Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF053F145F1511EF958FA88A762E951A.roa
File: BF053F145F1511EF958FA88A762E951A.roa (raw, json)
Hash identifier: sxeUeqcjjyUKGQ33LV7LPoLJQmmdy45RtHkiuqMxKU8=
Subject key identifier: 8E:FD:AE:38:C8:22:42:B6:E4:54:28:45:F0:16:D7:51:71:7A:E0:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF053F145F1511EF958FA88A762E951A.roa
Signing time: Tue 20 Aug 2024 17:00:47 +0000
ROA not before: Tue 20 Aug 2024 17:00:44 +0000
ROA not after: Sun 01 Dec 2024 17:00:44 +0000
asID: 5065
IP address blocks: 156.229.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43608 (0xaa58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 17:00:44 2024 GMT
Not After : Dec 1 17:00:44 2024 GMT
Subject: CN=66c4cbbf-c79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:dc:63:73:71:6b:2b:3a:38:b8:e8:8c:22:
23:68:68:ca:5a:ae:2e:dd:e4:d1:13:3c:2d:00:26:
df:9e:f9:6f:a6:1e:fe:6c:42:f1:17:45:dd:c5:a3:
0a:ff:ef:7d:6c:51:93:83:89:7e:7e:cd:de:1a:e7:
ab:2b:0c:07:0f:a6:58:bd:85:83:11:64:d7:ab:4e:
b6:3e:85:fb:0f:25:85:fa:46:1b:b2:91:5f:7b:0d:
df:47:96:1d:a7:41:a8:47:bd:b0:a3:75:24:90:b8:
1a:d8:ef:86:a2:83:d2:1f:8e:e0:5c:7e:03:c7:10:
42:10:a4:15:c8:80:5f:f1:4d:9b:af:91:92:2c:90:
3e:7b:36:d6:bb:a1:94:46:bf:ce:fc:ad:d9:ed:fb:
2a:42:d8:3a:b3:fd:79:72:18:63:1e:05:3d:3c:fa:
f4:72:ae:ae:0c:c7:ca:39:90:0f:0e:66:b6:16:07:
65:41:07:bd:ea:f0:4d:fe:d2:08:7a:02:e5:d2:7d:
01:3c:1c:9e:9c:cc:4e:ab:1e:73:66:e8:d2:e6:ca:
2c:3e:63:c8:aa:ad:e1:e6:d6:2f:c7:d8:f6:33:b6:
f6:5a:e5:6e:31:24:6d:79:95:79:db:09:15:6c:fe:
53:16:97:ea:fd:4f:b6:fd:f6:41:5c:76:63:50:26:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FD:AE:38:C8:22:42:B6:E4:54:28:45:F0:16:D7:51:71:7A:E0:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF053F145F1511EF958FA88A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.55.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c0:97:99:66:00:4c:41:72:af:98:5f:06:b3:dd:0d:61:ec:
0c:ae:bf:a4:71:8d:4e:5d:4e:69:a8:34:5b:ee:fa:e8:8c:8a:
12:96:5e:8d:10:ac:ab:c3:3c:9b:c7:e0:16:ba:0f:b0:06:06:
9c:bf:f2:ab:ec:04:56:96:a3:87:ef:5b:77:74:44:40:19:ee:
aa:76:ce:1e:02:b1:43:98:b6:d2:fe:4f:63:ba:a7:2b:eb:c0:
10:4a:7b:e7:29:c4:2f:2d:da:6e:11:1e:d4:96:d2:28:1c:24:
8b:b0:ae:41:a8:65:1e:b6:1a:39:b6:b4:c3:f0:37:89:eb:45:
f4:e7:62:7a:25:85:7b:4f:08:23:da:0c:4b:bd:33:7b:cc:be:
59:46:2d:b5:09:a0:47:6a:43:66:75:ba:8b:f1:7f:2a:58:4e:
0e:6c:47:60:2b:a8:0c:03:1b:7c:5f:fa:26:96:f3:cb:7f:ce:
74:34:ed:50:d0:c8:ff:91:4b:e1:58:6e:30:1f:1f:28:ce:24:
e0:78:f3:2f:3e:ff:f7:68:40:97:f7:4c:75:7c:b2:aa:8b:5a:
e1:58:85:d5:65:3d:97:f7:13:7b:06:c5:ed:08:94:b4:27:1c:
61:5d:64:f9:18:ac:cf:53:8d:9e:cd:6a:84:db:fe:f3:65:9b:
3b:40:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:47 2024 by rpki-client on console-ams.rpki-client.org