Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B81E18C69B8B11EF870AD069762E951A.roa
File: B81E18C69B8B11EF870AD069762E951A.roa (raw, json)
Hash identifier: KiIsNA9LlLEZCiGDNMbOop27YOU/wn3rAXsHADqMtQU=
Subject key identifier: A5:16:B8:A5:F5:CD:B2:A8:CF:8C:19:BE:EB:3A:2F:D7:44:20:03:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CEEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B81E18C69B8B11EF870AD069762E951A.roa
Signing time: Tue 05 Nov 2024 15:36:26 +0000
ROA not before: Tue 05 Nov 2024 15:36:23 +0000
ROA not after: Wed 04 Dec 2024 15:36:23 +0000
asID: 200373
IP address blocks: 156.228.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52975 (0xceef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 15:36:23 2024 GMT
Not After : Dec 4 15:36:23 2024 GMT
Subject: CN=672a3b7a-efab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fc:0c:87:18:47:de:ce:be:5b:cc:29:a9:6d:
e2:d2:48:4e:36:46:8f:67:fe:e3:67:d8:e4:91:b6:
80:90:47:30:0c:0a:80:e3:b9:8f:ef:07:17:a2:1e:
5f:11:aa:3b:6f:1d:d7:81:89:10:4f:9b:a7:2d:98:
60:66:89:e7:72:4b:cb:e8:cd:4c:d2:66:05:48:a5:
94:28:00:82:20:42:e0:a9:f3:a6:03:9d:02:64:dc:
e1:66:01:5c:96:49:9f:e6:4e:04:b4:c2:42:9d:e0:
6c:10:87:28:dd:91:a0:c7:b8:00:08:85:80:7f:68:
86:9e:64:2f:fc:f4:f7:30:39:0b:45:b7:9f:23:88:
42:d3:45:03:70:df:03:81:31:4a:19:28:94:19:b7:
f0:2b:48:2a:e5:0f:18:73:39:03:eb:00:e4:03:14:
38:8a:7f:23:be:e1:50:fc:75:f0:08:b8:75:80:5f:
1b:d3:66:24:30:3a:c1:49:7e:7d:82:ea:59:87:08:
58:19:43:fc:2a:82:47:ad:f5:f1:8e:ba:80:c5:1d:
11:27:6c:ce:8d:dc:be:f1:cf:59:ce:8a:a5:ad:7f:
1f:65:87:3e:14:31:0f:a0:b7:ab:ee:d2:8e:4a:e3:
d2:b6:e6:22:eb:66:ea:89:82:4f:27:23:9a:af:0b:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:16:B8:A5:F5:CD:B2:A8:CF:8C:19:BE:EB:3A:2F:D7:44:20:03:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B81E18C69B8B11EF870AD069762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:2d:8c:a7:3d:31:c9:82:d3:3d:65:40:05:91:e6:51:13:3a:
57:39:9d:60:4b:da:0b:7f:70:9f:ef:9f:cd:50:d1:fc:d9:09:
d4:8e:81:3e:9a:61:85:16:c0:7e:33:ff:41:ea:13:10:8f:b4:
b9:5b:3d:99:15:7f:86:83:73:ab:b6:0a:fa:f0:71:e4:a9:4b:
df:76:b9:be:99:29:03:8e:06:e4:bc:cd:8b:25:3b:3a:0e:d0:
80:9b:d5:bf:f9:50:a5:74:b5:ae:f1:97:7c:af:18:55:ab:90:
b9:84:76:b1:10:46:cb:47:13:13:f2:cb:cb:17:ee:c2:ad:f8:
ff:e0:88:74:ea:d9:40:3b:33:78:b5:9d:15:6b:5f:63:78:69:
ab:d6:21:ed:cd:e8:11:a2:2b:fd:67:8f:c7:9f:5c:c5:c7:08:
f6:27:9d:39:b5:6d:c9:3c:19:1a:46:2e:b4:d0:12:bf:f2:68:
7c:95:d8:bb:7d:43:35:aa:a0:9a:27:86:72:f1:5c:b4:be:0d:
95:b1:4f:8c:35:f6:f9:23:9a:ad:0b:f3:ca:22:41:f6:ef:a6:
5d:86:54:32:5a:47:0d:f4:6c:ca:07:ce:5e:9c:ea:92:8b:e4:
cb:ea:2b:92:15:ff:49:d3:d4:4d:c6:0f:95:3b:55:3b:d4:d7:
d9:a0:e2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:46 2024 by rpki-client on console-ams.rpki-client.org