Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F45C6E56A4C211EF89B2A69E762E951A.roa
File: F45C6E56A4C211EF89B2A69E762E951A.roa (raw, json)
Hash identifier: MPQ3RICP2ZjTvtl2F0xZr3WV9Owpda5YuKwfHSozewY=
Subject key identifier: 5E:15:EA:29:D7:28:06:36:37:F0:E3:E6:3F:6B:19:D3:C9:98:51:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D475
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F45C6E56A4C211EF89B2A69E762E951A.roa
Signing time: Sun 17 Nov 2024 09:04:30 +0000
ROA not before: Sun 17 Nov 2024 09:04:26 +0000
ROA not after: Mon 25 Nov 2024 09:04:26 +0000
asID: 55355
IP address blocks: 156.225.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54389 (0xd475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:04:26 2024 GMT
Not After : Nov 25 09:04:26 2024 GMT
Subject: CN=6739b19e-946a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:ab:ed:2a:20:d5:f0:85:bc:04:d5:04:a0:
9f:cf:8a:dc:d5:80:9e:2a:4f:79:31:c1:02:65:f4:
f4:6e:90:cb:f0:cd:b3:e1:ae:c2:d4:51:78:10:2b:
3f:16:6d:ad:2b:6f:e1:85:db:e7:ae:a0:5c:17:c0:
15:3f:5c:35:d7:7a:5f:2e:46:76:d7:02:fd:b7:49:
76:bd:f1:2e:62:28:36:f2:05:4f:a7:04:a1:9d:85:
dc:b2:ba:f4:9d:af:d5:07:50:4b:3a:92:b2:1c:a5:
26:dd:1d:95:24:47:e3:ef:16:4b:e9:45:63:70:4b:
ae:96:db:ae:59:f6:80:5f:a8:b6:51:01:e3:43:78:
f6:09:fd:42:d6:00:b3:6d:9c:f5:28:d9:be:a1:da:
9f:df:c5:50:ff:fa:61:78:ab:d2:50:b4:30:84:da:
3c:e9:6a:39:69:7d:26:49:75:6d:16:a3:6c:50:df:
89:51:8f:eb:53:4b:b0:be:50:b6:00:c1:9d:55:68:
0a:45:a5:89:7d:54:ac:df:af:55:58:11:5f:b8:dd:
8c:86:e1:48:0c:76:91:27:81:30:c8:2c:58:a8:d9:
1b:ce:a7:6e:a5:3c:be:38:04:07:5f:8c:6a:e4:68:
b9:2e:03:62:62:b4:e6:3b:be:61:62:ed:72:49:73:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:15:EA:29:D7:28:06:36:37:F0:E3:E6:3F:6B:19:D3:C9:98:51:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F45C6E56A4C211EF89B2A69E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:39:99:21:4e:0d:42:9e:b4:05:e0:bf:e1:79:76:b8:cb:fb:
d6:2b:26:58:b2:51:c1:cf:f1:ee:e6:89:b1:8e:04:e3:bb:e0:
8e:1e:05:84:62:35:13:94:1a:c8:21:c3:08:d5:6c:c3:42:60:
c8:08:51:e4:d4:a8:cf:1b:49:3e:21:e2:e9:4d:ba:09:47:28:
e1:e9:a9:77:7e:18:48:12:e8:92:69:60:06:ae:2f:34:32:67:
28:36:08:8d:d2:86:1d:e2:e7:68:5c:a0:d0:9a:4d:e5:ec:27:
8b:1c:1e:1a:3c:a9:d8:7b:44:b5:75:26:6c:6f:6d:17:f4:69:
00:a5:ee:37:0f:75:e5:9f:71:c9:59:56:d3:ed:f0:8b:45:dd:
d1:65:7e:d2:a1:91:1f:85:56:70:cc:36:dc:d6:69:5c:d0:83:
0a:53:62:6a:88:06:0a:0f:3b:7b:69:00:e5:a7:61:19:29:15:
a1:fc:82:09:9f:1e:90:5d:a8:77:1b:a6:64:5d:6b:56:6d:fc:
a0:ec:25:9e:3a:40:d0:33:65:97:4f:a5:70:1b:29:3c:a7:20:
ee:b1:e3:d1:9b:d0:b5:2f:b9:98:4d:ae:e8:1f:1c:dd:56:06:
39:8b:70:0e:8d:7a:12:af:a6:5f:2b:86:1d:ba:16:c2:c6:bf:
43:24:44:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:56 2024 by rpki-client on console-ams.rpki-client.org