Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFAD3B085EED11EFB5CE977B762E951A.roa
File: EFAD3B085EED11EFB5CE977B762E951A.roa (raw, json)
Hash identifier: fpSM6WoLNFiBhrFSDhTTTxsAE0dvO5LqRR8Wy8b+HDE=
Subject key identifier: 1B:E0:C5:13:31:24:7F:41:35:02:30:74:30:FA:E9:85:9F:00:CB:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A9B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFAD3B085EED11EFB5CE977B762E951A.roa
Signing time: Tue 20 Aug 2024 12:15:50 +0000
ROA not before: Tue 20 Aug 2024 12:15:37 +0000
ROA not after: Tue 27 May 2025 12:15:37 +0000
asID: 399077
IP address blocks: 156.251.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43446 (0xa9b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 12:15:37 2024 GMT
Not After : May 27 12:15:37 2025 GMT
Subject: CN=66c488f6-e958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:c5:69:cd:72:59:8c:61:56:54:93:76:fa:
09:96:7e:c1:51:ef:44:95:5b:e5:fa:4d:8b:bf:9e:
bb:12:c2:8b:cc:a3:e9:75:0a:28:38:ec:76:a5:d2:
a9:36:8e:c9:34:24:d4:cf:7d:78:5b:23:cf:0e:af:
d9:e0:c8:0d:d2:8d:b9:d0:7c:a9:8f:a4:63:4b:7d:
e6:5c:38:be:b7:be:de:6a:25:58:e3:13:a1:5f:0e:
9e:8d:86:53:45:1c:28:d5:bd:4d:fc:62:92:f5:43:
33:50:80:ab:5e:1a:69:2c:21:55:be:fe:8c:6d:99:
4f:2c:80:96:4f:a6:cf:9a:75:0c:eb:0f:68:7b:65:
19:69:af:5d:6d:fa:13:51:ef:94:ea:20:87:99:4e:
9d:e0:7a:47:a3:40:65:d9:34:ab:31:db:d9:90:72:
50:07:a1:85:9e:68:a4:e1:61:ab:b2:78:40:64:26:
72:36:11:0c:b0:0f:db:6d:08:fb:76:bd:7d:92:f2:
73:21:bb:3f:0f:cf:47:7a:7a:60:a1:8f:32:ea:38:
4b:73:ff:9c:b3:6a:e6:79:7c:eb:78:5a:70:31:29:
95:95:22:ba:9e:49:8b:5b:a2:58:7e:98:65:8a:0c:
d1:bd:18:f0:a1:e5:f2:a1:bb:c6:3d:13:60:46:ee:
be:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E0:C5:13:31:24:7F:41:35:02:30:74:30:FA:E9:85:9F:00:CB:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFAD3B085EED11EFB5CE977B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:96:ab:7d:69:ed:54:97:15:40:10:29:75:b3:ad:50:4c:09:
3a:33:8d:b7:4e:8c:a0:ae:e3:7d:87:16:15:be:23:07:af:cb:
4e:0f:16:64:70:de:ae:41:71:0c:f0:e4:a8:36:20:24:9f:ce:
11:be:9f:ca:c5:ea:c7:73:1b:a5:b6:64:0e:b8:4b:fa:38:e7:
c2:63:e2:67:cb:5a:60:9f:59:0c:dc:7c:35:76:4a:b4:27:b9:
1f:02:d5:90:fe:33:d6:91:e1:90:50:bb:04:a2:7b:96:35:51:
17:0a:f0:46:6c:a8:db:8b:05:ed:9e:c8:13:13:ed:7d:c8:f2:
70:89:c9:6d:80:78:c4:62:8b:2b:ed:d6:e7:5c:71:d9:5f:65:
23:f4:b8:72:2b:fa:3b:9d:41:a3:5d:ab:a7:37:66:48:58:d1:
72:89:ac:aa:11:47:f6:2d:75:9e:3d:d2:3b:7a:54:f7:df:0a:
1a:c4:a1:3b:1e:6b:75:e4:fe:9a:f3:29:6f:84:1d:4a:57:cb:
cf:ef:23:31:99:33:12:e1:bf:7d:f1:a4:05:e7:fd:3b:6c:86:
b3:5b:27:19:c4:f0:e7:20:ae:1d:77:ab:57:e7:3b:b6:19:fe:
16:6c:70:42:18:35:eb:d8:36:e4:47:57:8d:46:7c:20:2e:11:
98:3f:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:53 2024 by rpki-client on console-fra.rpki-client.org