:14 2024 GMT
Subject: CN=66e9473d-df1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:e0:b2:05:db:0b:93:91:55:d9:f2:35:dc:
0a:1a:64:3b:98:ec:7f:80:2a:40:22:ee:b3:c5:85:
b5:18:20:fc:6c:53:8a:a8:0d:ae:fe:95:46:50:66:
9c:f3:5a:8f:4c:a9:a0:33:47:e9:f6:a5:7b:68:d5:
22:0b:c8:46:8d:8d:a8:9c:be:01:d6:28:f6:61:06:
9c:95:8c:66:f2:c2:5d:23:ec:5f:a2:77:06:f0:7f:
23:a0:f9:b7:ce:af:10:6a:0f:8f:d6:b3:6a:e5:cd:
48:8d:f1:f8:77:94:74:80:a8:33:41:9c:6a:b2:64:
53:d1:5f:33:b5:c1:c5:8e:a4:46:f6:ed:8f:e2:d6:
72:50:51:9d:c8:42:0b:7c:bd:fe:b6:9c:2e:02:f2:
fb:42:6a:fa:f3:82:72:ef:5b:17:ba:87:d0:42:23:
58:48:c6:aa:7f:8e:02:51:e2:c2:fe:67:50:03:6a:
a4:4b:e7:cc:96:79:9b:47:63:31:a2:07:23:2e:18:
73:7f:2e:c5:24:f1:67:b9:db:40:6b:77:30:cb:54:
b3:ac:6c:d1:d2:b2:5a:f5:1b:89:ef:eb:27:42:4a:
c2:47:bd:61:5c:6d:16:3e:e7:f2:17:f4:22:8e:99:
bf:aa:c5:be:6b:89:f4:5b:ab:7d:e3:1f:12:f0:a1:
94:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4B:78:81:A1:A6:EB:C8:2E:8E:19:DC:55:39:E0:C7:27:BC:E8:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/841FDE5274D411EF9E139374762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.13.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d6:96:2e:f1:46:18:5a:ed:0c:68:c1:d8:63:55:9d:8f:e2:
77:df:66:27:be:07:b7:a0:80:cf:d1:e1:5b:fc:f8:ee:36:3c:
c0:0b:0b:ca:d3:00:5d:66:38:46:68:44:cc:f8:eb:9b:64:8b:
5b:ad:e0:65:23:36:5b:39:ff:1a:c7:f1:e1:70:a7:60:a3:7e:
6c:9e:b1:f7:34:dd:e1:dd:34:11:45:97:c4:79:8c:94:f7:51:
0b:f6:bc:d1:a9:fd:9a:3d:35:22:8e:c0:e0:a6:00:d9:03:fe:
0b:5f:4e:2a:66:f6:81:12:2f:84:b1:90:22:77:49:ed:41:11:
f9:70:ad:ae:a1:0a:ac:4d:14:c1:0b:7d:cb:f2:0a:ec:47:a2:
96:4a:c0:0c:bf:db:df:bc:d6:2b:ee:84:06:78:6e:35:35:23:
11:aa:d4:ce:15:4a:54:40:b7:23:95:b7:73:ea:30:5e:bc:8a:
fc:63:64:8b:c4:21:b8:9a:2c:ed:91:59:63:52:70:57:4c:91:
45:29:af:a4:fa:d2:11:31:90:aa:df:2d:b0:4b:52:f5:1e:d9:
be:b4:82:c0:05:8a:61:73:60:d0:94:de:5c:4e:6b:d5:86:9a:
f8:59:6c:d8:0f:15:ff:4a:7c:e5:0f:89:5c:38:b9:ff:42:7a:
37:92:fd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:38 2024 by rpki-client on console-ams.rpki-client.org