Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2095C22482B411EEB776F81C4AD9E6FC.roa
File: 2095C22482B411EEB776F81C4AD9E6FC.roa (raw, json)
Hash identifier: +CyU9l6gzt3nGb5Rr+Yd6GI33xFaiwsAV2Rdh/Zyk4Y=
Subject key identifier: 89:AD:4F:A4:B4:BF:1C:4C:74:3C:26:8F:26:9A:5D:B5:D3:B9:6A:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4912
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2095C22482B411EEB776F81C4AD9E6FC.roa
Signing time: Tue 14 Nov 2023 06:07:45 +0000
ROA not before: Tue 14 Nov 2023 06:07:41 +0000
ROA not after: Tue 12 Nov 2024 06:07:41 +0000
asID: 397630
IP address blocks: 156.239.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18706 (0x4912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 06:07:41 2023 GMT
Not After : Nov 12 06:07:41 2024 GMT
Subject: CN=65530eb1-31e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:a0:e4:40:3d:1a:95:9b:68:0b:96:19:18:
51:b4:c9:22:71:c4:10:f3:bd:56:ae:d2:09:18:84:
bc:e9:bf:72:38:ba:d1:b8:07:34:34:b1:55:4c:d3:
9e:a5:9b:94:d2:52:a3:cf:6a:e0:3d:69:e1:c8:0b:
25:25:fa:8f:f7:b1:0e:ed:8c:42:e0:6a:68:4c:72:
a2:50:a1:d7:cb:46:05:9a:04:3b:68:82:8e:87:15:
4d:89:70:fb:69:89:ee:84:ea:45:84:e6:d6:b2:92:
05:a0:ed:c0:df:35:39:8b:2c:27:d8:73:44:f1:ea:
1e:1f:2e:ae:ab:7a:64:ad:6e:14:75:8a:cc:de:d1:
31:6f:ae:94:5a:16:98:2d:2e:c5:09:cd:fa:cf:89:
92:e1:ec:b1:14:17:a9:17:b7:1f:3d:11:48:73:96:
73:17:67:a4:a6:2a:d1:7c:be:c6:00:ad:a8:c5:14:
ba:a9:c6:27:32:fc:fb:b1:37:21:30:ae:4f:74:b0:
d2:69:05:6d:1b:6e:bd:7e:bc:28:e8:ef:d5:ca:0a:
17:83:60:e2:94:a7:25:ca:2f:a7:c5:95:58:12:42:
35:1b:1c:d6:d7:0f:99:2e:73:18:e6:f9:32:b7:c9:
a7:b0:d0:26:bd:92:60:3b:88:95:c3:16:b9:fd:f6:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AD:4F:A4:B4:BF:1C:4C:74:3C:26:8F:26:9A:5D:B5:D3:B9:6A:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2095C22482B411EEB776F81C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.48.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a9:90:c1:45:0d:dd:43:29:d1:99:83:f5:5b:0e:34:b2:8d:
15:bf:d1:c9:d0:a1:3d:cb:73:4a:e6:99:28:92:a3:a3:17:e2:
fb:c8:16:00:d6:a0:95:f1:19:e9:ca:7f:dc:19:ef:5b:07:17:
3b:d1:ed:b8:ab:21:1c:bf:4a:b1:3a:ad:e1:56:14:aa:79:1b:
34:99:a1:e3:0e:7c:2b:95:a4:9f:31:2f:18:ac:8c:b1:1c:32:
41:80:97:36:be:1e:7b:fd:54:89:90:1d:d2:5b:1e:5a:3e:67:
59:85:93:10:a4:0f:c6:be:6b:3b:74:c6:bf:ae:79:29:29:21:
53:55:e0:b6:54:60:a3:d7:43:82:e9:4a:be:c6:08:53:fa:b5:
64:8e:25:46:88:24:8e:da:a5:28:8d:43:8e:4f:e3:7f:5a:51:
69:d6:43:fe:ae:2d:68:5c:53:a6:84:5b:1a:42:9e:77:9b:8e:
ee:35:60:fc:f5:ed:01:7e:c8:7d:d9:31:c8:92:dd:e8:8b:57:
a7:45:4b:3b:ba:f1:f3:3d:e8:69:e1:c6:7e:de:d4:f4:0d:f9:
b1:e3:72:bd:22:a5:ff:7c:e2:0e:17:0b:6b:ce:30:01:3b:24:
18:10:8e:e0:14:e2:69:51:7e:e7:c7:f2:d9:1e:75:f2:6d:8e:
98:aa:da:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:05 2024 by rpki-client on console-fra.rpki-client.org