Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2810B78A96B211EF84349B52762E951A.roa
File: 2810B78A96B211EF84349B52762E951A.roa (raw, json)
Hash identifier: vBZX8XDFBEubDmqsjDcHSjh5UIUmKXjlz9vC2RuEG8c=
Subject key identifier: AD:7E:69:40:93:6D:9E:9F:7C:53:F9:D3:75:14:FF:71:46:86:8A:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CA33
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2810B78A96B211EF84349B52762E951A.roa
Signing time: Wed 30 Oct 2024 11:28:59 +0000
ROA not before: Wed 30 Oct 2024 11:28:54 +0000
ROA not after: Wed 04 Dec 2024 11:28:54 +0000
asID: 142062
IP address blocks: 156.239.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51763 (0xca33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 11:28:54 2024 GMT
Not After : Dec 4 11:28:54 2024 GMT
Subject: CN=6722187b-b462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:32:f1:bd:98:1c:8d:35:db:97:c1:93:8e:
23:0f:18:22:c9:46:13:d6:de:51:01:08:a3:d6:10:
a1:c0:b8:be:37:09:6d:5e:e5:b7:8a:ad:a3:76:2e:
61:20:e5:28:0f:e6:5f:0b:bc:8e:72:96:5a:fd:e8:
4e:4f:e0:52:2f:aa:a1:31:50:f9:93:a7:51:97:91:
a3:60:11:ae:77:86:4f:8b:cf:2b:98:64:e2:7d:6e:
f7:38:39:31:b0:bc:f7:91:fa:6f:54:0d:4a:ba:80:
a3:79:7a:15:fb:94:b8:a2:b8:69:e2:55:a4:ef:1f:
31:3e:76:53:ac:85:2b:d0:e0:82:6c:6d:f0:1a:aa:
08:54:73:93:2f:20:de:23:79:36:5b:fc:4c:3c:89:
86:65:ad:0a:c3:40:b2:e1:60:d1:3d:dd:71:7d:15:
6a:c9:81:32:b6:e6:f2:db:64:e8:e1:a7:70:44:25:
3e:09:38:4c:0a:58:1d:67:89:c2:63:be:2b:6f:7f:
8b:e0:90:ab:d6:5d:35:f8:19:4a:b6:7f:c4:91:72:
a6:84:64:06:62:a9:e5:f0:0c:1f:77:07:a3:fb:b0:
22:7b:8b:d6:3a:69:ec:10:97:ee:0c:71:2d:f5:4c:
f1:2a:eb:82:32:45:ea:78:14:70:b4:a7:f6:83:2e:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7E:69:40:93:6D:9E:9F:7C:53:F9:D3:75:14:FF:71:46:86:8A:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2810B78A96B211EF84349B52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9a:fe:82:3a:54:73:c8:f4:d2:24:8c:36:89:b5:17:7c:00:3a:
f8:22:0d:bb:fc:b9:4c:bc:54:d9:3e:87:2a:21:b7:b3:8c:3a:
f4:52:82:12:8c:b6:79:44:a0:8b:6e:83:d5:41:d8:69:9b:0f:
a0:6d:c4:f9:77:81:13:dc:a6:d7:6b:22:c9:de:55:19:95:87:
37:90:f0:dd:7d:91:9b:c4:f3:4b:d5:76:f2:9f:8a:99:db:2a:
3f:14:c4:10:92:95:97:1f:0c:95:b9:c1:8e:b1:e6:c0:89:89:
a9:90:32:ea:13:d3:71:9a:ab:84:3f:97:be:64:f1:a5:b7:01:
1a:f9:bb:a5:30:a9:80:2e:01:21:60:67:c9:a5:2c:96:f5:6f:
98:94:3d:a2:d2:ab:9c:f5:74:fc:f9:52:ea:c8:dc:6e:83:d6:
8c:8a:d0:6f:e8:7d:b5:df:57:1e:cb:16:e5:94:c9:aa:c7:a2:
af:9a:c0:27:39:d7:ca:c5:7d:56:db:62:1e:af:b8:be:9d:12:
0d:19:29:bf:b9:1c:55:14:8f:2f:9e:0d:58:a0:84:d4:75:55:
59:90:68:7b:1a:6d:ac:38:86:30:91:ce:8a:59:67:77:3a:9c:
17:f9:1e:59:e6:ee:2e:57:e9:47:c5:f5:61:e7:84:f8:e6:24:
01:49:7f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:22 2024 by rpki-client on console-fra.rpki-client.org