Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE0F9BE6951111EF90AB918F762E951A.roa
File: AE0F9BE6951111EF90AB918F762E951A.roa (raw, json)
Hash identifier: 4VizNpy7s41CI7G6RLr052eR//s9BydRXJZEPkb5E6s=
Subject key identifier: C7:5E:50:2C:E8:7E:7D:59:B5:AC:88:E3:3C:7E:ED:FF:44:C1:17:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C932
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE0F9BE6951111EF90AB918F762E951A.roa
Signing time: Mon 28 Oct 2024 09:47:44 +0000
ROA not before: Mon 28 Oct 2024 09:47:40 +0000
ROA not after: Sat 30 Nov 2024 09:47:40 +0000
asID: 131464
IP address blocks: 156.230.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51506 (0xc932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 09:47:40 2024 GMT
Not After : Nov 30 09:47:40 2024 GMT
Subject: CN=671f5dc0-de85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2b:73:6f:53:3d:96:43:34:eb:4d:14:c7:b1:
41:0e:e1:9d:c3:98:0f:b9:5e:94:85:1e:c8:b1:ec:
66:19:e7:f1:f8:38:51:08:30:a9:53:53:cc:c3:9a:
d9:2d:62:c3:54:b5:b0:34:f6:32:07:8d:e3:e6:6c:
27:de:ec:bd:4e:9a:2c:3f:09:60:2c:4e:4d:96:1d:
ab:b3:c0:24:25:0f:9b:64:5e:df:6d:19:f0:88:c7:
1b:1f:50:13:00:38:66:e3:f2:96:1b:9d:2c:53:be:
e2:9e:95:0b:33:91:7d:4e:08:5d:c1:58:ba:b5:3c:
6e:74:54:4a:29:57:97:55:52:2d:da:78:af:82:b1:
57:7f:f6:30:ff:2d:9d:9e:32:73:6a:32:e6:bc:f4:
45:91:12:c4:57:1e:90:a6:f2:dc:de:f9:5d:31:a0:
3d:ee:4f:df:54:a9:4f:23:fd:b2:3b:1d:0b:e6:47:
8a:06:ca:49:3d:65:d2:fd:5f:15:d8:be:67:ec:5e:
a0:bc:67:76:d4:35:9e:40:57:4b:a4:17:90:4a:4c:
af:7d:93:ab:b4:8d:5f:b6:87:d5:f8:05:fe:f7:2e:
85:53:b4:c3:9e:ef:ec:b3:2e:53:2f:dd:89:26:f0:
fe:2a:09:72:5b:cd:7e:54:63:e2:55:16:4f:b5:b4:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5E:50:2C:E8:7E:7D:59:B5:AC:88:E3:3C:7E:ED:FF:44:C1:17:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE0F9BE6951111EF90AB918F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:61:da:25:c1:26:89:69:d6:21:7a:d7:50:c7:2a:96:c4:86:
56:bb:ff:02:53:c1:49:38:c4:8f:27:ad:ad:ef:ed:7d:f4:0d:
ca:10:db:b8:ee:98:fa:5a:fe:38:f5:39:76:f0:57:40:77:22:
a6:23:41:3b:c0:c1:fa:ff:6a:da:f6:e1:d3:61:9f:d3:b0:ad:
b9:e1:bf:76:a2:71:b0:cc:42:82:76:41:c6:47:c8:c2:e0:50:
43:11:76:2b:14:fc:fe:a6:3e:12:37:48:8f:44:1a:02:9a:b4:
53:56:85:4e:22:e6:99:5f:39:36:34:9e:42:c0:de:46:71:9d:
4f:d8:c6:4a:e0:39:71:05:16:1f:18:68:d1:2e:6d:db:4e:74:
5b:1e:97:fe:4d:6e:9b:e5:d7:10:94:3c:88:bf:a2:e8:20:1b:
d5:57:8b:66:67:b0:56:69:0a:87:56:ad:8f:4d:2a:28:16:57:
e0:48:c2:f2:98:7f:57:e5:ec:50:12:a0:c8:59:7e:67:5c:a2:
5a:fa:90:36:69:de:d1:d2:f3:5e:49:1b:27:13:76:a6:73:ca:
5e:5c:67:a8:1c:6f:6f:45:2d:67:f2:0d:06:a6:45:47:07:23:
49:3c:28:0e:52:6b:dc:91:5f:8c:bd:16:26:cb:b5:f1:b0:5e:
7b:e1:f4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:44 2024 by rpki-client on console-ams.rpki-client.org