Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2D0473A66A511EF8395396B762E951A.roa
File: E2D0473A66A511EF8395396B762E951A.roa (raw, json)
Hash identifier: CWtuf+UrfClZrZfwaxYrXy33Cu1rSZpM/Wj3izZfl84=
Subject key identifier: B1:0C:8B:BB:15:46:3B:78:C6:C8:DA:7C:8E:BB:9C:8C:AE:01:3E:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AFEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2D0473A66A511EF8395396B762E951A.roa
Signing time: Fri 30 Aug 2024 08:00:13 +0000
ROA not before: Fri 30 Aug 2024 08:00:10 +0000
ROA not after: Fri 14 Aug 2026 08:00:10 +0000
asID: 24413
IP address blocks: 156.230.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45039 (0xafef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 30 08:00:10 2024 GMT
Not After : Aug 14 08:00:10 2026 GMT
Subject: CN=66d17c0d-dd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:55:a3:4c:b9:ce:ba:47:6d:3f:1b:fd:02:
bf:a2:30:af:42:b4:53:51:0b:54:65:12:99:3f:78:
61:b1:4c:d4:19:5a:8a:3e:0b:af:e9:ea:44:e3:83:
02:61:82:78:7c:fe:94:0b:01:1d:6d:7e:e7:a9:8f:
71:f0:ab:92:49:70:81:1b:f2:a8:77:7d:26:99:6c:
99:72:4e:12:89:24:a1:79:29:52:5d:7d:9c:8b:62:
30:f5:c9:6e:23:2b:ad:8d:19:2e:9c:6a:67:10:18:
3a:82:b1:6e:a2:92:c5:cd:58:6b:0d:db:f0:c9:04:
0c:65:38:8f:0b:87:36:79:90:7d:ea:c8:39:f5:cf:
1a:4d:a3:89:7a:43:3f:c8:c2:06:5e:99:41:ad:df:
57:9d:54:a9:4e:eb:c3:a4:ce:fa:8b:26:70:4f:5a:
88:6d:b8:77:0f:5c:ee:25:2d:d9:9b:b7:dc:7d:11:
88:89:0d:8c:03:b1:9c:19:b2:78:6d:6e:56:95:f4:
f2:59:85:6d:94:ef:ba:99:74:89:c1:5f:dd:ef:65:
49:7e:17:1f:09:03:e5:03:3d:57:3d:bd:81:0a:5c:
5a:96:65:8a:c9:34:1e:9d:e5:f2:17:31:98:41:ff:
80:ed:eb:20:02:18:5f:94:53:af:61:93:82:ca:55:
77:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0C:8B:BB:15:46:3B:78:C6:C8:DA:7C:8E:BB:9C:8C:AE:01:3E:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2D0473A66A511EF8395396B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.11.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:11:f6:30:b1:06:e6:be:bf:36:7a:0b:04:5e:d1:21:b5:34:
33:6f:aa:d7:21:01:f7:ee:15:77:02:c1:3a:34:fe:eb:5e:60:
21:dc:d3:91:61:76:4e:e6:1e:91:3e:aa:9a:62:2b:32:61:48:
7a:ec:73:ac:45:5a:8c:12:0c:c6:49:85:65:9b:6d:b2:7f:46:
ad:ef:5f:b0:e1:bd:c4:7d:a2:34:b6:ae:71:f3:e5:ae:f9:41:
4c:bb:54:be:6a:5b:70:5b:aa:38:16:64:c3:fb:5e:a9:c8:b0:
8c:be:ec:cc:e2:27:09:ed:72:dd:54:3f:e3:fc:66:db:e1:19:
54:64:9d:df:17:aa:1a:23:83:eb:76:8b:32:c3:1a:dd:45:3d:
9e:2e:9e:43:21:9c:0a:8e:83:24:1d:1c:52:28:61:83:50:ca:
1c:44:cf:aa:c6:e9:cb:02:ba:c5:00:69:6b:43:f9:36:8d:4c:
73:6d:13:b8:41:c9:b5:c7:4d:b0:5f:55:0d:82:f8:2c:3a:93:
58:be:27:9e:1b:b4:b5:5f:00:b8:75:25:b1:6e:4e:11:a8:d2:
16:19:8b:e0:ef:2d:0c:95:13:40:b1:80:03:b7:ef:67:95:aa:
3a:09:0d:3d:c4:5b:75:1f:7f:1e:0c:be:b6:ff:74:99:23:6d:
1a:e3:be:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:53 2024 by rpki-client on console-ams.rpki-client.org