Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0521225AD611EF8D610E94762E951A.roa
File: 9F0521225AD611EF8D610E94762E951A.roa (raw, json)
Hash identifier: mttab+Exkxan24u7VnJvf33VSXhNio8vuqRZQ2ROUsU=
Subject key identifier: 52:14:76:1C:1B:47:88:E1:A5:CB:B2:43:CC:B4:C5:CD:C1:EB:B3:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A799
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0521225AD611EF8D610E94762E951A.roa
Signing time: Thu 15 Aug 2024 07:18:51 +0000
ROA not before: Thu 15 Aug 2024 07:18:48 +0000
ROA not after: Sat 09 Aug 2025 07:18:48 +0000
asID: 3491
IP address blocks: 156.230.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42905 (0xa799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 07:18:48 2024 GMT
Not After : Aug 9 07:18:48 2025 GMT
Subject: CN=66bdabdb-6f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:d0:c7:11:52:96:a4:57:96:82:9c:e8:47:
4e:e2:7b:e4:c8:b0:56:5a:58:85:e7:44:69:51:83:
45:e4:52:bb:4a:0b:09:3d:fe:e7:74:ed:12:0c:47:
75:2a:d3:e7:7c:33:64:4c:0e:e7:66:7d:82:d5:ce:
d4:73:ef:6c:2a:fe:0a:a5:d6:54:a4:c6:7e:3b:9e:
8f:a6:0d:b3:d0:84:3d:aa:d7:67:61:56:26:b1:75:
cd:9a:19:d7:22:b9:d8:bc:30:e2:25:ac:4a:b0:49:
8b:07:90:1f:b1:39:ef:fa:01:28:b1:0d:be:6c:78:
7c:53:72:a9:10:22:65:42:f5:fd:4e:36:78:48:5d:
6d:2b:de:ba:49:42:49:1f:1c:8f:67:f6:92:7b:f6:
91:df:74:7a:99:92:3e:9d:e9:a9:3a:7d:8e:fc:ef:
fc:76:81:a5:07:83:f6:62:e8:d7:45:e2:83:8c:e1:
66:fb:cb:ad:c4:9c:52:61:f6:29:3d:85:73:c0:75:
85:48:43:9c:cb:d6:6e:d8:17:27:04:76:2d:96:f2:
62:4b:df:68:95:bc:72:a8:7d:22:cf:ca:ca:bc:85:
9f:68:24:be:8f:2e:74:60:94:4a:4a:99:a2:80:10:
26:73:2b:d2:ba:af:98:16:3f:9f:97:99:92:44:1d:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:14:76:1C:1B:47:88:E1:A5:CB:B2:43:CC:B4:C5:CD:C1:EB:B3:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F0521225AD611EF8D610E94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.4.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:51:b4:fe:31:a6:24:72:30:4b:25:1b:b7:aa:28:5f:f1:26:
d0:57:b9:d8:f5:05:e4:12:7b:06:60:85:97:09:6e:ab:3d:08:
79:ad:31:7c:97:e3:dd:87:a8:2f:a2:bf:9e:d3:d4:e7:8c:27:
43:02:d8:65:56:93:82:f7:be:11:a4:08:a8:41:3e:af:b9:14:
5c:e2:56:e5:ec:ba:f1:c9:9a:4e:15:ca:ec:72:23:1e:da:22:
ee:54:88:d3:a8:e7:ec:b9:a4:16:ac:3f:09:08:d3:8c:01:5c:
d2:54:4f:ef:99:24:83:a4:ed:c5:dc:1c:4d:03:68:7f:76:5a:
dc:c4:6f:cd:c8:78:29:58:c3:01:24:73:87:52:e0:15:2c:ea:
e1:44:a7:ec:59:5a:83:3a:46:75:d0:e8:c5:85:8c:34:4b:9e:
95:3c:c2:6f:78:e5:a1:18:f4:4f:2f:0f:c9:87:37:0c:59:43:
ff:2b:9f:4f:26:ee:92:06:b6:1d:cd:01:1a:12:1a:27:f2:3b:
c1:8d:bf:0b:c8:e3:33:f0:2e:7c:9d:ac:46:3a:e3:0f:da:ec:
e0:17:f5:e2:7f:dd:e6:99:ca:13:61:8b:e2:3f:67:22:7d:69:
ab:66:77:63:09:1e:d6:41:f4:10:3f:b7:73:d5:30:ae:6c:a4:
a0:50:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org