Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CF517EEA4D511EFB211D990762E951A.roa
File: 0CF517EEA4D511EFB211D990762E951A.roa (raw, json)
Hash identifier: IaB4DQcK7mTV980LWljbRSST49ci193KYhwGfBfjrr8=
Subject key identifier: 37:29:99:9F:78:BA:BA:8E:8B:CF:A8:1A:7F:7D:EB:30:2E:64:67:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CF517EEA4D511EFB211D990762E951A.roa
Signing time: Sun 17 Nov 2024 11:14:02 +0000
ROA not before: Sun 17 Nov 2024 11:13:59 +0000
ROA not after: Wed 27 Nov 2024 11:13:59 +0000
asID: 39600
IP address blocks: 156.238.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54515 (0xd4f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 11:13:59 2024 GMT
Not After : Nov 27 11:13:59 2024 GMT
Subject: CN=6739cffa-fca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:62:bf:8a:f5:42:59:77:a5:e9:4b:1c:87:
0a:08:0b:ca:80:f2:9c:57:92:ae:dd:67:c2:2d:12:
6b:c7:69:58:43:39:28:ef:87:a8:ff:cb:a0:bf:7b:
fd:12:93:05:1c:72:db:7c:67:88:d7:d3:87:54:a4:
9e:25:94:f4:1e:4a:de:42:03:2c:1f:f5:c8:2a:79:
e4:64:ad:bc:f4:ea:86:e2:b5:b0:db:c3:ec:02:04:
80:4a:9d:f1:f4:b8:b9:ca:8e:8b:43:83:02:c9:43:
2f:d7:84:50:6c:0a:ae:71:b1:a2:4a:ad:da:32:22:
0b:57:56:62:10:fd:ec:76:a8:e5:8a:24:12:00:c1:
79:86:bd:e8:f9:cf:ba:44:f0:51:34:c7:b9:6a:27:
2f:b1:c1:4a:1c:7c:f9:3e:cc:2b:d4:dd:1e:bc:bf:
65:fb:8b:f5:cd:20:2c:01:2b:57:62:ae:14:fd:d6:
b6:99:d7:2e:2f:1c:3c:60:73:7b:33:29:48:a2:fc:
98:44:13:ba:1b:0f:46:38:c4:b5:96:32:f8:c2:83:
80:ba:bb:de:4b:30:d2:2e:40:ed:20:11:1b:33:c4:
d6:49:67:1e:d9:f1:66:48:8a:56:ee:28:1d:5f:b5:
6f:be:ef:64:20:77:a4:e9:21:da:ac:b9:54:de:6e:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:29:99:9F:78:BA:BA:8E:8B:CF:A8:1A:7F:7D:EB:30:2E:64:67:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CF517EEA4D511EFB211D990762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:6b:ec:71:6e:ab:73:8b:7b:f1:a6:8b:1a:31:ee:c8:59:25:
28:03:2f:3e:26:b8:3d:f6:b5:37:23:61:ee:96:1d:03:4a:7f:
15:fa:25:67:b9:44:07:11:9a:52:b6:36:e6:43:8e:7a:14:73:
12:52:a9:e4:9f:3e:0c:6d:92:e7:3f:7c:d0:46:91:ec:03:0f:
c2:60:7d:3d:43:14:3a:9d:69:c1:d3:cb:7d:da:a3:35:6d:c2:
a5:2b:b1:62:2e:0c:9c:9e:e2:ee:dc:48:70:96:f1:ad:68:a1:
4c:f1:3a:37:e8:0e:91:96:03:e8:c2:50:ab:e7:9d:7f:cc:fe:
41:7a:e2:07:c6:82:54:5c:dd:4a:d9:5b:99:02:0f:0a:c1:75:
85:51:da:61:99:bd:0d:fd:57:94:80:95:a4:67:05:dc:b2:1a:
0c:06:37:60:67:2a:b9:13:6b:54:e4:8d:a8:08:f0:70:31:be:
d3:33:f5:b6:bd:b2:15:07:ff:8f:0c:dc:8f:11:3c:c7:22:a9:
6d:48:5b:92:bb:da:8d:78:ab:ae:df:4c:ea:10:f0:73:76:fa:
d9:9f:89:97:02:2c:52:86:d6:06:52:85:07:2b:8d:af:27:72:
16:c3:ae:1a:03:b5:a5:d6:43:a8:fa:3d:ff:21:c7:8e:90:0c:
54:80:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:17 2024 by rpki-client on console-fra.rpki-client.org