Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E42FC18A45511EFB7177662762E951A.roa
File: 0E42FC18A45511EFB7177662762E951A.roa (raw, json)
Hash identifier: T+0dm6eni8ZfVvinVIh+0S5Yeg+/WmqhfEZ9RWit6B4=
Subject key identifier: D2:9B:A0:F3:04:2F:58:A0:70:67:8E:FB:4E:FF:D7:8E:DB:0D:0F:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D3E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E42FC18A45511EFB7177662762E951A.roa
Signing time: Sat 16 Nov 2024 19:57:49 +0000
ROA not before: Sat 16 Nov 2024 19:57:45 +0000
ROA not after: Tue 26 Nov 2024 19:57:45 +0000
asID: 39600
IP address blocks: 156.237.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54248 (0xd3e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 19:57:45 2024 GMT
Not After : Nov 26 19:57:45 2024 GMT
Subject: CN=6738f93d-b7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:f1:05:e8:a6:1a:ae:19:10:3b:a4:8d:94:
86:4b:6e:15:77:fb:4e:f1:87:00:00:1c:4d:be:a1:
78:bc:e8:37:9a:6b:e6:ee:b7:f0:ca:f8:f7:75:9e:
08:87:34:50:fe:d1:67:83:54:2e:be:ec:e7:0d:e6:
6d:17:08:38:93:67:b9:4c:51:c3:56:be:a9:88:78:
f1:ac:f9:de:48:e6:3f:0d:81:b2:5e:4b:b1:ef:cc:
17:46:b1:be:7a:55:26:69:4d:8c:f8:a6:79:a0:29:
d2:e8:ae:36:94:4b:12:b0:67:d0:1d:1e:c9:3e:c9:
93:c6:06:e9:05:86:1f:37:5e:26:b3:30:4a:89:7e:
a7:54:49:f9:35:37:40:2e:9d:e5:5d:89:e3:cb:0f:
d9:02:71:f9:88:00:93:7b:0f:24:89:3c:42:b4:27:
25:76:d5:84:45:e6:52:98:bc:38:bd:11:db:ed:89:
ec:6c:c0:e9:05:d8:da:a7:ec:f4:0b:a7:df:5f:b3:
11:69:8c:b0:b4:9a:88:5a:e9:f0:56:8c:71:47:e2:
10:f0:9f:5e:68:15:14:b8:fe:82:c9:9f:70:0f:4a:
d8:18:90:f4:10:a6:2f:8c:29:df:ae:4e:17:2a:74:
94:6a:80:0f:35:1f:4a:3b:70:bd:7b:86:03:f3:5e:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9B:A0:F3:04:2F:58:A0:70:67:8E:FB:4E:FF:D7:8E:DB:0D:0F:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E42FC18A45511EFB7177662762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.125.0/24
Signature Algorithm: sha256WithRSAEncryption
86:46:b8:9e:c9:81:e5:8f:02:c4:51:c2:7e:b6:cb:d3:48:cd:
92:cf:8d:9c:d7:b2:df:60:be:db:db:01:f6:75:93:e6:f3:24:
78:49:f4:d8:22:fb:85:5a:da:07:65:99:1e:30:49:27:49:c8:
fd:7a:59:b2:e1:3c:2c:25:e6:9f:7b:d1:20:e9:de:6a:65:54:
2d:fe:d2:e1:97:b0:02:3f:0c:58:df:e9:5d:11:8a:b7:f7:19:
4f:f8:58:41:8b:0f:be:58:44:f4:5f:78:d5:d5:59:68:aa:b5:
5e:28:bb:a0:29:ff:8b:b7:0f:80:6d:bb:b9:4d:9b:8b:59:12:
75:87:5a:95:9e:b6:31:f1:6f:a9:64:eb:4b:15:10:95:9d:51:
a5:c5:2d:6d:4d:db:fc:23:c9:e7:57:a1:f9:32:f1:91:31:cd:
31:e9:e5:03:7d:b1:a6:da:60:8c:a6:fa:85:d2:8a:b7:29:27:
a4:73:ae:55:0d:b4:91:0e:f4:78:a7:7f:a7:42:fd:d0:db:95:
d8:7d:5d:13:73:59:4f:81:b5:7e:bb:26:b3:79:d4:2c:0f:f1:
32:a0:cd:3f:e5:3d:76:55:11:78:99:3c:e6:4e:b1:44:93:d6:
f6:d3:04:2c:92:cd:25:e1:e7:7a:84:5e:c9:5a:a9:7f:4b:69:
29:8c:d1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:19 2024 by rpki-client on console-ams.rpki-client.org