Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10376C1E8F8A11EFB75356BC762E951A.roa
File: 10376C1E8F8A11EFB75356BC762E951A.roa (raw, json)
Hash identifier: 1oj1vg8wY5cGNP1nNQ+QSDMnAGyNKH6AZzoXYTXTeMg=
Subject key identifier: 78:17:07:AB:9D:F3:CA:C1:B2:E0:AF:41:ED:D6:A0:BE:09:8D:CB:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C74B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10376C1E8F8A11EFB75356BC762E951A.roa
Signing time: Mon 21 Oct 2024 08:54:21 +0000
ROA not before: Mon 21 Oct 2024 08:54:18 +0000
ROA not after: Sat 23 Nov 2024 08:54:18 +0000
asID: 44559
IP address blocks: 156.246.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51019 (0xc74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 08:54:18 2024 GMT
Not After : Nov 23 08:54:18 2024 GMT
Subject: CN=671616bd-b3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:9d:f9:41:95:b2:bf:4a:02:83:25:c0:3d:
f2:ab:ce:cb:36:a8:b6:1f:d7:1e:8f:58:a0:10:44:
66:08:53:0a:09:73:73:ad:98:10:5b:cc:a2:29:0a:
aa:b5:a0:10:91:30:50:9a:3f:bd:12:d2:aa:4c:20:
21:ea:05:cd:05:c3:15:04:ae:a6:62:b0:64:54:5e:
a0:54:ba:5b:f3:99:56:67:d1:12:d7:53:a5:19:66:
4e:b6:33:25:1d:9e:1e:eb:f3:1e:69:bd:84:be:dc:
58:d6:b5:d5:12:bc:63:24:9a:e2:5b:aa:21:42:42:
1e:39:fc:ca:7d:f2:38:d3:91:84:5b:cb:e5:5a:56:
6a:18:c9:36:d3:4c:c0:0f:e5:78:5a:ff:45:2e:d1:
4f:b2:3e:c7:cf:66:ad:fa:52:c8:50:9b:e8:72:72:
5a:1c:b0:0e:88:86:b5:b3:8d:18:74:9e:e4:d4:85:
af:c1:1b:35:fa:ce:e1:bb:63:5c:43:db:81:84:28:
db:48:ae:07:24:dd:64:43:f0:64:0c:5c:09:75:52:
b2:d7:6a:af:99:f7:c7:dc:a4:9d:8b:28:4b:21:ee:
1d:38:a5:b5:70:31:9d:a3:99:27:7e:3a:c4:52:60:
11:bd:8b:80:8f:60:dd:2f:ca:be:d3:31:ba:5a:30:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:17:07:AB:9D:F3:CA:C1:B2:E0:AF:41:ED:D6:A0:BE:09:8D:CB:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10376C1E8F8A11EFB75356BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.160.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:87:28:c2:fb:10:08:a5:7d:0e:f5:1d:44:d1:ee:88:ed:49:
f2:6b:18:04:0c:73:04:ba:02:fe:5d:30:09:3a:fa:89:41:82:
98:ec:2b:2c:37:bf:de:c2:36:a2:0c:e8:bc:12:03:00:d0:05:
05:93:0a:41:dd:bf:bf:84:ff:a6:80:35:c5:93:95:0c:5d:8f:
cd:28:9a:95:c8:25:cb:9b:4c:d0:1e:2d:96:47:27:07:20:49:
e9:ed:31:12:e2:fd:0e:cd:e9:23:8f:86:ba:15:08:70:c5:dd:
77:f3:dc:42:d3:80:00:73:a2:eb:78:f0:14:d1:0c:43:3d:cc:
db:fc:b2:09:e6:fb:7b:e1:7b:9f:68:a9:2b:5d:3b:1c:ed:a1:
39:4d:78:3e:31:b9:30:5a:89:fc:78:fc:0c:11:e1:9f:fc:c4:
f4:09:f3:99:02:c8:9e:1a:e0:29:76:41:ee:a1:60:ba:2b:6a:
b1:2e:05:fe:75:75:21:80:4b:b5:cc:77:b3:3e:55:98:5b:1d:
a3:3d:a1:b3:f2:c5:4d:cf:30:80:d1:b5:91:5b:ab:68:d3:1b:
6b:e0:a0:20:5c:5c:51:c2:ed:ab:ec:d1:80:1f:f6:bd:c8:45:
0e:b0:43:e2:0c:0d:dc:96:50:82:d7:27:c8:7d:2b:fe:06:a1:
ee:57:36:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:20 2024 by rpki-client on console-ams.rpki-client.org