Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F70136729D1111EFA8B27488762E951A.roa
File: F70136729D1111EFA8B27488762E951A.roa (raw, json)
Hash identifier: SH0M6+vUfr/hXHY8Ldh8uXhqXY+rUv6qw61dZdDDjgA=
Subject key identifier: 4E:19:99:CA:59:C0:E8:B1:7B:16:8A:31:CB:1A:8D:9A:EE:DF:57:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CFD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F70136729D1111EFA8B27488762E951A.roa
Signing time: Thu 07 Nov 2024 14:09:56 +0000
ROA not before: Thu 07 Nov 2024 14:09:52 +0000
ROA not after: Fri 13 Jun 2025 14:09:52 +0000
asID: 139811
IP address blocks: 156.249.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53204 (0xcfd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 7 14:09:52 2024 GMT
Not After : Jun 13 14:09:52 2025 GMT
Subject: CN=672cca33-15db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:c7:4f:b6:91:e6:bb:05:ac:83:a0:da:55:
3f:76:70:ea:fd:15:f1:c4:45:5d:f2:cb:b7:a7:36:
ac:10:0a:db:ac:d7:3d:fd:ae:62:22:c9:5b:95:76:
23:05:ed:a6:ac:a2:75:99:72:de:73:6b:4a:21:1b:
3d:b9:b1:2b:9e:32:57:36:77:61:bc:72:b5:22:74:
60:86:88:d8:7a:c7:75:2e:6e:4d:d1:12:b7:63:5c:
d9:da:3f:c0:a4:32:d8:e9:f7:10:be:23:47:9b:2d:
d2:af:9e:1b:f9:fd:33:f4:7b:66:73:06:df:9d:eb:
56:cc:86:55:0c:ec:94:7c:b2:20:3c:6d:2c:19:fb:
e1:99:39:af:13:25:c1:a1:34:95:a2:8a:a6:c4:80:
ca:29:88:cd:b5:ce:79:1c:50:d3:d2:ba:36:44:79:
9f:95:7f:dc:55:37:82:f0:78:dd:3b:b1:19:79:c1:
40:6d:7b:c6:59:bc:55:a0:88:96:f9:d5:e0:49:08:
fa:39:c5:dd:83:56:19:19:09:e9:5d:56:3f:83:4b:
9c:a6:88:fa:6e:63:49:ac:e0:36:84:2e:d6:83:17:
6a:79:07:e9:da:a3:7e:ba:2f:ee:ef:2b:b7:08:5b:
2e:70:b9:da:cc:8e:20:c6:e7:e0:2f:c8:e0:f9:16:
82:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:19:99:CA:59:C0:E8:B1:7B:16:8A:31:CB:1A:8D:9A:EE:DF:57:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F70136729D1111EFA8B27488762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.24.0/23
Signature Algorithm: sha256WithRSAEncryption
65:4d:fc:b6:25:c4:8b:4c:67:88:60:02:c9:98:1a:65:f2:95:
53:a6:54:f3:74:ec:c4:b4:e4:5c:8a:34:f6:52:a7:35:c9:63:
24:6e:e7:bb:34:5d:9d:50:b2:e0:b3:72:70:86:03:b3:62:45:
1a:56:83:3d:a5:da:41:11:a4:09:7f:0f:6b:3b:9c:14:52:ad:
fd:e4:70:20:8b:6e:7d:72:86:97:66:c9:02:d8:6a:f4:8b:0e:
a7:44:bd:fc:15:40:cd:27:1e:26:c1:cd:3f:30:19:63:c8:98:
c1:e9:0c:b6:1b:47:44:97:d4:06:3b:cd:58:5f:56:e6:94:50:
8c:c1:c4:e5:ec:c9:d1:4f:98:0e:0d:23:64:a7:04:af:43:73:
9a:4a:d2:31:c0:7a:df:aa:bc:ce:52:e2:9e:5f:ba:9f:73:5e:
50:4e:ac:7c:21:63:18:41:3f:b4:b0:fa:f2:a0:c7:cd:8b:c5:
27:39:ab:b9:9a:c5:bf:63:dd:c8:cf:33:f0:8b:e7:da:83:85:
a1:7f:3c:28:bf:1f:b9:19:98:ba:7d:62:1e:92:0a:a7:24:20:
a3:54:4b:7e:39:0c:b4:47:86:13:bd:60:b0:de:ed:54:2b:4c:
cd:72:6e:37:c4:cb:c1:f9:45:d8:77:1c:66:f2:af:04:0f:ae:
fd:92:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:57 2024 by rpki-client on console-ams.rpki-client.org