Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/857FB3185DCC11EFBCAFD87E762E951A.roa
File: 857FB3185DCC11EFBCAFD87E762E951A.roa (raw, json)
Hash identifier: 9libt5Qz3EceLqHN2suhB3wYOc5T3KL8g754PbG6SQY=
Subject key identifier: D7:CE:3C:34:BE:5F:91:41:14:A8:4B:88:1A:DE:80:E0:3C:42:21:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A85B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/857FB3185DCC11EFBCAFD87E762E951A.roa
Signing time: Mon 19 Aug 2024 01:44:07 +0000
ROA not before: Mon 19 Aug 2024 01:44:03 +0000
ROA not after: Thu 31 Dec 2026 01:44:03 +0000
asID: 17561
IP address blocks: 156.227.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43099 (0xa85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 01:44:03 2024 GMT
Not After : Dec 31 01:44:03 2026 GMT
Subject: CN=66c2a367-91de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:67:c6:f4:eb:8f:d3:33:c0:3c:a8:67:14:
e0:7d:9b:7f:d9:61:e9:e8:e9:d0:75:8b:c7:5a:5c:
25:e2:5b:ce:1c:87:c5:d4:10:75:2f:ef:73:e3:41:
9e:5f:bb:06:3e:25:61:53:c0:ba:d7:20:3b:34:50:
3a:d5:0a:7d:f1:f4:16:c4:5e:d0:95:c0:3d:4d:08:
f8:e0:36:9e:f8:a5:9b:13:ed:fb:79:fe:4f:35:da:
e8:0b:ed:a1:fc:e1:6f:f5:52:20:fd:29:ee:c8:9f:
63:05:51:62:33:20:56:fa:05:21:34:42:d6:55:2e:
08:93:8a:ee:7e:46:22:58:45:b9:96:ce:da:5e:3f:
0e:1f:52:aa:a4:f8:49:46:89:c0:2b:77:8a:f0:3f:
de:bd:6b:44:86:f4:e4:fe:3b:8a:32:6b:2a:12:02:
b4:ef:3e:b9:a7:73:a1:ca:3d:59:d3:6d:cd:33:87:
04:a4:e7:34:b4:f1:70:e9:7e:28:b7:54:ba:49:10:
04:10:68:81:ea:6d:a7:65:f2:4b:bb:2e:70:96:dc:
a2:76:c7:85:d6:ab:4c:da:cd:51:40:6e:64:bf:13:
fb:2e:16:c9:b2:e9:e6:7e:52:d2:cb:a0:6d:94:d7:
33:07:2d:f2:ba:36:17:bd:51:fb:d3:99:ea:f6:58:
12:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CE:3C:34:BE:5F:91:41:14:A8:4B:88:1A:DE:80:E0:3C:42:21:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/857FB3185DCC11EFBCAFD87E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.130.0/24
Signature Algorithm: sha256WithRSAEncryption
28:8c:16:01:92:0a:3e:0d:f9:2a:f3:a3:a0:27:92:be:e3:fa:
1b:53:76:61:79:52:b5:45:c0:f1:f2:cd:e1:41:51:da:33:76:
25:20:20:4e:f5:00:f4:fc:d6:5e:fe:4e:2d:ed:4f:1f:cf:37:
68:60:e5:d4:4e:52:64:df:dc:35:f7:67:1a:fd:7e:ee:1f:b5:
20:7b:cc:c9:5b:2f:9a:0f:a2:5b:70:38:99:e5:f7:73:10:49:
02:f4:85:ea:59:a0:30:a2:47:2b:ae:7b:74:4f:ef:13:54:b7:
d0:4f:78:b0:c5:b3:8f:39:3e:8f:fe:b6:4f:47:f8:90:14:5b:
6c:06:41:aa:47:63:95:05:46:01:17:d7:16:f6:c2:5d:74:bf:
d2:70:e6:fa:a9:de:ab:7b:60:f8:18:0b:dd:30:90:2d:4d:7c:
d4:2a:78:58:d9:fc:ee:a2:1a:e9:56:a8:af:7d:4a:03:08:62:
b0:b1:ee:55:13:d5:32:75:c5:f1:55:94:c2:9e:59:56:4e:18:
65:bc:e5:b5:7f:70:37:9d:fb:d9:a2:7d:cc:f6:6a:9b:d1:68:
47:bd:88:de:55:0d:70:2d:6e:a4:46:71:51:d7:43:3c:d8:55:
34:0b:2b:c3:26:c6:6c:04:ee:50:b7:07:6c:b9:27:51:d9:26:
a3:05:5c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:38 2024 by rpki-client on console-ams.rpki-client.org