Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/884D196A5EF211EF8504C09C762E951A.roa
File: 884D196A5EF211EF8504C09C762E951A.roa (raw, json)
Hash identifier: 5FQRvlEfzwR1qb2Gd7u1TSimYhYrZxeO/WuCMlbDmYw=
Subject key identifier: 7D:28:0F:A4:FC:B9:65:1F:9F:91:54:93:7B:41:BE:99:AD:FE:10:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/884D196A5EF211EF8504C09C762E951A.roa
Signing time: Tue 20 Aug 2024 12:48:43 +0000
ROA not before: Tue 20 Aug 2024 12:48:40 +0000
ROA not after: Tue 27 May 2025 12:48:40 +0000
asID: 399077
IP address blocks: 156.251.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43508 (0xa9f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:48:40 2024 GMT
Not After : May 27 12:48:40 2025 GMT
Subject: CN=66c490ab-0269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:71:34:be:79:68:71:49:f5:b6:16:f6:67:
cb:b7:a3:58:f9:71:bf:be:54:c4:57:13:7b:97:29:
6e:e7:98:55:bb:e3:76:12:b4:74:f2:c2:bb:71:12:
fa:9a:90:87:b9:cd:b3:f0:35:59:83:05:0f:e9:8a:
8d:eb:61:b1:05:bb:d4:c5:b3:48:be:19:f1:11:40:
d7:80:43:49:12:f6:7a:c4:4f:3b:a4:51:bc:f8:29:
8a:73:9d:b0:70:78:3a:b8:07:83:d9:1f:34:7d:bb:
9d:48:96:c1:21:1b:24:79:a2:8a:84:fc:94:f2:28:
f3:ab:12:45:c3:84:dc:fc:7e:e2:c7:8c:6d:42:0e:
ff:8e:68:06:47:0a:f6:b1:18:06:84:78:cb:15:a6:
0d:3e:16:30:03:15:35:1a:81:e8:8c:c1:cc:af:ca:
28:fd:85:bc:53:c3:a4:ce:27:0b:b4:01:b7:93:ae:
b2:71:b4:34:0a:98:a3:eb:4e:e4:c5:b7:c6:06:81:
68:69:c3:d0:f4:f1:a5:9d:32:35:b3:9b:63:06:71:
3e:9c:5c:91:ee:47:05:92:31:d6:00:01:dc:77:ff:
dd:e5:6c:69:fd:d1:0d:48:7f:ae:ba:0e:67:d7:fe:
0b:d2:44:92:57:59:d9:43:94:7a:64:8e:94:e6:62:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:28:0F:A4:FC:B9:65:1F:9F:91:54:93:7B:41:BE:99:AD:FE:10:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/884D196A5EF211EF8504C09C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:19:fa:dd:8a:f3:f7:b0:d9:1d:16:a7:31:17:07:e4:a1:2c:
20:aa:52:26:ef:e8:2b:35:13:cd:04:34:72:e1:da:17:41:ef:
de:c2:d0:51:b8:82:b6:87:a9:a4:21:02:ba:2c:26:1d:f4:e6:
ba:c6:eb:68:60:37:15:e8:08:a8:fa:b8:34:a7:a5:6f:e0:50:
d3:ef:6f:8c:cb:6c:30:77:62:b1:38:9c:c4:cb:bc:33:f0:5b:
44:33:d8:6c:d3:8c:ed:ac:f8:56:9a:ff:3d:84:28:42:04:65:
ee:35:1b:4a:39:df:c5:8f:bf:94:df:79:54:9e:5c:fb:c3:62:
8a:d9:32:b8:06:d9:89:5e:72:7a:5e:8d:62:33:8a:29:3f:8c:
64:95:36:22:ba:db:91:c6:c9:70:cc:ec:9e:fb:3e:92:86:69:
8d:79:d0:88:4d:d7:23:87:69:11:32:e3:ea:53:31:3c:74:ba:
7f:17:a1:19:63:36:cb:a5:1c:a3:1b:19:53:a9:79:59:91:58:
a4:75:ac:d9:5e:50:4a:34:05:bc:df:63:f8:1b:b0:31:58:80:
57:4d:39:03:d5:cc:bd:05:ee:88:e4:bf:a7:8a:41:90:be:98:
cb:ba:76:1b:e5:31:d9:57:8e:30:68:0b:c9:88:c2:96:c1:1a:
8b:cb:da:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org