Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BB77EFC660311EF87CA0766762E951A.roa
File: 8BB77EFC660311EF87CA0766762E951A.roa (raw, json)
Hash identifier: KwwcVnxXtkM8KFAQRXenjrG2NHQbGnf574WfDg8uimA=
Subject key identifier: 96:9E:B5:1F:9B:E3:7F:F5:EC:6A:FD:58:1F:9A:34:95:19:76:5D:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AF04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BB77EFC660311EF87CA0766762E951A.roa
Signing time: Thu 29 Aug 2024 12:38:09 +0000
ROA not before: Thu 29 Aug 2024 12:38:04 +0000
ROA not after: Tue 03 Dec 2024 12:38:04 +0000
asID: 135377
IP address blocks: 156.229.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44804 (0xaf04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 29 12:38:04 2024 GMT
Not After : Dec 3 12:38:04 2024 GMT
Subject: CN=66d06bb1-d054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:f2:9f:9b:ea:11:6e:c7:7a:6d:93:51:f4:
6e:38:06:c5:b1:bb:c9:60:a3:06:05:78:6d:73:90:
4b:47:da:ac:21:9f:63:bf:62:30:f5:31:3e:d2:08:
12:41:7b:3b:58:10:87:69:70:d8:d3:42:d1:70:9d:
87:7e:94:10:18:4f:67:69:6f:39:58:f8:f9:93:00:
f5:47:d5:c4:15:eb:cc:65:f0:17:79:a5:64:9d:59:
bd:ef:1a:83:6f:39:48:5a:4c:90:c0:f7:1e:5d:db:
e4:9a:97:fe:67:78:29:42:83:53:8d:51:61:90:cc:
31:30:ad:78:6f:39:21:8d:db:e4:2d:3e:c2:25:cc:
72:53:01:f9:5d:43:6e:71:47:c3:2c:0c:bf:06:43:
df:0f:9c:aa:9c:2c:fe:34:9f:64:16:78:f0:f3:0d:
83:aa:6d:1a:c7:fa:65:38:25:e8:4b:03:15:c5:70:
e3:9b:20:2e:9e:bd:d7:cf:88:2d:86:25:fd:b1:d4:
74:ef:3a:aa:92:f4:98:16:29:80:a6:c0:1e:dc:5e:
25:30:d6:d2:75:9f:2c:d0:73:bf:73:44:fb:2b:26:
f8:19:c1:d3:2f:80:b1:ae:81:e8:4b:6e:c5:7a:39:
60:82:38:38:02:e2:9c:16:f2:a9:81:d6:5c:1e:88:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9E:B5:1F:9B:E3:7F:F5:EC:6A:FD:58:1F:9A:34:95:19:76:5D:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BB77EFC660311EF87CA0766762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.18.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:31:20:4d:1c:8a:71:ec:26:3c:c6:53:32:db:20:c4:9f:93:
1e:27:46:47:f8:26:9b:e5:95:9e:38:f4:8c:e1:99:c8:5b:7b:
5a:30:da:98:e8:34:43:5e:6b:fe:c3:4b:66:f1:32:6b:d7:3d:
43:d4:d1:96:82:70:a4:c9:29:94:01:f8:03:7c:07:93:e8:09:
1c:15:5a:7e:f3:82:2a:f8:81:06:3a:1a:32:c9:2b:12:18:e4:
e2:a6:4c:0c:a5:0f:46:4e:a4:a5:4f:9d:77:33:96:2a:8c:cf:
1b:e5:7d:6a:f9:de:31:49:27:57:00:09:dd:04:df:bb:28:94:
fa:9c:e1:e0:67:5f:e8:23:4f:64:b2:f1:0c:e4:9f:c5:53:f1:
f7:91:20:09:e9:98:8b:47:90:4a:bc:ed:24:59:97:9d:f6:74:
db:2b:60:ef:95:bb:84:3c:e3:54:d1:63:c1:b2:f2:48:f2:84:
82:9d:d1:f8:51:5d:c7:43:40:bd:d2:c9:95:6c:4f:cb:16:dd:
f2:61:0a:47:fb:06:e6:b3:1b:a1:b3:cc:44:05:f5:77:77:58:
b2:49:5d:47:38:a3:87:26:f3:d2:22:d2:cb:c3:b2:d8:34:49:
37:2c:c2:8f:ce:3f:1f:7b:89:ff:a1:9b:73:95:6f:3b:8d:43:
c2:20:b7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:39 2024 by rpki-client on console-ams.rpki-client.org