Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C04B4B725AD611EFB7663B94762E951A.roa
File: C04B4B725AD611EFB7663B94762E951A.roa (raw, json)
Hash identifier: 1TWU9CnIpx6hyxxSr4S42BOMMZ4bQYMc8WrUfykc1Z0=
Subject key identifier: FE:3E:4F:B2:FE:39:A5:C3:98:9B:01:0B:0F:8E:7D:50:7C:77:1F:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A79B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C04B4B725AD611EFB7663B94762E951A.roa
Signing time: Thu 15 Aug 2024 07:19:47 +0000
ROA not before: Thu 15 Aug 2024 07:19:43 +0000
ROA not after: Sat 09 Aug 2025 07:19:43 +0000
asID: 3491
IP address blocks: 156.230.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42907 (0xa79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 15 07:19:43 2024 GMT
Not After : Aug 9 07:19:43 2025 GMT
Subject: CN=66bdac13-20c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:4b:42:94:e0:0f:33:90:8c:eb:6a:bc:3a:
7c:33:60:7c:52:30:4d:7e:8f:58:2e:8a:ee:99:d3:
a1:be:1f:80:08:c1:c8:1b:49:ae:44:1c:cf:de:b2:
c4:f5:2b:19:37:e5:75:ac:9f:6e:64:82:a8:f7:b3:
60:57:0f:31:d8:44:15:6f:9f:a8:41:6b:6f:59:6b:
8e:6d:af:39:fd:7a:4f:99:2c:4d:c9:2e:c5:bf:10:
ee:f2:fd:f6:9d:85:70:e5:29:82:ad:5a:4c:23:f6:
d5:9c:4a:a1:86:90:52:12:ac:fa:38:6d:6a:64:ca:
46:23:48:7a:95:f8:52:15:ca:b2:b4:db:af:fd:b7:
12:92:a6:ba:5c:13:60:71:b3:a6:43:72:20:19:fa:
7f:26:79:7a:fe:4a:45:d9:75:b1:e0:0e:b0:8c:ef:
b3:11:54:30:05:d2:da:90:37:bc:2f:10:6a:ad:98:
06:5b:a9:d8:a2:50:1a:22:50:ab:64:17:44:63:ca:
3a:22:6f:96:69:04:4d:ff:f2:69:78:47:92:1c:07:
42:4c:24:86:80:61:bc:a3:b4:0d:03:29:24:73:b8:
c0:26:dd:1e:96:74:c7:17:e3:2a:3b:b0:6a:4f:26:
2f:d4:84:4b:00:31:24:5a:f1:0e:aa:fa:57:7e:ca:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3E:4F:B2:FE:39:A5:C3:98:9B:01:0B:0F:8E:7D:50:7C:77:1F:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C04B4B725AD611EFB7663B94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.5.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e0:e9:80:89:c4:3c:ad:53:d9:f6:73:c6:21:ca:f0:da:1f:
e1:57:54:34:f3:e2:00:d7:61:61:c4:94:7c:83:05:b4:b8:98:
78:39:d6:32:26:b2:8f:a0:a1:07:62:b0:f6:7d:92:38:00:34:
34:b4:ba:ee:1d:ab:b1:47:21:9e:8c:9a:a3:1a:e2:96:89:03:
89:0d:b9:b4:8e:4f:ec:5f:b7:61:6a:39:9c:e5:01:c5:11:bf:
cf:49:9d:a9:36:eb:30:73:a5:2a:60:0e:a5:10:c4:f9:61:c0:
db:f8:27:8f:4e:f7:a7:3b:fd:a0:90:7a:eb:ad:93:d0:b6:88:
42:c1:07:e3:18:9e:a3:65:84:59:41:14:4b:25:33:7a:f8:b3:
99:9f:8b:df:98:f8:53:35:5d:80:bb:1b:0c:b1:73:bc:06:57:
2d:e0:2d:91:27:14:17:c0:7e:82:45:5f:90:3f:b8:e8:ff:9a:
75:6b:75:2c:1b:ee:3a:bd:d5:96:09:37:e9:68:9b:93:c6:42:
c0:16:2c:5f:53:32:de:2e:9d:e1:9e:3c:c7:aa:e7:44:ac:ff:
d8:d7:64:62:c5:79:84:42:db:e7:d3:f1:65:01:db:18:c4:14:
54:8a:25:7a:a0:ef:9c:77:cb:b7:a7:18:59:4f:83:5f:54:83:
f2:b8:f8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:47 2024 by rpki-client on console-ams.rpki-client.org