Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92887E705EF111EF9BA13193762E951A.roa
File: 92887E705EF111EF9BA13193762E951A.roa (raw, json)
Hash identifier: 5uhn/KNXHlxN6ziUncOk68XQka41QHK0w7/eZJ6Bfuw=
Subject key identifier: 94:1D:DC:1D:E3:35:C0:83:BD:88:66:DA:7C:76:A1:2A:34:96:13:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92887E705EF111EF9BA13193762E951A.roa
Signing time: Tue 20 Aug 2024 12:41:51 +0000
ROA not before: Tue 20 Aug 2024 12:41:47 +0000
ROA not after: Tue 27 May 2025 12:41:47 +0000
asID: 399077
IP address blocks: 156.251.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43494 (0xa9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:41:47 2024 GMT
Not After : May 27 12:41:47 2025 GMT
Subject: CN=66c48f0f-bd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:d4:4c:8a:2f:6c:d5:81:36:62:1b:a0:7c:
75:ff:00:69:42:45:27:22:3c:55:e1:8a:a2:50:da:
b4:55:e2:26:7f:7e:2b:28:66:dd:8c:e6:c8:58:a8:
27:10:19:21:75:b6:85:3c:d6:31:9e:24:7b:3c:4b:
1e:f8:d0:6e:47:34:12:bc:1f:f1:6b:90:66:ee:a3:
af:83:dc:a3:8e:27:a4:ba:f2:9e:38:19:a9:11:75:
86:ab:b4:a6:eb:83:68:b6:b6:1a:a1:ad:62:b0:8d:
f2:de:6d:78:b7:0a:e9:62:68:31:61:b3:0f:70:a6:
8c:1a:38:e9:d0:96:2f:12:0e:f7:b4:6d:9f:9b:ad:
6f:0f:f9:fe:c3:d6:62:73:39:d4:1a:5b:69:9f:a7:
64:b6:9c:b9:8c:c3:ab:c7:4f:bc:43:42:2e:6e:3b:
9b:82:8e:cd:5f:1a:2a:f0:14:14:35:b6:f6:b7:55:
e8:85:d0:04:21:33:4b:c7:c1:06:1f:1b:6d:62:df:
3a:f9:4f:5d:eb:16:a4:0d:26:d4:94:aa:b7:ad:59:
7f:e7:78:54:9e:1b:02:21:26:64:90:51:ee:c9:28:
84:88:69:95:82:d8:37:65:20:3e:8c:b1:06:0d:cd:
d2:73:68:e5:7a:d2:54:96:b3:1d:55:6d:d4:eb:d3:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:DC:1D:E3:35:C0:83:BD:88:66:DA:7C:76:A1:2A:34:96:13:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92887E705EF111EF9BA13193762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:36:29:3e:90:d7:4d:6b:20:f0:19:6c:d7:43:3e:98:f6:0d:
93:4a:1c:a9:02:5b:a6:b3:8f:a5:cc:f8:91:b5:c1:ac:e3:3b:
3f:10:ae:ba:89:26:82:e8:42:ad:02:ec:8c:36:95:fc:70:2a:
e0:70:df:9f:d0:c6:07:e9:48:95:51:eb:9c:32:73:17:4c:19:
7f:4c:9a:07:2f:a3:f4:1a:1d:d8:d6:b1:8c:99:4b:81:36:86:
e8:3d:d4:7a:0b:c7:35:56:d2:9e:9b:3c:15:bb:62:b7:76:88:
df:71:f9:a1:20:9d:ba:86:eb:07:df:25:3f:3b:ee:92:8d:92:
aa:11:8e:69:04:cf:97:4d:4a:0f:c0:3a:0c:8b:83:ce:00:e9:
4d:ef:dd:7e:64:47:d6:77:c9:9b:a4:23:b1:53:a5:31:31:8f:
3d:b8:5c:72:cb:14:50:d5:c6:9f:14:1f:48:94:83:f5:b0:5f:
7c:07:fe:7f:e4:1b:b4:58:77:c4:60:f7:bf:7e:38:a8:27:cb:
ce:71:5f:a5:af:11:28:83:f4:ef:08:5a:03:1c:1c:4f:7b:eb:
27:51:45:0a:5e:55:9d:48:23:46:71:3f:43:26:93:2c:32:7d:
05:b8:e6:3d:89:98:cc:e3:5a:fb:f3:e2:6f:9c:93:74:81:a1:
18:91:f7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:40 2024 by rpki-client on console-ams.rpki-client.org