Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AA03782976A11EFBE8A6C60762E951A.roa
File: 8AA03782976A11EFBE8A6C60762E951A.roa (raw, json)
Hash identifier: ydtOt2BvoSXv/UtIM77M7ucFQ2KdqSO+eQl+1iIwwsM=
Subject key identifier: A7:6A:49:ED:E9:A2:24:AC:FA:5F:A5:4F:F5:02:3C:DE:4C:19:57:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AA03782976A11EFBE8A6C60762E951A.roa
Signing time: Thu 31 Oct 2024 09:28:52 +0000
ROA not before: Thu 31 Oct 2024 09:28:48 +0000
ROA not after: Sat 21 Dec 2024 09:28:48 +0000
asID: 138915
IP address blocks: 156.229.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52004 (0xcb24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 09:28:48 2024 GMT
Not After : Dec 21 09:28:48 2024 GMT
Subject: CN=67234dd4-0b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:49:48:2b:af:b0:a5:a5:cd:c6:6a:45:34:
5f:2e:13:44:10:d9:a5:f2:00:84:6d:86:32:c1:5b:
2a:d2:0f:bf:79:ec:0f:7c:d4:c9:a9:5f:c0:bb:a6:
9a:73:30:a2:d5:33:eb:69:d9:9a:e7:f4:bb:c3:4c:
77:98:cf:29:3b:0d:fc:af:4c:46:16:ba:cd:f3:9b:
00:53:68:f1:ee:7c:3f:c1:a1:cd:86:ad:0d:d9:17:
5e:a8:b2:f8:f6:68:80:ea:ed:5d:f8:3e:e9:3b:54:
40:67:25:63:6c:45:d5:7d:56:92:fb:8e:25:39:ce:
10:55:c6:dd:dc:09:70:c6:0e:4f:f2:46:61:6c:18:
2f:9b:52:d3:1a:ae:93:4b:e4:a3:44:4c:16:fd:59:
d2:06:bf:61:25:b5:40:0c:da:56:23:62:8a:98:74:
51:03:78:05:06:86:6c:94:a3:51:d9:5e:09:37:16:
5b:10:36:1c:7f:84:3a:dd:4f:0d:2c:fc:72:a7:5a:
89:f2:6e:22:f2:68:c1:14:f5:f7:85:7f:80:3c:9e:
2d:cf:ef:8a:6c:ac:c3:13:ba:e9:cb:8f:fb:19:16:
8a:f1:7c:14:0e:b2:c2:ce:2a:2c:3b:73:49:92:c5:
1f:2c:06:15:d5:76:a2:af:b9:ce:46:75:fc:da:b8:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6A:49:ED:E9:A2:24:AC:FA:5F:A5:4F:F5:02:3C:DE:4C:19:57:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AA03782976A11EFBE8A6C60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:eb:da:61:cc:7c:33:8c:9a:80:c2:38:58:c3:aa:eb:14:ee:
ca:d2:f4:14:97:13:17:ab:07:4b:4e:ba:24:08:43:e7:82:b5:
72:1f:2a:81:56:29:8e:82:a3:46:fa:9c:fa:7b:c8:56:ee:d8:
38:04:c8:23:a8:3b:f5:d5:f9:d8:27:6f:c7:16:bb:91:e5:ea:
43:e4:76:b4:77:25:ad:fc:b0:14:c7:36:61:2b:4a:45:ee:d4:
88:ae:76:2f:f4:07:86:20:76:77:7d:a0:eb:65:37:83:e9:35:
1c:eb:b8:3a:b4:28:73:0b:f5:cb:cd:a8:dd:e1:33:c0:70:eb:
51:c8:f3:23:4d:23:61:0f:59:85:cd:8c:54:63:cd:2d:d0:98:
cd:5b:5f:1b:15:b2:5c:e4:47:07:c0:2c:c3:e4:de:b6:c8:67:
43:bb:ec:4e:d9:32:c1:00:a9:a8:15:d8:36:bc:df:f1:69:ba:
74:cf:fd:31:f7:bd:68:34:71:21:a4:1d:c5:8d:b2:b2:a4:c8:
13:e9:64:6a:7d:2b:fe:52:78:99:dd:82:52:44:76:a0:93:d1:
6e:9c:02:c4:e2:c4:2d:88:77:e1:0b:56:6a:31:4a:70:5c:6c:
36:83:96:f9:a3:82:4d:b7:c0:bb:b1:ba:8c:1c:98:1e:05:e6:
54:f1:39:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org