Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21A791548BA211EFB948C89B762E951A.roa
File: 21A791548BA211EFB948C89B762E951A.roa (raw, json)
Hash identifier: Xdw09823VXFrFC+lKlnJQ+f7+Wq0TK5/A+2EqBiW0wI=
Subject key identifier: EF:AA:F9:14:57:EE:45:62:8B:08:95:53:83:85:50:7B:8E:DE:29:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C560
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21A791548BA211EFB948C89B762E951A.roa
Signing time: Wed 16 Oct 2024 09:36:34 +0000
ROA not before: Wed 16 Oct 2024 09:36:30 +0000
ROA not after: Wed 27 Nov 2024 09:36:30 +0000
asID: 20473
IP address blocks: 156.240.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50528 (0xc560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 09:36:30 2024 GMT
Not After : Nov 27 09:36:30 2024 GMT
Subject: CN=670f8922-dd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a2:3c:04:09:e1:76:de:fe:80:c3:ce:9e:32:
df:2f:14:6b:2b:4a:83:4d:67:88:41:f8:8d:48:3d:
d2:c0:1e:e7:6a:e2:c1:c5:93:b4:f8:48:f8:53:aa:
b5:f9:87:51:20:ce:bd:af:92:1f:5d:1d:d0:70:07:
8d:c0:59:68:ef:14:49:87:02:54:d6:39:a4:49:67:
82:94:83:c6:f2:b5:ee:78:a8:fb:bb:96:50:2d:a7:
c2:5c:4e:10:d6:52:7b:d7:05:8e:2b:9a:e4:5e:3c:
02:1b:fd:67:ad:8e:fe:61:ee:76:01:1c:b7:0f:b5:
94:4e:9e:79:6e:df:38:7f:67:d1:e4:e1:64:00:df:
75:5d:b7:d8:dd:fc:9a:89:6f:4a:b3:82:d8:05:0c:
ed:91:40:12:af:0e:6c:3a:88:b2:c7:6b:19:ac:91:
43:39:ee:57:8b:84:83:30:5b:ac:ed:c7:ef:32:28:
d7:ac:71:b5:40:66:40:0b:83:83:22:ce:4a:9a:08:
0b:22:94:2c:d6:84:ef:ac:97:5f:32:23:26:ba:5d:
b2:1c:ac:cd:e8:63:e4:da:77:6c:4d:3f:24:07:c0:
c2:1e:23:27:05:58:5d:28:2c:e9:78:7b:d8:2c:40:
ed:9e:cd:1b:c7:1f:6d:36:3f:e8:6d:05:84:7a:f8:
74:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AA:F9:14:57:EE:45:62:8B:08:95:53:83:85:50:7B:8E:DE:29:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21A791548BA211EFB948C89B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.98.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ae:da:f8:4e:8f:97:95:1c:24:c6:68:79:2f:dd:6f:bd:87:
ec:5d:80:bc:ba:de:db:7d:b6:b2:2a:82:06:0b:d0:c6:2a:e2:
2c:32:1d:45:94:61:4d:fe:cc:99:e6:5f:86:50:ac:5f:a6:48:
da:ec:b5:9e:c5:2e:b5:9b:8e:66:67:59:c4:c4:bb:47:ea:4d:
f6:d0:40:0c:59:d6:81:c0:d6:a7:b6:88:ac:78:ab:5f:51:ed:
6d:6b:b1:64:22:8f:24:04:72:b6:6c:52:59:28:73:2f:2e:06:
fd:3a:bc:ec:b5:45:7c:40:bf:29:42:59:35:98:83:42:40:e4:
d7:17:2d:32:27:f3:f2:a1:d9:4d:92:42:f0:0f:a1:92:ba:90:
57:4a:33:48:e3:c7:58:8a:3d:57:4e:b7:d8:d8:37:ca:52:2f:
e6:ee:03:d7:1b:79:c5:99:bd:47:8f:44:97:fc:30:12:06:5e:
5f:0a:0c:8a:95:70:1f:50:69:7d:87:b1:6f:a2:47:37:6f:1a:
e8:b5:76:c6:25:d8:dd:aa:dd:ce:af:bf:db:81:f0:7b:b3:77:
47:46:49:22:8b:f3:f7:7d:c1:10:ac:73:0c:7e:38:33:75:72:
7a:39:01:fb:b3:97:33:2c:62:25:b1:d2:39:75:bd:df:f6:99:
29:e8:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:21 2024 by rpki-client on console-fra.rpki-client.org