Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33828510A0DC11EFB0AE2162762E951A.roa
File: 33828510A0DC11EFB0AE2162762E951A.roa (raw, json)
Hash identifier: mLgnAqn942O0rJI09B5G9x39lytosYWRZSpqO0oMuhk=
Subject key identifier: E7:01:85:D0:7B:A6:DB:B1:4A:74:50:EE:1F:4D:F6:2E:62:90:7F:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D187
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33828510A0DC11EFB0AE2162762E951A.roa
Signing time: Tue 12 Nov 2024 09:55:09 +0000
ROA not before: Tue 12 Nov 2024 09:55:05 +0000
ROA not after: Tue 24 Dec 2024 09:55:05 +0000
asID: 149440
IP address blocks: 156.235.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53639 (0xd187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 09:55:05 2024 GMT
Not After : Dec 24 09:55:05 2024 GMT
Subject: CN=673325fd-aa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:9c:7d:5c:29:41:50:bf:c5:e6:7b:58:d9:
52:0b:1c:94:b0:33:03:85:ad:76:16:26:63:4d:0a:
f6:2d:1a:0f:26:5a:3f:dd:0e:77:12:1e:0f:a6:a2:
c1:0a:49:19:d2:44:d6:39:12:8a:e8:ff:d3:90:54:
37:7a:bf:10:1b:97:43:0b:72:ed:3c:3c:d3:52:9c:
5c:31:c7:7f:53:7b:63:0c:a7:52:c6:21:06:9a:0f:
e2:a3:d8:e8:f6:ff:3b:3a:f5:0e:ee:34:d6:17:45:
d6:8c:9e:5f:67:dc:86:e8:74:fb:3e:f6:84:c2:fd:
48:6b:b9:76:7d:29:53:1c:c0:92:73:5a:61:4f:95:
bd:e6:8d:9d:d2:a4:98:af:52:2d:96:10:e1:fe:94:
86:dc:34:47:38:66:15:bf:d8:db:ba:5d:e5:56:fa:
83:8c:d5:ca:85:fd:44:ec:ff:6f:88:20:c9:0c:2a:
e2:03:c3:35:48:00:71:fc:a1:da:c9:0e:d6:57:56:
69:a4:40:49:24:5c:a1:f2:fe:95:4c:70:78:fb:d1:
a1:41:73:b9:48:4d:d3:eb:c2:c8:dc:bf:7c:74:d2:
47:13:3c:a2:a6:90:c6:c2:55:31:99:a2:dc:13:b8:
64:f1:47:90:2b:24:79:fb:d4:73:f8:7d:67:20:a8:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:01:85:D0:7B:A6:DB:B1:4A:74:50:EE:1F:4D:F6:2E:62:90:7F:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33828510A0DC11EFB0AE2162762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.89.0/24
Signature Algorithm: sha256WithRSAEncryption
68:67:de:ed:ce:79:07:4f:cf:7b:b8:6a:e6:04:af:bf:e6:5d:
58:37:d4:c1:be:cb:8d:ee:ab:1b:a9:2d:e3:79:9f:50:17:15:
4f:a2:ce:cb:06:73:2a:b8:cc:d4:76:5f:c4:47:bd:6e:d4:73:
42:40:93:04:aa:da:dd:87:42:79:9d:c9:f5:e3:78:3e:a2:ca:
c1:97:94:f3:79:e3:e9:07:f3:59:27:b1:a2:29:f9:59:e0:5b:
80:f1:f0:61:92:34:74:45:e6:f2:c3:e6:af:d7:82:90:d3:fa:
24:a1:64:ed:b8:8b:75:4e:76:c1:a2:59:7d:70:92:5d:39:94:
30:97:d0:fb:8d:13:59:68:05:a8:b3:a9:cb:f0:68:ef:07:75:
ff:84:6a:a4:cf:ed:0d:6a:ec:27:ef:cd:84:9e:2b:02:4e:65:
ad:9a:9a:0d:87:62:32:d8:b8:0a:30:47:48:91:2c:0f:4d:43:
11:a1:5c:3c:93:13:53:fe:a6:ec:1a:44:82:7c:a7:08:4a:a9:
da:66:46:65:be:78:7a:09:b4:22:46:3a:ff:41:80:03:bc:c0:
4b:e1:79:d0:ba:e4:ea:79:41:e4:79:45:49:6e:f5:35:37:5c:
d4:69:01:3b:ab:cb:92:c4:d8:98:d2:41:c5:03:ea:73:7b:92:
b4:0f:29:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:24 2024 by rpki-client on console-fra.rpki-client.org