Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8838231A977E11EF9C9D175C762E951A.roa
File: 8838231A977E11EF9C9D175C762E951A.roa (raw, json)
Hash identifier: uT1r/TsB/vJBWwpvoIuaEdxfQmY9Jy/3XLzM4aanP4M=
Subject key identifier: 7D:51:60:35:AC:8A:F3:13:7C:3E:93:7B:BB:43:1A:B7:CA:BE:06:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8838231A977E11EF9C9D175C762E951A.roa
Signing time: Thu 31 Oct 2024 11:51:58 +0000
ROA not before: Thu 31 Oct 2024 11:51:54 +0000
ROA not after: Sat 21 Dec 2024 11:51:54 +0000
asID: 63139
IP address blocks: 156.229.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52040 (0xcb48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 11:51:54 2024 GMT
Not After : Dec 21 11:51:54 2024 GMT
Subject: CN=67236f5e-fd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:f5:20:fb:47:2a:bb:9e:9d:82:fa:bb:74:
c0:50:de:b0:36:0c:5b:87:52:26:4f:c7:ef:56:36:
a0:76:06:5d:20:47:78:a0:84:3b:dd:fe:f9:85:d3:
ae:3c:f4:32:0a:26:41:82:08:b2:f2:f2:98:55:1a:
83:2d:48:c7:5b:0b:a1:ac:21:12:16:e2:81:2f:b8:
62:2b:ee:cc:2c:63:7a:af:9b:ff:ec:21:b8:07:0a:
5b:54:0e:23:c5:c4:50:b7:af:8f:36:4f:17:b9:bc:
b6:ec:ce:ad:e9:a2:ad:75:fb:b6:90:5c:af:7f:cc:
34:d7:38:47:8b:43:9b:85:8a:19:d7:5e:ae:d1:40:
31:bd:11:88:be:ae:d5:a5:ab:4b:f7:00:6d:e1:6e:
86:5b:a6:46:eb:12:34:e9:d6:91:0a:6e:a9:a8:c0:
73:29:83:0a:22:b8:14:de:ba:98:3e:01:1d:c0:7b:
20:a8:50:de:f3:a6:eb:55:09:16:0b:e4:f2:0a:b6:
6a:a1:bf:83:1c:3d:9c:1d:3a:00:36:5c:bc:02:a7:
fc:a4:ba:58:d6:88:3e:71:c9:d3:e3:83:85:fe:cd:
3a:59:eb:aa:f3:cc:35:5e:b0:06:7b:6e:77:aa:59:
ab:3c:de:2f:56:d1:c9:9d:75:e9:4d:6e:02:3d:2b:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:51:60:35:AC:8A:F3:13:7C:3E:93:7B:BB:43:1A:B7:CA:BE:06:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8838231A977E11EF9C9D175C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.49.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9e:1d:db:07:b2:fb:59:67:01:57:b3:33:f9:69:d5:f0:58:
fc:bb:68:fe:a2:e0:0b:70:9a:35:04:a6:32:af:61:fa:9d:5e:
dc:02:a4:d4:73:d5:00:f3:1e:06:fc:88:69:79:48:a5:09:da:
d9:9d:4b:13:f4:18:cd:d3:1d:d6:5e:17:1e:c1:89:99:96:bd:
f1:b1:91:da:e3:97:a1:c5:6e:de:0f:cf:4b:b4:44:2d:87:69:
2e:01:e7:7c:18:e8:75:ba:c3:d8:b8:aa:54:da:5a:37:d8:86:
42:95:e2:1a:2e:fa:98:01:ca:7a:44:3f:56:9e:15:20:b2:a6:
3d:e4:f9:0c:6a:32:2f:26:4b:50:3b:97:76:79:ed:c4:21:3e:
b9:8c:5b:55:03:cc:dd:79:0c:ce:0d:72:81:ea:07:6f:46:2e:
84:5c:8a:95:30:c4:7e:41:37:f2:74:14:4e:3f:79:7a:3b:15:
4c:8b:3b:93:fc:0d:07:fe:ec:2b:85:66:e0:85:8f:42:7e:da:
28:ed:b4:f8:15:96:df:b3:a4:f5:3d:e3:6b:fb:2a:0e:49:a9:
90:e4:1f:4e:08:0a:93:a3:b8:cb:eb:0b:34:90:26:8c:03:35:
4b:80:2d:fa:27:99:2c:e8:50:fc:b5:c6:d1:5f:af:9f:4d:3b:
11:b3:75:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org