Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B91703D65EF111EFB5641C95762E951A.roa
File: B91703D65EF111EFB5641C95762E951A.roa (raw, json)
Hash identifier: X4ow3ay70KCHguBvgg5tH2Z7BoBE8eoZZdekIoyOry4=
Subject key identifier: CF:67:33:87:0D:7C:36:C8:08:16:0C:25:F5:B3:DC:AE:C5:28:09:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B91703D65EF111EFB5641C95762E951A.roa
Signing time: Tue 20 Aug 2024 12:42:56 +0000
ROA not before: Tue 20 Aug 2024 12:42:52 +0000
ROA not after: Tue 27 May 2025 12:42:52 +0000
asID: 399077
IP address blocks: 156.251.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43496 (0xa9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:42:52 2024 GMT
Not After : May 27 12:42:52 2025 GMT
Subject: CN=66c48f50-95c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ea:7f:5f:9a:98:cd:a4:bd:b8:98:ad:24:d5:
71:12:57:50:b1:08:bb:68:27:ca:8b:a2:0a:73:a2:
9d:75:a8:ac:a1:e6:29:ac:5b:ca:cf:5b:31:fb:26:
62:95:99:87:51:c2:8e:de:16:21:bc:67:3f:60:49:
16:b7:b2:f0:b8:6d:d7:63:10:41:eb:c1:f4:58:ab:
31:48:77:66:f4:c5:10:28:e6:d6:29:4b:9c:fd:5d:
81:bc:23:73:bc:18:41:a9:63:0d:fc:8e:78:98:f0:
7d:96:a7:9e:b8:45:97:35:ef:8b:a2:1f:5a:30:e3:
60:17:7c:04:c5:f0:35:e6:37:12:fb:af:42:13:38:
e9:72:94:78:53:ed:5e:52:1e:f9:6f:28:69:2c:f0:
02:8e:d0:20:6a:38:ea:d8:c0:e1:67:b7:5c:66:6e:
e1:a0:28:ac:65:89:ed:ed:69:78:19:b0:a1:82:3b:
3d:1d:63:fb:2e:00:97:b2:83:ca:6e:b3:44:3b:a4:
4c:ad:15:5d:43:02:e1:c0:3d:c4:b9:7a:bf:07:32:
f1:d9:79:d9:eb:25:66:dc:ac:a4:8f:7e:e1:5c:91:
4a:c3:19:7f:69:17:91:ea:fb:ef:5e:bd:8c:d1:4e:
f4:a9:39:bc:5d:d4:80:2a:c2:90:39:77:15:c0:b3:
56:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:67:33:87:0D:7C:36:C8:08:16:0C:25:F5:B3:DC:AE:C5:28:09:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B91703D65EF111EFB5641C95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.27.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e7:9b:5b:03:ef:3a:fa:a4:5f:6e:b6:c4:55:64:81:d0:14:
1e:17:6f:a8:2e:6a:09:c8:c5:9e:44:3e:d7:b4:33:6b:e7:c9:
a2:b6:a6:22:8a:ab:e9:54:22:22:c3:77:32:2e:10:96:a6:4d:
80:1a:21:89:0e:0f:d4:d1:bb:3d:cd:6d:d5:cb:26:04:55:e4:
7c:d6:00:5f:59:3d:3c:df:53:01:8a:e5:f0:50:9a:e3:a3:a1:
34:16:a0:ed:f8:b2:ce:f2:b2:d1:09:13:17:8b:eb:07:2f:72:
59:45:33:83:dc:92:f6:c5:ae:6c:d3:45:e5:e0:ed:d5:2b:77:
bc:74:c2:45:a1:ea:36:d1:4d:8e:4a:1e:58:17:72:c0:b1:53:
32:d7:d0:03:02:35:47:6e:7f:7c:b2:ce:9f:8b:f3:ba:dc:62:
db:2e:10:2b:db:34:10:c5:17:b9:d1:7e:41:93:a2:6d:c7:56:
c8:1b:f4:2b:78:d5:a5:b7:88:12:c7:6b:4e:04:12:cd:5d:2c:
64:35:02:e6:3c:04:be:1a:50:14:24:a2:64:7c:a0:04:46:c3:
35:b5:f4:15:6c:1c:3b:6e:c0:53:33:e1:1f:d3:29:40:9f:65:
07:86:06:32:21:0b:8b:f2:91:c9:3e:e5:5a:ca:6c:51:58:aa:
98:82:9e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:46 2024 by rpki-client on console-ams.rpki-client.org