Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B65121E29B8A11EFB2F24963762E951A.roa
File: B65121E29B8A11EFB2F24963762E951A.roa (raw, json)
Hash identifier: Sazfd2TBWJy3ZcfCU5X6N9wSn1PjQxcc5kGA5lg4bCw=
Subject key identifier: 5D:79:25:8A:BD:01:04:37:3A:5E:06:B5:21:FB:95:4B:5F:C2:BA:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CEE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B65121E29B8A11EFB2F24963762E951A.roa
Signing time: Tue 05 Nov 2024 15:29:14 +0000
ROA not before: Tue 05 Nov 2024 15:29:10 +0000
ROA not after: Wed 04 Dec 2024 15:29:10 +0000
asID: 200373
IP address blocks: 156.228.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52963 (0xcee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 15:29:10 2024 GMT
Not After : Dec 4 15:29:10 2024 GMT
Subject: CN=672a39ca-0e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ef:ec:35:a2:6d:b4:61:82:b4:9d:dc:01:53:
47:79:22:0a:01:f6:c3:ea:43:76:f0:8d:4c:55:14:
51:f4:b5:98:60:5a:a2:18:7d:1f:55:66:0e:07:4f:
2f:50:76:da:a4:52:5a:6e:e7:b3:78:fd:b0:65:37:
b9:22:58:8e:82:bb:97:14:e4:ff:13:0f:5a:2a:6b:
ca:8b:76:c5:8d:89:a5:6f:f0:17:f9:a0:81:3e:1e:
fc:1a:ae:30:23:69:2f:07:1d:35:8b:4e:8a:52:3f:
50:54:a6:2a:57:bf:58:c6:f4:85:b6:29:88:01:16:
09:45:d8:1b:7d:5c:5b:02:a7:4e:bf:70:6f:2f:d7:
fb:b6:16:6f:4e:4f:39:e7:12:bc:c3:e0:49:55:01:
b5:ad:c8:3c:80:52:36:25:03:66:08:77:fb:9a:93:
1d:75:8e:2d:60:83:b4:08:85:3a:c3:e3:ec:3e:c8:
d0:46:28:54:96:f6:f2:6d:45:e8:d8:ec:5b:06:a9:
38:1a:c2:08:d1:17:92:56:c6:77:b4:4f:43:c4:33:
37:5c:6a:a4:6f:9a:76:0d:6d:68:cd:dd:53:85:76:
43:14:ab:b5:70:d6:60:dc:9c:20:df:f9:59:05:81:
39:b6:38:2b:3a:ae:3f:db:22:17:a0:e7:e3:04:5a:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:79:25:8A:BD:01:04:37:3A:5E:06:B5:21:FB:95:4B:5F:C2:BA:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B65121E29B8A11EFB2F24963762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.171.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:dc:89:d4:d6:6c:10:0c:c7:7e:31:da:90:1b:8c:89:2c:79:
c1:34:a7:d2:33:0e:09:85:21:36:cf:91:54:e2:bd:2f:4c:c6:
17:c0:48:10:b3:fa:66:a1:5b:9a:f0:97:53:67:3d:fd:1f:02:
30:9d:42:2f:b7:a5:29:00:a5:44:41:4f:b6:71:3f:7c:0d:10:
ef:00:1e:66:53:04:db:89:e2:2d:f3:6a:89:60:bc:2d:95:86:
5d:65:ad:3e:58:9f:3b:ea:a6:0f:6a:c5:71:8a:70:2e:ff:ad:
00:23:9a:09:54:e9:e0:b1:26:c9:37:ee:dd:82:20:dd:74:02:
17:71:2c:49:ee:16:15:cc:16:f7:78:6c:5b:d2:45:fb:c0:e0:
e7:fc:dc:90:1c:f9:46:38:5a:fe:0c:b6:43:fc:5b:45:0a:f6:
3e:a0:40:f3:83:01:c4:fe:5c:88:ee:77:16:b9:79:7d:0d:7e:
f9:2b:b0:79:5b:c9:74:48:1e:ac:44:b2:82:83:41:fa:4b:63:
99:78:b8:70:ff:51:e2:6d:a8:75:45:be:c7:ab:30:25:2d:f3:
2b:4f:bb:aa:c2:88:fa:a5:94:6d:24:6d:72:6f:c0:6d:d1:18:
fc:c4:9a:32:ff:df:b4:7b:8e:01:39:ae:49:cd:17:3e:3f:a6:
7d:b8:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org