Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE11C5AE66A511EF98E4ED6A762E951A.roa
File: BE11C5AE66A511EF98E4ED6A762E951A.roa (raw, json)
Hash identifier: r0/VZm7HkBaXr1w0msT/X9/vMVR3RBScSLb3ZIbenxs=
Subject key identifier: BA:CD:E1:B4:58:C4:29:F4:36:EC:D3:98:63:51:E1:B2:6E:35:BB:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AFED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE11C5AE66A511EF98E4ED6A762E951A.roa
Signing time: Fri 30 Aug 2024 07:59:12 +0000
ROA not before: Fri 30 Aug 2024 07:59:08 +0000
ROA not after: Fri 14 Aug 2026 07:59:08 +0000
asID: 24413
IP address blocks: 156.230.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45037 (0xafed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 30 07:59:08 2024 GMT
Not After : Aug 14 07:59:08 2026 GMT
Subject: CN=66d17bd0-25c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:7c:1b:0b:1a:43:4b:fa:09:e4:00:92:eb:
83:9b:52:36:fd:c1:d7:ef:9c:b0:54:83:b5:ba:a1:
68:04:9c:61:e6:91:f0:02:fd:59:db:a9:61:bf:dd:
fe:63:f5:26:45:da:16:ac:0a:6c:5e:09:67:a0:92:
ff:43:eb:48:68:48:10:54:c3:5a:7b:c7:1e:59:a6:
b4:10:21:5e:57:69:99:9a:2b:85:96:e5:92:0e:04:
25:5b:b4:50:98:03:4f:fb:7b:fe:5b:d2:50:89:77:
1c:73:d2:c4:d7:7f:ab:44:ea:9f:54:1d:3e:15:be:
94:1e:3b:99:8a:39:e2:2e:f9:5d:20:35:e7:9c:32:
7a:eb:a8:02:68:07:3c:40:01:69:9f:d6:91:c9:90:
82:0b:56:b6:72:a7:42:77:7c:d0:22:15:1e:af:23:
1b:e3:de:e5:38:87:ec:85:a9:3f:e0:d8:ea:81:b1:
9b:f9:7a:35:1c:28:ba:d3:f7:1c:f8:49:16:3d:63:
36:42:81:d1:17:d2:2b:21:28:07:ac:12:cc:67:e5:
68:2c:9c:13:6f:e9:92:34:b3:43:dd:f4:1c:6c:c2:
5a:47:e8:da:0f:99:14:64:09:e4:3a:6f:79:5a:a7:
15:93:40:fd:79:ea:12:af:38:a7:39:87:46:27:ec:
98:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CD:E1:B4:58:C4:29:F4:36:EC:D3:98:63:51:E1:B2:6E:35:BB:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE11C5AE66A511EF98E4ED6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.12.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:63:c3:a9:fc:34:0d:77:bc:06:2c:cd:3e:11:1b:78:e0:aa:
d5:d4:38:ef:f3:03:c8:a0:c7:6a:77:e6:e6:bc:f9:f2:5d:1b:
3e:18:e5:66:8b:09:3a:a3:ce:2b:6d:0c:17:4f:04:d3:df:c5:
a5:f6:5c:6a:b6:0b:c0:1c:30:2c:fe:d2:17:7c:43:f5:0f:53:
b0:dc:e4:5d:ec:2b:3d:ab:4a:0f:3b:34:e5:2a:c9:62:cc:b4:
6e:0c:f3:bb:cf:5d:d9:07:e7:4f:a1:cc:63:06:cb:e8:f9:e9:
d7:1a:01:32:37:a5:4f:1a:26:40:9b:79:69:a4:d8:a3:3b:4c:
30:7b:0e:46:7e:28:fc:0a:5c:1d:9e:82:25:0b:d6:70:48:0d:
14:fd:ca:40:31:28:0e:a1:14:41:dc:51:39:c1:23:1e:12:a2:
ff:eb:80:2f:df:e7:c7:22:43:84:f3:45:8b:7e:20:76:96:2e:
5f:f3:e0:9e:f0:86:9d:c2:67:f9:f2:3b:96:05:72:4b:1b:59:
5e:45:72:15:2b:b0:7a:e4:45:54:9b:f4:36:dd:60:d8:cd:a6:
48:fb:72:38:27:59:36:26:e8:ac:e5:6b:00:27:fc:29:31:ae:
01:ae:7d:33:b7:04:bb:d8:86:65:80:58:25:0a:a2:e6:40:47:
6d:86:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:47 2024 by rpki-client on console-ams.rpki-client.org