Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5C29938A4BB11EF95893971762E951A.roa
File: B5C29938A4BB11EF95893971762E951A.roa (raw, json)
Hash identifier: s3EdKdNPhpFHeglMw5LePY18sjtzl5xGak4zQFUllJc=
Subject key identifier: 3A:60:66:3E:0F:A0:D2:5F:47:7C:68:A3:B0:EA:4B:80:CC:B5:85:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D453
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5C29938A4BB11EF95893971762E951A.roa
Signing time: Sun 17 Nov 2024 08:12:39 +0000
ROA not before: Sun 17 Nov 2024 08:12:35 +0000
ROA not after: Wed 18 Dec 2024 08:12:35 +0000
asID: 198584
IP address blocks: 156.253.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54355 (0xd453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 08:12:35 2024 GMT
Not After : Dec 18 08:12:35 2024 GMT
Subject: CN=6739a577-8ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:aa:ca:1f:fe:83:f1:08:e9:5d:17:5f:10:
d8:ec:8a:ad:66:73:3e:f8:4e:a7:fc:6a:11:1a:6d:
5a:8c:7d:13:80:b8:e1:cc:34:e0:1a:ac:77:0e:25:
fe:d0:f4:80:b2:9f:02:fd:dd:74:ba:da:11:54:79:
33:5c:89:c0:d4:1c:65:f1:6b:5d:31:55:71:66:bf:
17:66:4e:0d:0e:2c:b3:a0:c5:1f:e5:d4:8d:49:5e:
ad:1c:3b:c5:ed:02:13:18:2f:61:62:6c:15:49:ce:
56:9f:ad:f9:7f:ce:73:85:c6:75:26:bd:c5:47:88:
95:50:21:33:be:b5:cc:92:01:7e:b0:f5:63:02:58:
4e:cb:1f:2c:bd:18:c2:b7:75:5d:53:00:9e:84:bf:
88:2c:61:b0:89:50:1d:ae:24:97:c0:97:c2:c5:d8:
85:02:a6:f7:74:ec:86:3b:79:5d:a4:15:08:99:92:
35:56:ba:80:f7:81:a1:93:13:10:a5:c3:22:f6:5f:
a7:b8:82:93:34:16:a7:e6:15:9f:6c:ad:54:59:5e:
32:0e:98:13:0c:e2:f1:2a:8f:28:f1:fa:4e:9a:c2:
f4:28:23:dc:de:77:f7:ef:a1:2a:8d:58:38:e1:b9:
85:b2:14:74:a8:c4:be:f8:0e:98:a2:49:81:1d:22:
12:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:60:66:3E:0F:A0:D2:5F:47:7C:68:A3:B0:EA:4B:80:CC:B5:85:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5C29938A4BB11EF95893971762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.237.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ae:e3:a4:e7:4f:c2:6d:c7:37:57:83:69:d8:aa:36:38:cb:
68:4e:b3:e3:5b:11:42:ba:f4:de:fc:96:0a:e6:63:02:4c:b0:
e3:16:30:55:fa:34:19:99:ab:d8:7b:ba:50:d8:6f:14:66:ca:
d3:7e:5d:ae:b4:02:ba:68:d4:3c:a6:f0:a2:24:a8:7d:19:01:
9c:70:c3:37:d5:7f:5e:3e:b6:2f:31:cb:13:98:2c:dd:94:27:
c8:c9:83:b5:6e:64:e5:28:93:7b:b4:35:14:4a:52:31:f9:5f:
ac:ed:fc:b3:4a:36:c2:0d:e0:bf:b4:b1:15:10:c4:2f:31:c3:
d3:41:2a:f4:c9:21:ce:d5:7b:89:09:83:12:a2:3e:a0:da:77:
fe:9c:db:a4:3c:23:d5:a3:b5:fe:3e:a8:ad:b8:90:65:1d:56:
1c:59:8a:81:bf:4b:2a:8a:31:65:99:af:cc:fa:25:08:d5:a3:
2a:2a:3f:6d:41:8d:c9:6e:f6:3d:1e:f3:65:b3:12:59:0a:a8:
ca:e0:32:f8:0a:59:31:37:ac:c7:46:69:6c:e0:60:67:42:9a:
68:9f:15:75:e2:69:be:5a:ae:38:35:18:e0:6e:5d:f4:55:b4:
61:ae:20:50:e7:fe:50:22:07:43:70:a8:1b:76:28:c0:c9:e2:
d1:ca:e0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org