Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0EDE2242A0E511EFB3EF1397762E951A.roa
File: 0EDE2242A0E511EFB3EF1397762E951A.roa (raw, json)
Hash identifier: 2GGRIcwX7UDnrZ9SSx/vkBmxfIk6bcOB8y6Q0E6KwM8=
Subject key identifier: D5:F1:C0:3C:AB:B2:70:22:FA:B1:A3:65:36:F9:68:64:CB:68:5B:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D1B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0EDE2242A0E511EFB3EF1397762E951A.roa
Signing time: Tue 12 Nov 2024 10:58:33 +0000
ROA not before: Tue 12 Nov 2024 10:58:29 +0000
ROA not after: Fri 22 Nov 2024 10:58:29 +0000
asID: 39600
IP address blocks: 156.232.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53689 (0xd1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 10:58:29 2024 GMT
Not After : Nov 22 10:58:29 2024 GMT
Subject: CN=673334d9-9441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:21:75:40:98:59:8e:4a:2a:06:25:4e:f0:13:
2d:12:f9:1b:0e:a4:86:a9:90:32:38:e7:51:b4:63:
f4:76:79:40:fc:a1:bc:4a:bf:56:d8:12:da:96:4b:
cc:a7:cb:d3:ed:d6:dc:ec:8a:d9:fa:1a:e5:79:9a:
06:c2:55:ff:e1:f2:85:b7:47:b5:2e:23:07:83:12:
73:7a:e2:da:ff:7c:9e:64:88:ab:65:20:0b:c3:91:
a6:c2:44:06:8d:27:1e:bd:76:ad:2e:00:37:b7:70:
ba:01:47:3f:e2:1a:99:c9:d7:39:ba:8f:7b:8d:11:
bd:fa:8b:43:5f:9f:27:8b:2f:15:5f:5d:f7:e3:3e:
9f:15:ab:a7:dc:30:4f:ae:9c:c2:96:1f:9b:7a:10:
ab:99:f9:e7:ca:90:e2:54:ca:33:34:02:96:ac:c0:
99:dd:05:51:ae:b8:88:4c:8d:eb:2f:21:59:56:22:
11:b1:36:cd:7e:99:c6:09:f1:70:ba:77:45:64:0d:
98:d9:88:a4:6f:4a:ac:68:da:90:1d:ce:ec:48:f9:
36:e4:64:7e:55:a0:06:f1:53:11:37:ba:ce:c7:3f:
8e:a6:fd:db:72:d2:cc:dc:f7:b5:f5:a3:30:91:c2:
c0:81:8e:d0:61:75:1b:1e:f1:c8:78:7d:e0:cc:19:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:C0:3C:AB:B2:70:22:FA:B1:A3:65:36:F9:68:64:CB:68:5B:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0EDE2242A0E511EFB3EF1397762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.80.0/21
Signature Algorithm: sha256WithRSAEncryption
54:27:ff:1a:68:9f:79:35:64:3d:eb:3c:a9:42:02:14:04:03:
c8:fc:8e:09:8b:59:6e:ba:f7:62:c5:18:c3:39:55:d4:39:2f:
0c:d5:84:08:5a:d7:be:27:bb:cd:b1:9e:97:c1:7d:e9:27:31:
0a:47:68:97:89:a5:88:ff:07:af:3b:0d:15:83:ac:41:d1:f9:
93:26:d7:7b:54:df:22:50:77:4d:9e:f8:00:bb:de:eb:d4:b7:
ce:f3:0c:08:e6:94:f4:32:9f:7c:f5:2f:0c:f5:52:31:d0:47:
d6:29:8f:a6:09:15:bb:d2:14:1a:6d:41:ee:73:71:5f:2d:87:
e5:54:00:d3:08:7a:81:78:c0:38:f3:d5:74:ca:cc:b2:9b:75:
22:22:cf:20:de:d6:d6:5d:b4:0a:26:f2:38:77:37:53:d1:27:
14:ed:ba:0b:22:72:dd:6b:da:29:f9:b0:ba:a0:f7:af:09:0f:
03:ca:be:54:63:10:4e:f6:2d:9d:e3:c3:0c:db:06:85:16:57:
f9:ec:75:b1:aa:cd:63:e4:d0:4f:70:eb:fc:ca:b2:2e:28:0d:
18:3c:ef:1d:09:b1:11:42:8d:59:08:79:98:9d:5e:79:e0:90:
93:3c:08:28:6d:6b:9a:07:4c:1f:fa:37:e2:86:b0:e2:1d:1c:
44:2f:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:19 2024 by rpki-client on console-ams.rpki-client.org