Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1C1EE3C5EF411EF867DC4AA762E951A.roa
File: A1C1EE3C5EF411EF867DC4AA762E951A.roa (raw, json)
Hash identifier: R7pctnQ7bDnZOBYjlgdMl+d2jKSo1gXsXSgSroKfxzo=
Subject key identifier: 40:23:30:40:A4:B0:F8:FB:8D:4E:54:55:42:AE:1A:D6:CA:3F:93:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1C1EE3C5EF411EF867DC4AA762E951A.roa
Signing time: Tue 20 Aug 2024 13:03:45 +0000
ROA not before: Tue 20 Aug 2024 13:03:42 +0000
ROA not after: Tue 27 May 2025 13:03:42 +0000
asID: 399077
IP address blocks: 156.251.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43536 (0xaa10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 13:03:42 2024 GMT
Not After : May 27 13:03:42 2025 GMT
Subject: CN=66c49431-6d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:98:fe:8b:91:d8:9a:53:a0:f5:09:0d:71:
52:3d:b0:85:7d:29:91:6a:fa:ac:75:a7:2e:9f:30:
a2:97:fa:69:81:5f:91:af:f5:26:00:e6:e3:85:a6:
0d:0c:48:d5:d9:33:5f:03:e4:09:37:91:c8:2b:fc:
54:54:d5:b5:b8:1d:4c:ca:5e:2a:a2:29:b9:6b:52:
60:d6:7b:9c:72:26:2e:f1:cb:2f:44:7d:b7:c3:5a:
dc:18:b3:86:c4:61:16:84:09:44:67:4f:bf:fa:f2:
22:fb:4a:20:d1:05:d7:b4:15:f0:dc:1f:04:fb:8f:
d1:c9:85:29:3d:bd:c1:2e:77:43:9c:e9:89:36:17:
ac:d0:c8:bd:2b:e6:8e:70:c7:bd:7b:94:7b:e5:1d:
62:30:b5:30:36:15:1f:f3:68:04:08:c5:62:b3:51:
98:d8:ce:03:0b:03:a4:d8:0b:43:a4:a4:ee:42:37:
e8:56:86:d1:47:e0:bd:68:59:98:45:95:8b:45:14:
3c:46:f3:b5:18:41:9f:32:a8:8a:52:7e:36:19:2a:
30:3f:53:a9:57:d7:43:25:08:40:b9:af:d8:a3:b2:
0b:10:87:8c:8d:02:d5:15:dc:c5:27:4c:22:86:0f:
24:04:42:f8:74:9c:f9:ca:ab:18:54:5b:0c:f8:d0:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:23:30:40:A4:B0:F8:FB:8D:4E:54:55:42:AE:1A:D6:CA:3F:93:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1C1EE3C5EF411EF867DC4AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:32:52:69:6b:58:00:1e:1d:76:a3:0c:3a:95:c1:ed:d9:c4:
9f:b6:3e:09:1a:b2:76:fa:32:f4:03:16:b9:e0:57:dd:15:62:
ab:c5:54:51:49:bd:67:ad:42:9d:67:49:fa:27:d0:c1:2d:0b:
54:55:33:fc:92:75:04:98:6c:e6:b0:c2:9a:2d:7b:ba:e7:80:
9a:fc:41:d8:29:15:c0:f2:a7:d7:8f:5d:29:8a:bb:7c:cd:c4:
52:8b:60:d1:59:91:f4:79:88:c1:fe:18:57:1c:49:24:a5:5c:
da:fe:b6:b9:e8:e9:56:c2:9a:dd:50:20:fc:c3:0a:3e:bf:78:
21:97:c5:83:3b:dd:74:22:ee:56:1e:7e:05:60:e5:bd:49:ba:
6a:bf:7a:dd:17:07:6c:a3:0e:af:eb:35:a1:22:81:d9:9c:b9:
71:51:78:35:48:4c:84:aa:11:7b:60:21:c7:04:63:4a:aa:29:
b0:3e:e1:44:f5:9d:a1:a5:90:0e:49:19:36:d8:f0:28:bf:dd:
db:22:30:4a:ba:90:89:01:0b:07:41:ba:b1:2e:c7:65:96:0b:
98:e7:7c:86:2e:40:b2:9d:6c:77:bc:33:31:dc:91:1a:ff:7e:
65:03:5e:54:48:9a:f2:2c:20:1a:0f:ed:97:4d:2e:4d:8b:05:
b6:0d:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:41 2024 by rpki-client on console-fra.rpki-client.org