Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/023DECCE87C811EFB252BEBE762E951A.roa
File: 023DECCE87C811EFB252BEBE762E951A.roa (raw, json)
Hash identifier: AQpGRJF5CUlHOfpKSwwMURsLFmLJFl3rmA03W+qe150=
Subject key identifier: F8:8E:B9:50:46:5C:FA:D5:A3:C4:D9:4D:E6:3B:AF:4D:6B:5C:C7:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C3CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/023DECCE87C811EFB252BEBE762E951A.roa
Signing time: Fri 11 Oct 2024 11:57:37 +0000
ROA not before: Fri 11 Oct 2024 11:57:32 +0000
ROA not after: Wed 08 Jan 2025 11:57:32 +0000
asID: 136907
IP address blocks: 156.240.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50127 (0xc3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 11 11:57:32 2024 GMT
Not After : Jan 8 11:57:32 2025 GMT
Subject: CN=670912b1-be53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:59:43:86:e3:fe:8b:9b:a2:3f:d3:21:37:
9b:93:f9:c5:a1:32:77:c1:c1:8d:1f:ff:53:55:a9:
3e:01:40:49:28:2a:75:2f:73:63:46:fb:17:5c:7e:
97:71:c1:15:2a:93:2f:51:3d:3b:f4:98:84:ae:51:
1f:61:41:f3:f0:6d:e0:71:7c:a4:5a:d2:cf:4a:3c:
fd:0f:5b:86:f3:82:eb:27:2a:b8:7a:1e:06:2f:91:
f7:12:b2:4b:f7:7c:6c:14:ac:e4:b1:b6:6a:ed:67:
9b:08:77:ef:ef:e2:3e:8b:88:ca:72:c3:97:1c:45:
47:d3:ef:eb:4d:3d:fa:73:2a:5f:6a:90:50:de:e1:
68:12:c7:f4:69:2e:05:6c:a7:a8:a8:d4:7a:96:d5:
82:4c:55:13:8f:cc:9b:e4:0b:1f:37:08:c6:ab:fa:
0e:4c:e5:8d:6d:e3:64:46:14:fa:07:b6:ce:61:fd:
7a:28:c5:08:d3:04:60:46:2b:31:27:d9:45:32:4c:
6d:5b:14:83:75:ca:46:0b:dd:fd:0d:2b:a5:80:65:
72:82:16:21:4a:bc:bc:87:a3:77:e0:24:be:5d:20:
3e:9c:32:47:50:03:c1:c3:eb:89:29:ff:c4:d2:a7:
71:81:5d:c8:96:81:91:c8:c2:e9:cb:de:73:73:38:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8E:B9:50:46:5C:FA:D5:A3:C4:D9:4D:E6:3B:AF:4D:6B:5C:C7:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/023DECCE87C811EFB252BEBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9a:50:fd:ac:49:c9:74:85:6e:44:4c:11:b8:f9:10:44:39:e3:
bd:14:87:f4:19:c2:21:9d:60:8f:62:54:2d:4d:30:39:b5:a2:
d6:20:c2:77:a2:8e:63:96:ed:03:bc:e5:20:c4:cd:78:c2:18:
b9:ec:d2:a1:e7:d7:e2:05:f0:bc:05:b8:19:af:b9:f5:78:ea:
be:e7:8b:c3:87:c3:78:d9:86:39:05:dc:85:71:78:59:27:d1:
e4:ed:9c:0c:c4:ee:a5:6e:03:04:c7:da:fd:6c:98:e5:e7:e6:
bf:08:1e:e5:77:97:68:cb:12:41:8f:86:aa:a4:33:34:2b:0e:
f3:7c:81:a0:14:70:37:af:a9:8e:11:68:13:58:0f:31:1c:ef:
5e:11:1a:0c:75:ae:d9:58:6d:fc:44:a6:f7:1c:e2:3a:91:7e:
ff:b1:4e:e4:db:2d:9c:49:84:65:bb:1d:06:3f:71:a8:49:69:
d4:2c:4d:99:13:b8:f9:32:cd:40:bd:27:f8:b1:c1:87:a2:95:
58:dc:2d:16:33:3c:ea:cc:b7:cc:e9:b8:e7:88:6a:09:91:62:
52:76:04:de:63:07:1c:5b:57:52:cc:14:f0:49:90:6b:7c:61:
c3:9b:3d:c3:66:95:4d:4c:e3:a5:28:7a:e0:9c:0d:60:38:90:
c7:81:84:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:16 2024 by rpki-client on console-fra.rpki-client.org