Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C300F52E7E3F11EF980251BB762E951A.roa
File: C300F52E7E3F11EF980251BB762E951A.roa (raw, json)
Hash identifier: ueuvjqTS2kI+BaK1A2tPNxXruYjf+JEGFn/DOfB08bw=
Subject key identifier: 32:74:83:69:6B:B0:46:4D:F2:EE:38:C6:4D:56:07:48:1E:5D:6E:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BC9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C300F52E7E3F11EF980251BB762E951A.roa
Signing time: Sun 29 Sep 2024 08:49:39 +0000
ROA not before: Sun 29 Sep 2024 08:49:36 +0000
ROA not after: Mon 30 Dec 2024 08:49:36 +0000
asID: 17561
IP address blocks: 156.226.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48283 (0xbc9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:49:36 2024 GMT
Not After : Dec 30 08:49:36 2024 GMT
Subject: CN=66f914a3-391c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bf:45:a3:12:a0:9f:60:58:55:58:3e:96:a3:
e4:b8:18:99:39:9c:8a:0a:57:00:a7:d1:0a:cf:ed:
f1:d5:08:00:26:5d:2c:df:5f:e4:34:3c:8a:b8:b8:
3b:bf:b2:d4:15:27:06:f1:c7:cf:87:60:27:56:1c:
85:89:2d:0d:fd:39:f5:d7:36:cd:f7:38:84:c2:09:
e7:50:64:92:33:73:b6:7d:7f:7f:c9:42:68:d8:ff:
8b:bf:20:be:0e:ef:90:9d:21:1f:86:60:d9:87:02:
35:5f:fd:70:77:02:4b:a2:80:b9:16:08:11:c9:d2:
70:1b:d8:b9:df:95:3f:32:57:4c:53:79:a2:19:9d:
5a:8c:f3:fd:46:46:6f:e3:cd:b1:4b:d5:f7:1b:36:
49:05:1a:50:55:99:fa:f6:60:e9:d4:f0:d2:4c:0d:
15:9d:5f:bb:2f:11:a9:28:f4:43:a9:1e:90:74:e0:
cb:42:b5:0d:a9:8e:ec:da:1e:28:34:58:87:f3:2f:
03:d1:fd:85:30:43:58:04:91:90:98:25:ca:23:bc:
68:12:ee:1f:d4:b1:9f:9c:8f:5f:ac:cb:22:66:40:
71:e8:a1:d7:a3:df:8f:49:0f:34:1d:46:6f:76:e0:
9e:34:a5:0a:96:5a:13:f7:43:ef:14:64:26:19:19:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:83:69:6B:B0:46:4D:F2:EE:38:C6:4D:56:07:48:1E:5D:6E:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C300F52E7E3F11EF980251BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0a:1c:a0:3f:9a:df:d2:63:f4:ae:55:28:5a:75:3a:b9:ad:
0e:db:d7:df:60:b6:05:6d:b5:a7:86:ab:42:2a:64:e6:0f:b8:
8f:5b:f2:21:2f:66:89:f0:bf:2a:82:e4:ca:f0:9b:99:ce:85:
3a:5a:e0:53:45:2f:69:dd:55:dc:26:5b:70:2d:f9:ac:d9:8e:
1a:2b:00:90:74:90:f9:a7:8d:b6:89:7e:17:30:17:76:c9:13:
c2:eb:85:4e:9d:b7:98:92:0b:7e:bb:ba:39:dc:ea:37:2e:c3:
13:e3:af:be:dd:f1:51:9e:a9:e1:48:63:67:20:67:e6:63:88:
5f:a6:10:ee:6f:9b:5e:44:0e:9c:c2:7c:89:61:fb:87:8d:63:
09:50:42:50:84:e1:bb:a8:89:03:03:14:4b:5a:ae:63:99:05:
a6:7c:67:81:ca:10:68:eb:81:bf:f6:e6:aa:aa:a2:7a:70:6e:
a7:80:78:ef:cb:11:05:af:e2:44:78:eb:9c:cb:95:44:81:25:
43:68:66:06:bc:d6:ec:27:4d:2e:76:ae:dd:d4:5a:e8:74:53:
e4:b8:41:2e:ec:90:fc:30:35:f9:6c:48:bd:78:56:6c:30:be:
a0:14:09:c4:b3:ca:8e:d9:6a:ed:90:3f:b9:a0:81:b0:5a:04:
99:62:49:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:46 2024 by rpki-client on console-fra.rpki-client.org