Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/019F60A2983711EF83C80067762E951A.roa
File: 019F60A2983711EF83C80067762E951A.roa (raw, json)
Hash identifier: 6Ak6iIMynP41Rm2m11q3vwDEOcZv4/lc6jTdNr0YCLs=
Subject key identifier: C2:E9:A1:FD:A5:4A:44:B7:E4:69:5E:05:AE:F4:B1:04:44:41:B2:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/019F60A2983711EF83C80067762E951A.roa
Signing time: Fri 01 Nov 2024 09:52:29 +0000
ROA not before: Fri 01 Nov 2024 09:52:25 +0000
ROA not after: Mon 25 Nov 2024 09:52:25 +0000
asID: 137547
IP address blocks: 156.245.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52107 (0xcb8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 09:52:25 2024 GMT
Not After : Nov 25 09:52:25 2024 GMT
Subject: CN=6724a4dd-f8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:e2:6a:40:7c:cf:19:b7:34:b8:cc:9a:8a:
3a:25:a7:7a:b2:ec:bf:89:1e:57:d2:44:f7:3d:e9:
3c:f1:87:9a:73:14:0f:7f:9c:21:47:f8:c8:59:e2:
5a:33:b1:55:fa:9c:c0:fd:38:74:22:27:70:1a:30:
96:72:df:86:aa:97:69:fa:93:77:37:29:99:94:d7:
95:d2:53:fd:0c:0b:72:08:81:26:56:44:20:a2:cc:
fd:3a:bf:7e:b0:8d:5c:7e:ee:b4:bc:52:22:c9:01:
4a:21:be:3f:82:4d:a1:b9:7f:2f:7b:88:85:1a:3b:
06:0f:43:7b:ca:3f:6a:25:fe:0f:20:ed:81:de:27:
be:f6:ec:80:28:e5:e4:ad:a9:cb:38:f0:f5:f8:3e:
d0:50:47:4d:17:71:d8:75:b9:23:25:49:72:a4:6f:
34:f2:e4:24:a9:0a:61:fc:ba:a2:90:73:12:29:2d:
6a:53:14:ca:00:78:4a:fc:74:5a:f0:1f:1f:df:09:
b5:a8:6c:8c:bf:8e:2d:55:49:b8:1c:66:3b:35:3f:
9a:a8:71:d1:6e:33:15:4e:88:8f:fc:be:66:fd:9b:
ef:03:bd:61:5e:39:4e:79:e9:a8:1b:36:e9:06:bc:
ad:a7:1b:d0:2e:80:21:60:4d:d7:26:41:50:df:54:
39:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:A1:FD:A5:4A:44:B7:E4:69:5E:05:AE:F4:B1:04:44:41:B2:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/019F60A2983711EF83C80067762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.188.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:36:30:2f:96:37:4c:5f:42:75:11:b8:89:78:a4:56:5d:e4:
b9:af:8c:76:2d:01:74:23:d4:fe:0c:4f:a1:b9:7a:df:c3:85:
c3:82:88:20:9d:88:18:d4:96:fd:f5:e8:6c:f2:b9:68:da:cc:
5e:cf:89:ba:25:7e:9f:84:78:df:5e:58:b2:1d:9f:b5:02:a5:
5d:e3:2d:67:e4:0b:b7:a3:7b:2a:5b:92:59:d4:92:ff:aa:39:
5e:2f:54:d7:c3:ac:5a:fc:4f:e3:60:a6:82:52:e8:f0:74:0c:
14:e1:d5:b0:69:31:51:79:92:d6:44:cc:e9:77:14:82:f6:db:
b8:88:7d:f7:cf:56:9b:5c:dc:c1:65:c0:3f:1a:38:cb:a4:09:
d6:3c:77:06:3b:06:c1:09:b3:70:a7:9b:75:a9:d2:f4:2c:5d:
b5:d8:8b:f4:77:84:93:03:56:fc:ec:72:e7:95:83:aa:77:55:
b1:6c:6e:74:22:a1:e7:68:b8:aa:e0:af:b2:0d:f7:f7:40:9c:
3e:ea:08:41:a9:85:c4:eb:03:99:d0:ac:c0:44:26:0f:91:af:
f3:3e:ce:12:dc:c6:33:e6:4e:53:58:f1:f4:79:78:45:0b:63:
85:9e:53:aa:a4:f9:0f:98:17:81:c9:a9:02:14:a8:89:56:d8:
2c:86:4b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:16 2024 by rpki-client on console-fra.rpki-client.org