Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E156E288983711EFAD07366D762E951A.roa
File: E156E288983711EFAD07366D762E951A.roa (raw, json)
Hash identifier: wHAGnzeuX6bG6V5iJnN+y6m4Pul1UNgnAIFo5hhdV9M=
Subject key identifier: DA:62:D5:2B:0D:D4:DA:6B:E0:7A:8D:5F:26:29:C5:81:1E:C0:1A:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E156E288983711EFAD07366D762E951A.roa
Signing time: Fri 01 Nov 2024 09:58:44 +0000
ROA not before: Fri 01 Nov 2024 09:58:41 +0000
ROA not after: Mon 25 Nov 2024 09:58:41 +0000
asID: 137547
IP address blocks: 156.245.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52119 (0xcb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 09:58:41 2024 GMT
Not After : Nov 25 09:58:41 2024 GMT
Subject: CN=6724a654-fb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bb:67:39:48:d5:09:bd:a5:72:99:00:95:f1:
82:d6:d6:f3:44:51:77:e6:3a:05:9b:f3:10:89:62:
9d:57:9c:58:c4:12:bb:d5:42:4c:74:1e:3b:7d:1c:
08:ab:ea:c7:8e:28:4d:d8:93:51:8c:53:56:86:25:
39:24:08:29:8a:81:62:fc:51:f6:12:9b:5c:b9:c7:
03:a2:57:6a:23:c3:a0:c3:58:8c:60:a8:cd:36:bf:
2d:b2:bf:c0:0a:c1:21:49:b6:d9:43:01:92:fa:7c:
dd:11:db:d3:13:4f:83:ad:b2:4c:9b:43:bb:40:70:
57:8f:4a:c2:49:fb:1f:de:4b:13:c0:7e:65:ec:b1:
94:bc:05:f5:35:27:f1:89:91:de:57:fe:39:83:fc:
5d:da:44:03:e3:4f:05:cc:f8:d7:8a:3f:e5:d7:12:
96:43:70:83:e3:12:07:5e:8c:2a:1d:ec:2e:f6:66:
f6:51:94:2d:f2:cb:60:75:2e:bc:d5:f2:d1:72:24:
21:0a:3f:14:24:32:72:79:b0:42:c9:1d:3e:53:c1:
9f:04:86:41:a5:99:f8:0b:20:04:c0:ae:2b:30:b1:
24:ca:ea:4f:f3:dd:50:62:d3:1f:dd:8e:e7:41:b1:
a6:9c:2a:8f:29:1b:3f:16:dd:7f:35:7e:cf:5f:d6:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:62:D5:2B:0D:D4:DA:6B:E0:7A:8D:5F:26:29:C5:81:1E:C0:1A:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E156E288983711EFAD07366D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.210.0/24
Signature Algorithm: sha256WithRSAEncryption
66:71:a5:02:1a:7b:11:ee:4b:dd:6d:b9:01:d9:cb:c2:0d:6c:
a5:1b:fb:bc:d5:27:f2:91:a7:68:06:2d:43:02:c3:92:4e:bf:
aa:d3:44:7b:a7:00:73:65:84:a9:16:e0:6a:ee:e2:aa:f0:b9:
f5:be:1f:7b:e8:41:46:e7:a2:77:6b:c2:50:d1:74:e9:41:19:
72:73:52:23:a8:2f:ac:8c:60:88:fd:18:04:ec:51:d7:d8:e4:
c3:70:a8:78:37:16:e3:f2:93:92:ab:13:9b:d1:90:e3:a4:93:
46:b7:24:83:2f:10:c7:5f:ef:7c:4f:0f:c1:a9:27:c9:c7:39:
0b:72:e0:e6:17:0f:e0:4f:b2:f7:99:19:87:eb:c6:5f:d6:4c:
96:8d:85:b5:b4:b4:2f:fd:5e:de:1f:52:66:ff:c5:6c:30:6a:
c6:58:e3:01:96:14:31:ab:74:3c:34:7c:0b:a9:45:fd:f1:4f:
3f:65:78:d3:5e:b2:a3:d3:1b:6a:93:0b:5e:49:01:09:ec:0a:
51:ba:4b:d0:dc:e5:52:93:bc:93:65:7e:c3:b6:86:5a:fc:be:
d9:ff:b9:d2:0c:5d:f1:b2:9c:2b:05:5b:fa:85:c5:7f:cf:0a:
f6:dc:d7:1b:b8:ef:d2:29:e1:07:24:75:59:6b:7a:fe:5c:51:
e8:b0:14:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:53 2024 by rpki-client on console-ams.rpki-client.org