Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BC81046983211EFB7D1DB47762E951A.roa
File: 1BC81046983211EFB7D1DB47762E951A.roa (raw, json)
Hash identifier: dKI7IbqC9sltPscchfi4ARFDeuDYxcRnUWgSEi4j3Ps=
Subject key identifier: E3:4C:4B:D0:C0:1A:ED:B9:00:FD:01:FD:2D:36:3B:02:3A:A5:1C:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BC81046983211EFB7D1DB47762E951A.roa
Signing time: Fri 01 Nov 2024 09:17:25 +0000
ROA not before: Fri 01 Nov 2024 09:17:22 +0000
ROA not after: Tue 31 Dec 2024 09:17:22 +0000
asID: 135377
IP address blocks: 156.232.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52073 (0xcb69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 09:17:22 2024 GMT
Not After : Dec 31 09:17:22 2024 GMT
Subject: CN=67249ca5-c567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a0:63:01:c6:a5:bd:20:6d:dc:d0:03:50:fa:
28:76:0b:cb:61:63:da:46:cb:4a:e9:9e:e8:7e:ec:
d4:f3:8e:9d:fd:02:44:79:0d:d8:a8:45:9e:59:a6:
39:e1:8c:14:fd:83:79:a8:98:6a:65:b2:64:87:7c:
cc:fa:6b:e0:c4:a7:91:e4:41:d8:3f:a7:b7:d7:66:
f6:06:b3:39:b8:fb:15:1a:b1:90:b9:3d:98:4e:29:
7f:07:12:74:bf:09:61:75:15:0e:4e:c8:eb:97:76:
33:81:7a:50:b4:a6:fe:c3:41:30:6c:2b:13:dd:7c:
43:d5:09:78:85:c5:4a:66:43:3b:f6:bf:cb:21:f5:
27:14:8c:ad:35:4d:36:32:77:07:29:0a:19:2c:1f:
3c:39:83:94:0d:cc:a3:ef:97:bc:47:15:da:d7:fc:
23:ae:51:96:b8:be:c8:0d:05:52:e1:71:97:6f:f0:
53:22:6c:e6:fb:53:f0:93:5b:02:6a:af:55:a2:44:
e3:6c:55:7e:a0:0a:5d:83:0f:f5:9b:0d:0e:54:2b:
ee:49:24:94:6b:42:8c:a4:6e:1f:23:74:cc:c2:0e:
a5:b3:c6:1b:b2:ec:cb:d7:f6:55:89:7e:a1:cd:67:
0b:81:16:2d:23:ca:1e:e6:49:4f:d3:a3:c7:6c:ae:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4C:4B:D0:C0:1A:ED:B9:00:FD:01:FD:2D:36:3B:02:3A:A5:1C:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BC81046983211EFB7D1DB47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.96.0/22
Signature Algorithm: sha256WithRSAEncryption
34:24:4c:af:ef:45:27:95:1b:0a:38:2c:7a:6a:fc:5e:48:1b:
ab:1f:4c:d7:d8:9d:d0:16:78:a5:bf:34:fa:cb:e6:a9:60:f3:
f4:3f:34:58:55:d4:62:2d:fc:cf:7c:fc:91:64:34:b1:82:f4:
36:e8:d6:b5:9d:54:c3:a2:2e:b0:c6:8d:00:6c:c2:8a:1d:9b:
de:36:96:64:49:b3:23:14:69:65:2d:08:ec:44:8e:28:b6:b5:
95:c9:1d:0e:42:e9:6c:08:c7:db:5a:02:40:5e:12:10:30:26:
45:d7:e6:97:ab:34:32:aa:42:05:61:7a:55:40:f1:fa:89:c5:
4b:f3:b0:11:df:9d:65:dc:af:11:a4:37:b7:46:8c:9a:8a:b2:
e8:02:c6:8b:51:b4:03:67:d4:87:13:df:38:72:92:b7:a6:88:
1e:1f:7e:23:36:47:53:b5:7e:17:52:f2:f2:32:aa:0f:f5:76:
e2:36:bf:1a:92:02:93:db:f4:99:21:41:ba:e8:c3:5d:8d:66:
fb:ad:a0:25:dc:4c:95:a9:9f:b2:e3:5b:8b:3f:d2:ef:11:e0:
04:f7:ce:87:7d:88:1a:87:27:67:94:0b:55:29:89:c6:ba:9a:
9f:50:f3:2d:b9:36:61:e6:46:31:97:b5:1b:1d:1b:8e:71:4f:
8f:09:f0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:20 2024 by rpki-client on console-fra.rpki-client.org