Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86C1924644811EF9E48CC89762E951A.roa
File: B86C1924644811EF9E48CC89762E951A.roa (raw, json)
Hash identifier: Tj9+fnJ6MSUDJAaAhHDIXEt7Gm4qlHGUmuaodnJsyPs=
Subject key identifier: CB:B8:79:8C:A7:72:27:14:2A:B0:B5:EF:E3:A6:6C:1E:C1:46:70:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ADC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86C1924644811EF9E48CC89762E951A.roa
Signing time: Tue 27 Aug 2024 07:48:17 +0000
ROA not before: Tue 27 Aug 2024 07:48:13 +0000
ROA not after: Thu 24 Jul 2025 07:48:13 +0000
asID: 135293
IP address blocks: 156.227.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44488 (0xadc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 27 07:48:13 2024 GMT
Not After : Jul 24 07:48:13 2025 GMT
Subject: CN=66cd84c0-5b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:f5:ce:7c:57:b9:7d:0c:42:d9:51:c2:81:
49:30:18:69:9b:33:e3:25:00:ef:a7:70:77:e9:f0:
99:1d:60:ce:0e:9d:52:02:83:91:2f:27:d6:db:b8:
18:24:4c:70:6d:13:fe:87:70:d0:b3:94:64:e1:c5:
6d:7d:57:e0:69:8d:de:61:f8:bb:1c:77:7c:32:95:
c2:f8:dd:43:bd:1a:9f:4a:7f:16:9e:35:44:11:06:
0e:73:36:0f:e8:53:5a:08:5a:ec:e2:08:48:83:4e:
4b:87:57:8e:f8:2b:75:5e:80:de:fb:70:c3:17:91:
73:cd:49:86:66:03:d3:03:2a:91:8f:d9:1f:38:68:
4d:66:6d:80:88:cc:8a:db:f5:76:55:8b:a9:64:c3:
c8:53:56:51:0c:1e:77:20:6e:c2:25:b9:c9:84:f5:
0c:c7:48:cb:62:3c:60:0a:64:24:2b:db:8f:50:63:
ca:cf:64:d1:59:f9:7b:73:51:09:e7:94:95:db:c5:
e4:37:5e:ac:c2:91:09:5d:03:ef:4c:0f:95:02:8b:
e2:f3:70:80:27:8d:35:4f:cf:a5:2a:72:e9:2d:a2:
fb:1a:e9:b2:b4:00:27:f7:38:7a:9a:fa:65:a2:93:
53:48:63:e4:dc:96:5d:9b:f3:7b:b0:a3:8b:af:83:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B8:79:8C:A7:72:27:14:2A:B0:B5:EF:E3:A6:6C:1E:C1:46:70:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86C1924644811EF9E48CC89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.2.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a9:63:dc:f4:cd:ff:f2:07:28:55:77:6a:c5:42:a4:4e:05:
24:39:6a:0a:60:cc:51:b9:cc:fd:ef:52:00:1b:06:47:2e:18:
80:e2:eb:7f:11:49:12:9e:cb:a3:bf:46:c3:c4:04:15:a9:f6:
35:7d:bd:aa:3d:29:8b:07:6a:9e:8e:aa:0d:80:90:56:0c:18:
91:df:a8:e3:67:5b:ea:96:49:36:58:76:41:32:bc:ef:2d:e3:
d0:12:f9:d1:d7:c0:71:6d:f9:ea:1f:56:e7:36:71:69:d9:5c:
d3:7e:6e:87:ea:0c:af:31:cb:b4:62:d3:8e:48:b3:aa:5b:a6:
6e:04:04:20:3d:ba:71:3e:83:90:80:cf:50:25:6e:52:f7:c7:
14:ed:37:f3:06:2f:03:c9:40:79:a4:e0:c1:de:db:8d:95:53:
73:7d:db:c7:82:51:53:9a:d6:47:74:e3:13:7c:03:dd:1d:cf:
c7:57:21:79:b5:e1:61:0d:88:59:67:df:f3:61:19:8e:83:f2:
a4:63:03:18:5b:01:56:f3:91:2d:0f:b8:7a:2b:87:aa:a2:d0:
1a:e9:ab:98:b7:04:2f:02:fd:13:5b:ce:84:fb:ef:f9:81:99:
1e:d7:5a:83:67:ba:aa:23:7b:47:75:94:30:ac:d9:27:a5:b7:
76:5e:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:46 2024 by rpki-client on console-ams.rpki-client.org