Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B580AA68818011EFA1B302B9762E951A.roa
File: B580AA68818011EFA1B302B9762E951A.roa (raw, json)
Hash identifier: K0811yXC9r4dGqre67iC6fbA0M3zq7MWPHmAj07k3aA=
Subject key identifier: C4:80:D8:71:64:73:BE:05:9C:4F:3B:12:D4:92:05:D8:A1:F5:28:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BE89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B580AA68818011EFA1B302B9762E951A.roa
Signing time: Thu 03 Oct 2024 12:12:08 +0000
ROA not before: Thu 03 Oct 2024 12:11:54 +0000
ROA not after: Tue 07 Jan 2025 12:11:54 +0000
asID: 272018
IP address blocks: 156.235.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48777 (0xbe89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 3 12:11:54 2024 GMT
Not After : Jan 7 12:11:54 2025 GMT
Subject: CN=66fe8a18-46a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:74:fd:38:f8:4b:bb:03:a7:63:d5:cb:0c:69:
4f:19:62:77:0a:1c:5e:71:12:c0:5b:05:d3:f3:75:
e3:94:3c:1d:1d:90:82:02:fb:76:9d:56:08:bd:c2:
60:05:17:07:03:72:4b:ca:ec:fd:8e:b2:81:f2:4a:
12:a4:9e:e4:6a:f0:60:a9:19:dd:78:23:b7:83:79:
47:43:7a:81:ed:09:78:44:5d:d8:6c:df:9a:44:5a:
87:0f:7f:c8:2c:87:f1:5c:2b:55:fe:f3:94:61:c6:
b9:fc:03:a6:e0:51:ac:c0:1b:b4:6e:15:2f:67:8c:
b0:34:07:71:cb:5f:45:95:a1:0f:40:21:34:63:99:
06:65:f6:51:a0:fb:83:91:23:33:6e:4c:03:15:46:
31:dc:5a:fb:bb:bd:02:43:0b:05:ae:82:3f:49:8a:
ea:22:2d:4f:a9:e0:66:87:09:3a:51:34:de:4d:b1:
c8:3f:10:24:fe:80:4f:9c:b2:b3:a1:22:c1:da:5b:
75:9a:1b:fb:12:ed:fa:aa:b7:6e:e5:20:87:7b:6a:
4a:af:a3:39:6c:83:d7:7f:8d:36:1d:02:cc:86:c9:
47:6c:8e:4b:98:52:42:f4:c8:c7:f1:fc:78:50:2f:
13:da:a8:df:af:4a:aa:c5:4a:41:82:bd:3c:99:7b:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:80:D8:71:64:73:BE:05:9C:4F:3B:12:D4:92:05:D8:A1:F5:28:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B580AA68818011EFA1B302B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d3:30:ad:d4:2f:40:01:33:29:99:c5:a8:bb:ad:a1:03:10:
78:e9:c0:bd:dd:d4:c2:fe:49:52:2e:8b:85:22:4a:03:17:eb:
51:56:eb:bb:19:1a:08:7b:85:c4:46:7d:d6:d7:41:47:b2:7f:
7a:b7:d7:2a:2d:c0:05:2f:d5:5b:c2:5b:6e:6c:7c:f5:49:79:
3f:e5:18:fc:33:fa:cc:4f:72:18:0b:69:09:39:65:48:2e:4e:
41:00:bc:7d:da:d8:66:35:22:31:4d:bc:09:ee:30:5d:e2:80:
76:d1:32:77:08:68:b6:ea:fd:b6:f4:79:68:3d:0f:e1:5f:66:
46:65:b7:62:66:48:8f:c2:34:e2:18:fc:ee:d4:56:df:33:06:
48:ee:c6:18:fd:85:e1:34:66:06:8e:67:d4:5c:71:94:b3:d1:
8f:1e:bf:bc:22:c8:c6:b1:80:bf:8c:8f:1d:59:18:d2:1b:02:
79:8f:4e:f6:00:2b:1b:c6:b9:f0:95:2f:3f:e4:43:9b:0c:0e:
be:c3:c5:84:45:cc:aa:9f:bb:55:8a:df:e7:5f:02:52:77:ba:
77:45:60:35:7a:d3:c4:f3:03:36:3d:9d:c8:dc:87:72:5a:59:
f0:cd:77:92:4f:1f:43:d9:d6:a9:ac:89:02:8f:3c:f0:36:0e:
47:72:94:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org