Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE3D258A45611EFAC56236A762E951A.roa
File: 1EE3D258A45611EFAC56236A762E951A.roa (raw, json)
Hash identifier: FMzfhVO3hc/mabozyGZSp+Oy4cOTRWxb4f1mLMvank4=
Subject key identifier: 0C:91:4C:99:36:12:A0:4C:38:35:14:03:31:9D:D4:11:A2:15:A3:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D3F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE3D258A45611EFAC56236A762E951A.roa
Signing time: Sat 16 Nov 2024 20:05:26 +0000
ROA not before: Sat 16 Nov 2024 20:05:23 +0000
ROA not after: Tue 26 Nov 2024 20:05:23 +0000
asID: 39600
IP address blocks: 156.237.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54262 (0xd3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 20:05:23 2024 GMT
Not After : Nov 26 20:05:23 2024 GMT
Subject: CN=6738fb06-97c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:9e:cd:17:b2:0a:a3:60:b1:35:68:89:c5:
a1:dc:b7:d7:01:8e:ff:67:72:b3:28:a5:fe:74:f0:
16:72:38:eb:8f:33:f2:02:de:09:4f:f8:67:78:0a:
db:73:b7:6e:fe:f3:10:09:2c:55:bf:b8:2c:d9:2b:
ce:fd:37:06:fb:0b:86:87:e6:4a:71:76:d3:f8:34:
3e:f1:92:95:cc:28:35:c1:94:2d:64:68:e0:f5:e3:
85:9b:2a:e4:6a:20:bd:4b:36:6d:18:51:5e:0e:d9:
47:0e:24:84:77:d8:c1:0b:c6:e7:34:3b:98:f9:53:
fe:73:53:9e:e0:7f:20:67:ed:af:2f:4d:6f:04:af:
b2:85:1d:bc:03:98:fc:0d:2a:23:f9:72:66:63:22:
94:56:7e:4a:7a:54:0f:e5:86:72:ea:3d:81:d5:23:
97:10:c7:18:a3:24:62:d8:1b:4e:2d:c6:84:75:41:
c4:58:ec:71:f3:3b:ac:3c:f3:cb:a0:ab:fd:5d:ba:
e3:4d:bf:d0:d1:df:57:36:d4:e5:98:82:41:41:0d:
5e:83:57:e9:7d:e7:6f:64:38:9c:aa:8c:62:c2:be:
52:91:87:66:a6:d4:95:14:3b:bb:f3:8f:e9:02:c4:
38:ae:5b:fd:b5:6a:9c:1c:e1:9c:4c:76:59:38:0a:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:91:4C:99:36:12:A0:4C:38:35:14:03:31:9D:D4:11:A2:15:A3:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE3D258A45611EFAC56236A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.106.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:b3:88:a5:29:b6:1a:cd:4b:37:dd:ce:aa:f1:aa:71:53:65:
37:df:86:7f:93:f3:9d:a0:90:99:7d:87:51:f9:55:9e:68:1d:
38:68:8c:77:74:01:fc:d9:83:26:ae:62:df:8a:95:f6:9e:6e:
64:ab:c2:17:2d:ef:86:9e:48:7b:bd:69:72:76:8a:96:2f:df:
a7:8c:a0:60:c7:77:0b:18:19:1a:c1:fb:90:1b:aa:b1:0a:5d:
61:eb:e9:47:79:06:cc:c8:2a:fe:89:4d:75:5b:aa:0b:a6:de:
a4:8f:61:54:74:b7:a1:49:0d:d2:0d:ec:dc:33:e8:12:56:8a:
dd:85:f9:50:fc:0f:57:90:81:3b:94:79:18:52:46:76:fb:51:
f2:f1:2b:7a:dc:53:00:6d:8e:5f:50:f4:96:38:9c:80:ec:8f:
6a:6b:9e:2a:dc:fb:13:03:56:16:a7:3d:11:af:ef:69:cc:2f:
7e:3c:95:d5:16:e2:07:d5:b2:c5:fc:93:09:64:96:3e:9f:15:
7c:e1:45:c8:0d:83:67:ca:d5:7c:71:f1:77:cf:67:62:19:a3:
41:a5:21:46:ef:62:3a:15:ab:4d:ae:a0:a9:6b:5d:b4:84:38:
a4:b3:2f:6a:c6:09:83:76:36:a6:6f:c3:e7:31:ee:2d:cf:01:
a2:26:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:22 2024 by rpki-client on console-ams.rpki-client.org