Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF9AA9B6767511EFA2B7C7AC762E951A.roa
File: FF9AA9B6767511EFA2B7C7AC762E951A.roa (raw, json)
Hash identifier: Xa47bt9o4VyruVb2pLrdk5U4LBVMd5AllK4KAvlT3co=
Subject key identifier: 12:3F:91:A9:A7:B7:78:75:8A:21:87:D6:91:FE:92:D3:27:75:5A:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B82F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF9AA9B6767511EFA2B7C7AC762E951A.roa
Signing time: Thu 19 Sep 2024 10:57:44 +0000
ROA not before: Thu 19 Sep 2024 10:57:41 +0000
ROA not after: Fri 08 Aug 2025 10:57:41 +0000
asID: 133199
IP address blocks: 156.245.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47151 (0xb82f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 10:57:41 2024 GMT
Not After : Aug 8 10:57:41 2025 GMT
Subject: CN=66ec03a8-8608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:7d:2a:0b:e4:e4:b7:d8:17:75:f6:80:2b:
bd:6f:23:4f:64:be:cf:80:7e:72:1e:b6:f7:35:aa:
68:32:ac:b0:d5:ac:09:5f:a9:74:0a:04:2c:d4:88:
35:5d:e4:e8:35:4c:a2:bf:01:2b:71:5d:37:a8:5c:
d5:67:aa:03:55:76:6c:38:e5:e3:49:ea:d2:8d:b0:
8a:13:86:f3:53:c1:05:aa:3f:e4:7d:86:87:89:b0:
04:46:97:0f:8f:b7:d6:c3:d2:1f:e9:8e:b5:d2:14:
3c:d2:1e:fc:95:b2:c7:a4:80:da:3c:f8:26:5b:83:
a8:8c:ce:57:ec:4c:df:b1:07:42:b3:d9:48:14:0f:
2d:c1:54:bd:94:fe:07:b2:d4:6d:9c:0a:07:0a:e7:
10:93:8e:0f:e8:9f:71:6c:c2:a7:69:6f:3a:97:c5:
a6:3b:d9:a2:16:e4:4e:36:3d:a3:81:3c:be:73:23:
8c:75:d7:9a:ed:51:f4:ff:ea:17:77:4a:05:b2:af:
db:71:97:0b:55:d7:71:3c:54:51:43:0d:bf:1a:33:
44:4a:2c:2b:81:82:45:43:79:f4:c3:5b:72:12:8a:
84:61:cf:a4:f1:08:b6:96:52:37:55:90:bb:20:60:
a1:8d:e5:8d:98:cf:8d:c8:c4:54:7d:2f:c0:bb:67:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:91:A9:A7:B7:78:75:8A:21:87:D6:91:FE:92:D3:27:75:5A:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF9AA9B6767511EFA2B7C7AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.11.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c4:38:51:5b:b3:79:b5:22:d1:2d:9e:26:a1:82:6d:5f:53:
42:23:ec:90:c5:81:e1:a7:b4:20:99:fe:a1:57:0e:86:e5:6f:
db:60:0f:89:7c:94:48:9d:f8:d8:31:e4:5b:4c:57:bb:8f:eb:
85:f1:80:37:f4:82:88:e5:b9:03:2e:d8:67:ab:77:32:38:da:
5e:20:59:56:af:bd:43:0b:f0:4e:22:fb:ab:6d:63:1f:2a:4d:
d7:de:9e:e4:e6:5f:4e:4f:18:3d:d0:09:95:09:55:9d:26:95:
eb:ec:38:a0:09:37:ad:85:65:fd:b0:68:b8:a5:74:8e:07:a5:
68:c1:b1:4d:a4:4e:dc:12:f5:60:98:c6:10:ba:6e:2d:0b:c2:
84:4c:5e:56:18:64:2d:34:62:03:89:ed:28:e3:46:7b:76:06:
2b:ba:54:0c:3f:d4:de:a7:9f:63:c5:8f:57:5c:65:01:4f:6e:
2c:df:8b:79:56:74:3b:92:9e:b1:35:75:5a:65:12:65:1f:54:
c7:40:8a:59:c0:21:a1:94:ee:04:c4:c3:8b:10:38:b5:d4:4c:
5c:91:7d:3b:6b:65:f7:d0:7c:55:18:99:eb:0f:27:99:a3:02:
1d:57:84:78:3c:6c:06:d2:f9:f1:bc:27:7c:a7:65:05:59:94:
bf:29:0e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:58 2024 by rpki-client on console-ams.rpki-client.org