Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F3CFC7286F911EFAF7947A5762E951A.roa
File: 1F3CFC7286F911EFAF7947A5762E951A.roa (raw, json)
Hash identifier: VwR48AXegRSCnZs+bLHzDxxGzC4hWK7HrXbfmgvliSE=
Subject key identifier: 25:D8:C5:B6:A2:61:F2:0A:B4:B0:6C:A2:24:5F:C3:09:E4:5D:75:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C2ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F3CFC7286F911EFAF7947A5762E951A.roa
Signing time: Thu 10 Oct 2024 11:16:40 +0000
ROA not before: Thu 10 Oct 2024 11:16:36 +0000
ROA not after: Fri 20 Dec 2024 11:16:36 +0000
asID: 135097
IP address blocks: 156.250.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49901 (0xc2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 11:16:36 2024 GMT
Not After : Dec 20 11:16:36 2024 GMT
Subject: CN=6707b798-c25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:1e:b7:1b:fa:24:71:03:cf:3a:74:a3:3d:
06:00:65:d5:86:19:c5:f5:0e:be:b1:4f:c4:6d:af:
4f:b5:c8:ee:f6:f0:c8:11:c8:37:30:fc:7b:fd:b8:
d4:d4:e3:50:ec:5d:da:46:20:6a:b5:2c:13:4b:bb:
cf:47:49:45:83:90:eb:a1:aa:bb:3f:51:24:4f:d7:
03:0d:7b:dc:04:2e:b1:d4:2d:3e:b2:a2:45:3f:4b:
4a:30:34:e8:3f:b5:4f:11:06:20:11:87:28:cb:e3:
22:12:66:c0:f2:b5:f7:d9:10:dc:d2:64:6d:5d:c7:
17:31:d2:7f:e6:91:1a:3f:f2:c1:0f:12:a4:6b:64:
95:8a:8f:95:d4:5e:4d:b8:8d:e5:1c:f2:fa:a3:2a:
dc:b1:bd:ed:22:d4:8c:f6:6a:e1:01:da:ba:24:c0:
c4:28:cf:99:37:bf:e3:ed:31:37:e7:f7:61:e8:37:
6b:c8:d6:17:6e:2d:7d:14:df:a3:bb:2d:ce:30:b7:
96:91:6e:2d:a5:75:8a:f2:50:77:7c:75:8d:cf:68:
28:0b:c3:cc:a8:a4:9a:7c:b0:d7:6e:18:61:a5:2a:
3e:d1:7d:12:21:52:5d:0d:c9:a7:9e:3c:dc:0d:ee:
56:af:d6:c4:fc:19:25:c3:69:e0:d7:18:3e:71:43:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D8:C5:B6:A2:61:F2:0A:B4:B0:6C:A2:24:5F:C3:09:E4:5D:75:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F3CFC7286F911EFAF7947A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:6e:0b:e0:65:ee:8d:f7:62:8f:90:ae:25:9b:e0:a4:3d:4c:
28:72:a6:d3:c4:43:de:a1:15:a6:fa:fb:71:de:b4:10:ea:c4:
d3:55:c3:49:87:fb:31:e0:1e:5d:56:24:7f:17:25:3a:29:bf:
d4:85:ff:8a:ed:39:2d:9b:cb:d2:66:97:4e:8e:0b:31:7d:d0:
7c:59:2c:44:18:35:f5:1d:b0:2b:5e:99:08:d6:fa:07:55:c0:
38:9b:5d:b6:86:47:4b:b7:f9:f1:c0:f4:91:87:2c:3e:55:56:
64:86:9b:54:67:00:2b:6f:eb:71:45:42:a9:5e:52:03:0f:aa:
7d:71:ad:bf:78:35:ba:a5:8f:63:1f:27:33:3a:4f:87:99:bf:
bd:ce:6d:39:a7:ff:7a:4e:9f:fc:a0:83:af:a3:5b:6d:46:04:
7b:f0:42:31:ee:d5:89:d9:11:ca:d8:3c:a8:4f:38:ea:74:dc:
a1:ef:b1:87:00:0b:47:d2:de:46:f5:d4:dc:8f:9a:9c:15:3d:
24:17:2f:0e:34:d1:f1:c2:78:d8:78:d7:12:21:ee:ca:51:db:
cf:9a:4e:4c:43:d4:55:f5:c4:63:94:3e:80:e7:ad:24:14:b1:
68:ad:aa:77:1a:f4:41:3c:a0:9d:af:4e:e9:07:88:73:93:b2:
38:37:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:20 2024 by rpki-client on console-fra.rpki-client.org