Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8E3CB4C912411EF99A02858762E951A.roa
File: A8E3CB4C912411EF99A02858762E951A.roa (raw, json)
Hash identifier: FyMcMFe0cGU9jkPEY0ycbhIcTYRIghthlFefA8SKUrk=
Subject key identifier: C0:15:2E:21:25:00:5E:60:37:86:3C:F5:11:30:B8:11:50:53:F4:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C7DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8E3CB4C912411EF99A02858762E951A.roa
Signing time: Wed 23 Oct 2024 09:53:31 +0000
ROA not before: Wed 23 Oct 2024 09:53:26 +0000
ROA not after: Fri 29 Nov 2024 09:53:26 +0000
asID: 203020
IP address blocks: 156.235.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51165 (0xc7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 09:53:26 2024 GMT
Not After : Nov 29 09:53:26 2024 GMT
Subject: CN=6718c79b-4723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:52:65:ac:00:37:19:d1:60:6b:ac:07:88:
a6:49:39:8e:3e:30:24:d2:e0:cb:0f:38:ce:29:10:
74:24:e1:96:fb:f8:df:04:c7:97:d0:d8:c5:91:d6:
df:af:23:c1:68:bf:67:3b:a6:b7:e2:e7:a6:bb:c6:
dc:79:f5:da:fd:e2:73:6e:c3:a6:16:d8:aa:51:10:
e4:6c:a7:40:48:e9:f5:c3:1c:4c:a4:4c:19:36:fc:
16:9f:1f:fb:fb:28:e9:f4:0b:4b:66:c1:2b:71:76:
20:c4:be:7c:9e:b4:ee:fe:05:88:37:b9:b8:2b:82:
73:75:05:53:39:0e:4b:c6:5e:fa:4a:c6:23:ff:2d:
e1:cb:6c:7b:3e:d8:4c:b4:67:c6:61:cf:1f:bc:7b:
1f:82:a1:35:df:2d:5b:a7:9f:a1:b5:69:65:5f:2a:
38:56:0d:b7:43:3d:da:8e:61:47:ba:57:20:06:1f:
88:0c:87:b3:ab:36:17:c1:81:16:c5:75:74:0c:06:
ca:72:62:11:9b:b7:04:ec:6b:46:b6:eb:7b:68:bf:
0e:4e:ca:1c:9e:0c:1c:ed:28:4e:12:d4:4f:54:c1:
69:e6:46:78:74:08:89:3f:21:dc:4e:b6:12:21:54:
9a:e0:23:d1:16:66:7e:13:e9:7a:85:14:4d:0b:61:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:2E:21:25:00:5E:60:37:86:3C:F5:11:30:B8:11:50:53:F4:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8E3CB4C912411EF99A02858762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4b:34:bc:65:2b:35:0f:66:31:4f:ec:e9:ac:37:c2:ea:d8:
65:c9:36:3e:1f:72:72:84:13:46:5c:24:9d:f2:5e:e0:86:86:
bb:61:26:c4:76:1b:45:2a:c0:b0:10:9d:69:38:f6:63:8e:82:
4c:ed:b1:83:a7:d6:b1:45:1a:6f:96:08:ef:31:16:4e:4e:fc:
ec:ed:34:41:1b:8d:cb:e7:ec:32:c1:91:d5:76:20:a2:ff:6e:
99:cb:64:02:87:8a:c6:ba:35:50:15:b5:2c:2f:e0:0f:34:76:
41:03:b1:12:39:28:8d:65:e7:3f:07:23:63:fa:90:b3:3c:36:
71:9c:22:03:05:0f:d0:9b:e5:6f:d9:46:52:3e:26:b3:24:d7:
ee:2c:8f:44:15:f6:dc:1c:41:a0:21:02:2b:c5:2a:99:7b:83:
19:1f:51:98:f6:dd:ba:f5:54:f3:74:4b:2f:ed:48:fb:17:01:
ce:55:c1:14:5b:a3:1d:ad:98:1f:ce:17:3e:93:b5:27:71:7d:
06:89:5a:41:94:a5:e2:a0:ed:0e:c7:b8:bc:e3:00:26:6a:96:
cc:dd:87:9b:1d:58:bc:dc:ee:f5:bb:f0:fc:9e:44:a6:b6:1c:
e1:1d:5d:08:3b:e5:9c:95:b7:33:95:84:b1:a6:37:c1:98:96:
2f:7f:36:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:44 2024 by rpki-client on console-ams.rpki-client.org