Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2921F183E9611EFAF7376BA762E951A.roa
File: A2921F183E9611EFAF7376BA762E951A.roa (raw, json)
Hash identifier: wWYYeU5WGQD6DjilaQqqE5EhLR10ofET6hH/H9UNOSA=
Subject key identifier: E5:A0:1C:6A:A7:18:7F:84:81:71:5B:24:06:56:3C:4D:EB:39:65:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9A30
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2921F183E9611EFAF7376BA762E951A.roa
Signing time: Wed 10 Jul 2024 08:30:17 +0000
ROA not before: Wed 10 Jul 2024 08:30:13 +0000
ROA not after: Tue 15 Jul 2025 08:30:13 +0000
asID: 209242
IP address blocks: 156.229.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39472 (0x9a30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:30:13 2024 GMT
Not After : Jul 15 08:30:13 2025 GMT
Subject: CN=668e4698-6700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ef:eb:f8:7b:8e:de:fd:bf:3a:ea:18:9d:91:
82:ed:5c:24:c4:71:d4:fe:4b:f5:41:73:e4:f4:d6:
fb:59:3a:ed:09:3e:41:ac:79:69:77:95:b6:35:d7:
6b:cd:24:32:62:f2:d4:22:ff:f4:64:1b:a2:ca:b8:
b8:cb:b1:97:f2:c4:81:a6:70:6b:28:5f:f4:b7:6a:
9d:36:42:d4:46:95:0b:8a:f1:c9:a9:56:6b:e9:16:
1e:99:7c:f8:e2:c5:df:c8:ad:e4:7b:65:52:ab:97:
ef:7e:7d:3c:3d:d5:d0:7b:e5:73:a2:8e:f6:47:81:
b0:c9:94:97:cd:6b:b1:e4:ba:cd:31:8c:73:9a:c3:
06:92:a3:62:39:d0:5b:58:db:f7:4e:2c:ff:f9:0c:
ed:cd:91:0d:19:1d:0e:50:ff:b5:c3:63:0d:c0:be:
66:58:a6:d1:03:9f:30:33:36:a5:53:b1:be:63:77:
a0:f5:7b:07:80:f4:82:a1:1f:89:41:20:3c:ef:fe:
f1:45:ed:23:2d:49:77:99:ed:49:b7:a6:ba:cc:15:
aa:b5:b9:7c:e5:62:b9:e7:62:85:38:11:ce:bd:10:
18:7b:b4:5f:4c:0e:11:37:2d:c6:ef:09:f1:57:55:
90:74:8b:74:7f:6a:7d:38:1e:e3:4a:0c:23:22:3f:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A0:1C:6A:A7:18:7F:84:81:71:5B:24:06:56:3C:4D:EB:39:65:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2921F183E9611EFAF7376BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.48.0/24
Signature Algorithm: sha256WithRSAEncryption
73:87:e0:fd:89:1a:aa:3c:b1:eb:2b:32:f2:eb:0d:cc:2c:19:
8b:38:07:3f:0e:f8:4e:33:c7:8e:b6:80:72:7c:ba:cb:62:59:
ca:ac:4f:d3:15:85:14:9e:8b:da:44:69:a5:1a:0b:7c:24:b9:
08:ed:3a:98:6a:30:fb:e9:c8:64:17:c8:00:17:f3:e9:74:a0:
ec:3c:4f:72:e3:48:37:b8:cc:a6:1d:31:05:5a:f3:19:1c:49:
d5:85:6e:40:42:fc:87:7b:0a:60:e4:58:e1:d6:3f:43:f3:25:
c9:bc:9b:0c:3f:ee:fe:ca:0c:94:6d:ec:07:3d:44:7e:ce:a3:
5b:f4:43:73:2f:60:b7:53:90:5c:fe:a1:c5:5f:66:18:5a:b1:
64:d7:42:85:52:9b:df:4b:c4:7e:51:7d:fa:0b:4c:19:cf:06:
ae:e0:f4:6e:3e:8d:42:c6:58:94:66:64:0c:c2:a0:93:3f:14:
a9:bf:80:b9:38:2a:55:78:57:54:f2:af:f9:ea:7b:3a:a1:44:
4a:cc:2c:81:27:86:81:cf:0a:70:30:5a:cb:9c:9e:e7:df:1f:
a6:c7:28:c0:df:56:0f:67:47:76:89:a1:58:01:54:77:e8:4a:
f9:a1:80:43:76:0a:04:74:ae:f9:bb:58:03:30:19:9e:1d:18:
5a:20:b6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:40 2024 by rpki-client on console-fra.rpki-client.org