Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7C04050A0C811EF99141868762E951A.roa
File: C7C04050A0C811EF99141868762E951A.roa (raw, json)
Hash identifier: 2hHluXXpzj6Cs/y9Ix7fct6Mk9iZb3DyXZhhOQGWmAg=
Subject key identifier: 3F:51:E0:79:2B:02:EA:72:EE:9C:79:8F:64:0D:16:AE:D5:0A:DE:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D158
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7C04050A0C811EF99141868762E951A.roa
Signing time: Tue 12 Nov 2024 07:36:08 +0000
ROA not before: Tue 12 Nov 2024 07:36:04 +0000
ROA not after: Mon 02 Dec 2024 07:36:04 +0000
asID: 21859
IP address blocks: 156.225.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53592 (0xd158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 07:36:04 2024 GMT
Not After : Dec 2 07:36:04 2024 GMT
Subject: CN=67330568-d735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:72:22:01:0a:9e:f2:4c:ad:6a:52:3c:f9:
c7:6e:f0:b7:9b:47:20:46:62:62:50:77:b2:16:c9:
40:1b:c5:9a:0d:c2:3c:69:61:f7:15:98:0e:a0:a7:
b5:54:51:da:24:4f:70:2b:8e:39:b8:50:be:1e:5f:
fb:1a:ab:ad:88:7f:c4:78:bf:03:c1:a5:9a:e7:25:
05:11:86:e0:10:b8:30:82:90:f3:e5:eb:c1:4e:1f:
2b:02:f9:2a:98:d8:0b:7f:f0:08:cf:cb:db:fe:df:
b6:44:fc:6b:af:32:d8:b7:6e:00:a9:ec:92:f7:37:
6b:b3:fb:c9:b6:36:f3:95:7f:c4:a4:5c:a8:0f:18:
af:4e:27:b3:4a:8a:b5:3a:16:69:f3:ba:91:f8:ff:
95:55:b6:ec:40:47:5a:a3:9d:7c:00:4e:66:cb:e1:
da:b8:69:71:d0:a7:70:53:57:be:44:7e:ae:64:75:
3f:48:1d:da:9d:82:45:5c:03:0d:1f:1f:cb:3e:13:
32:17:b5:55:55:37:61:78:3a:fa:d6:69:e3:83:9d:
56:fa:6e:87:4a:b7:32:e7:c0:d2:8d:e7:29:e4:21:
52:a0:a7:97:5d:65:42:fd:19:80:86:e9:e1:a7:75:
7f:49:cd:66:92:aa:60:25:b5:c1:ce:4c:5c:86:a0:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:51:E0:79:2B:02:EA:72:EE:9C:79:8F:64:0D:16:AE:D5:0A:DE:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7C04050A0C811EF99141868762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.11.0/24
Signature Algorithm: sha256WithRSAEncryption
63:6b:2f:48:8c:56:cc:9c:5b:cb:55:f2:e6:2b:bf:8b:0f:0a:
6c:44:29:db:3d:2e:ca:91:18:a2:a7:42:b2:36:bc:11:12:7e:
97:1b:e1:42:2f:45:20:9a:b4:69:59:98:78:e8:72:c2:4c:49:
2c:bc:47:0f:ce:d1:a4:ad:6c:4b:c8:83:9d:33:f1:77:99:5f:
48:bb:32:de:fa:e4:ca:bb:69:d7:8f:f3:ca:09:c6:ef:49:d6:
36:e5:e3:33:0d:65:f0:46:20:cd:d9:c0:8d:be:f9:37:43:02:
63:e1:0c:5c:ac:ee:48:c2:88:7d:a2:d0:1d:b9:6c:08:2e:40:
3f:17:15:78:33:57:fa:fa:c3:87:32:c9:34:1c:52:ab:0b:71:
ba:24:4f:46:98:c4:65:d7:22:fd:4f:a5:7c:49:a4:b7:5c:21:
32:86:27:21:ef:10:82:60:b3:c6:f3:2c:b0:6a:e1:ad:02:33:
fd:3e:00:6b:8b:6d:17:38:69:98:5d:92:3b:dd:e4:83:8f:65:
d4:ee:4c:eb:ad:3c:77:14:8f:d2:f5:f0:c6:20:ce:b4:d3:58:
7b:d0:26:65:a6:68:28:aa:24:27:2d:26:68:28:d4:84:4c:60:
cf:a3:40:e0:07:ef:59:ac:14:90:13:2a:0e:6d:af:6d:bc:ff:
3f:d1:17:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:49 2024 by rpki-client on console-ams.rpki-client.org