Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7B0BF6A4CB11EFAB03FE51762E951A.roa
File: 0D7B0BF6A4CB11EFAB03FE51762E951A.roa (raw, json)
Hash identifier: AzV2rPlXgnvAKJpsy+NciNwaPcQIYmP7EkrOXnWDaFU=
Subject key identifier: F2:CB:40:0E:33:8D:BC:60:6F:D3:E3:8A:2C:9F:46:AC:C7:76:97:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7B0BF6A4CB11EFAB03FE51762E951A.roa
Signing time: Sun 17 Nov 2024 10:02:28 +0000
ROA not before: Sun 17 Nov 2024 10:02:24 +0000
ROA not after: Mon 25 Nov 2024 10:02:24 +0000
asID: 399989
IP address blocks: 156.238.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54469 (0xd4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 10:02:24 2024 GMT
Not After : Nov 25 10:02:24 2024 GMT
Subject: CN=6739bf34-6175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:7c:0d:0c:65:54:c9:38:31:7c:3f:78:10:
28:cf:dd:06:75:23:b7:2b:00:26:52:f7:f2:33:d4:
4f:9b:22:8a:15:24:63:bb:d4:e2:59:12:0a:1f:66:
a5:1b:93:df:cb:71:a0:4e:26:1d:ef:b9:9a:dd:aa:
d9:b6:ba:03:b9:14:5f:80:34:e6:96:50:c6:16:ca:
0a:e3:6b:1b:de:4b:18:62:95:33:5b:9d:0a:33:f2:
57:69:c6:ec:b9:11:79:2b:90:9c:02:b5:11:c1:79:
21:03:a0:e8:6e:9e:ad:36:53:1e:82:9e:26:90:29:
23:71:fd:f4:fe:08:91:84:aa:cc:ca:23:cf:1f:a5:
33:92:4b:54:5e:62:dd:89:d6:86:0b:32:71:be:87:
d7:6c:35:e6:51:80:ed:71:69:61:d2:f2:80:e3:ce:
07:be:21:b9:11:0e:a7:60:86:70:8a:dc:f7:8c:21:
69:4e:a3:3b:6a:96:ab:c4:47:d1:82:56:b0:c6:90:
61:d1:2f:29:d0:66:0b:d3:53:5a:23:f1:c7:69:e4:
b6:d0:ae:78:a1:36:61:54:5c:cb:e1:8d:58:f2:65:
46:70:69:0d:1a:68:37:78:94:00:d7:c2:82:ce:86:
05:ad:93:a2:a8:4e:ec:ca:22:da:e1:d7:a3:b7:18:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CB:40:0E:33:8D:BC:60:6F:D3:E3:8A:2C:9F:46:AC:C7:76:97:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7B0BF6A4CB11EFAB03FE51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
Signature Algorithm: sha256WithRSAEncryption
35:5c:b7:35:cc:03:0b:14:b5:83:47:8d:07:57:ea:a6:ee:6a:
f9:78:e1:bb:1f:ea:84:af:8b:15:61:8d:aa:69:26:dd:ac:36:
c2:52:0d:94:1f:db:e0:6f:33:0f:9c:a5:8c:76:7d:ae:08:cf:
de:93:92:b7:e2:38:ce:27:bd:c3:4d:02:7c:3c:f3:61:13:e1:
e7:05:2d:b5:a0:24:99:49:28:15:dd:90:7d:f7:b0:b1:33:b5:
4d:dd:36:cf:41:3f:6f:08:b3:da:b6:8a:10:a0:49:9e:35:bb:
9e:86:7c:64:f1:33:7a:11:48:b5:dc:45:c7:83:e1:70:31:a2:
d9:7b:36:3b:50:04:67:0f:52:20:39:0f:99:30:24:af:7a:b6:
70:c9:94:4b:cf:5e:11:e3:30:f7:27:c1:a0:89:31:8d:c3:6d:
8e:30:b0:fb:d1:63:46:57:d2:3f:0d:1e:b0:66:2f:cd:ed:81:
ec:16:1c:c5:b9:32:f8:23:ca:6e:40:fe:6d:2c:9b:57:c3:03:
14:5a:4a:67:60:76:98:30:32:24:7f:31:d0:ff:4e:30:3a:eb:
0b:c5:04:8d:c2:dc:ec:5c:8b:f8:b8:a5:9b:41:8e:d2:4d:c5:
0f:98:6c:8b:f3:75:6b:85:d4:11:e6:c3:27:31:d3:9a:a5:2d:
8d:06:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:18 2024 by rpki-client on console-fra.rpki-client.org