Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3B9252A660311EFA7012A68762E951A.roa
File: D3B9252A660311EFA7012A68762E951A.roa (raw, json)
Hash identifier: LCNghGhhy3lck6dfyUp4fhrNf2GjDyAqEkKy1HotoKg=
Subject key identifier: 46:49:C0:41:FF:36:07:2D:5F:DD:5A:6C:AF:DF:D9:58:0F:CD:9C:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AF08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3B9252A660311EFA7012A68762E951A.roa
Signing time: Thu 29 Aug 2024 12:40:10 +0000
ROA not before: Thu 29 Aug 2024 12:40:06 +0000
ROA not after: Tue 03 Dec 2024 12:40:06 +0000
asID: 135377
IP address blocks: 156.229.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44808 (0xaf08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 29 12:40:06 2024 GMT
Not After : Dec 3 12:40:06 2024 GMT
Subject: CN=66d06c29-bdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:4f:36:11:80:73:3b:db:8f:16:fc:82:46:
62:85:b5:fc:a9:e1:c3:6e:ee:90:e2:c7:31:fc:6a:
b0:e8:c9:25:7d:3e:c7:ae:ab:6a:69:32:20:04:9f:
4f:65:29:e8:1f:95:bf:62:14:07:88:a5:01:2a:ea:
5f:e9:8f:27:41:31:4d:dc:e7:9c:52:05:36:78:22:
85:df:a7:ec:67:1e:41:af:16:cc:5a:96:c7:a3:ad:
36:a4:1d:f7:1a:c5:e7:fe:b6:82:2a:ad:6a:2a:99:
24:99:62:fb:71:cd:b7:9f:46:34:49:0f:ce:3f:af:
e3:e7:d5:68:37:d7:c0:47:d0:64:60:28:98:7f:5e:
cd:ca:74:ab:12:f8:33:4c:02:c2:b3:a1:00:c9:46:
16:d7:9f:d4:38:71:7e:8b:d9:00:0e:f0:9c:8a:13:
b4:1d:e6:ec:2f:0e:57:2c:6b:70:f7:42:11:41:f9:
13:c3:8e:bf:61:5c:a7:34:8b:be:34:a7:21:7c:d9:
3a:8c:e0:81:ee:91:6b:3b:67:5c:5c:f6:c3:78:b4:
ed:be:22:be:eb:f8:1a:64:32:99:92:5f:15:c4:4a:
2c:91:51:05:43:2c:f5:3b:c8:bd:5f:b1:78:f9:0e:
d0:c1:b4:55:a0:c4:57:1f:be:ad:38:90:0e:9e:93:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:49:C0:41:FF:36:07:2D:5F:DD:5A:6C:AF:DF:D9:58:0F:CD:9C:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3B9252A660311EFA7012A68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.22.0/24
Signature Algorithm: sha256WithRSAEncryption
12:11:59:70:f1:49:c8:89:08:95:05:bd:74:fe:ee:03:38:88:
35:7c:e9:99:9d:4a:d7:92:31:1c:58:2c:09:57:8e:97:76:af:
a8:96:e8:4c:c8:a3:36:ec:88:4c:c8:fc:70:eb:b0:70:be:67:
73:aa:20:f4:e4:3d:d3:84:68:e7:88:32:1c:1e:03:91:9e:e3:
0c:85:d1:53:d9:2b:2f:16:89:4b:0a:2e:e8:90:23:f3:79:e6:
1d:dd:88:ed:e9:48:2b:24:c6:41:02:0d:de:1c:11:80:ec:b2:
e1:bb:0c:b2:68:83:68:ac:72:ef:29:13:e2:b3:1f:ae:6a:3e:
25:f1:df:d8:d9:85:d5:4d:bb:16:33:43:d5:13:40:e4:7e:80:
41:38:d6:3a:d4:5d:ad:2e:84:87:8b:7d:12:f4:ae:a6:1a:74:
90:4f:ff:6c:ca:22:1f:fe:83:4e:92:a0:ad:7c:07:00:77:3f:
cd:d6:d3:da:6a:8d:94:ef:e4:6c:5f:4e:6d:fa:d7:c3:09:d2:
80:8c:1b:eb:ad:d5:8f:ac:8b:f7:ff:8d:94:e8:de:ca:9e:70:
3e:82:a6:55:4e:e4:68:02:f4:20:08:bf:05:ab:d7:1b:9f:73:
56:e7:21:6e:e5:6b:ff:38:91:05:0e:34:29:de:a0:92:0b:f5:
76:b7:c7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:49 2024 by rpki-client on console-fra.rpki-client.org