Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36B42D90A26E11EF8B41D469762E951A.roa
File: 36B42D90A26E11EF8B41D469762E951A.roa (raw, json)
Hash identifier: FpXgd98MB4t6hJfSeo0uSWjqsFSbvPf76bK0pMzSJns=
Subject key identifier: 85:D5:3E:F3:62:BC:9A:71:77:2C:02:58:07:00:01:06:CE:CA:17:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D2BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36B42D90A26E11EF8B41D469762E951A.roa
Signing time: Thu 14 Nov 2024 09:52:52 +0000
ROA not before: Thu 14 Nov 2024 09:52:48 +0000
ROA not after: Sat 23 Nov 2024 09:52:48 +0000
asID: 137443
IP address blocks: 156.236.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53951 (0xd2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 09:52:48 2024 GMT
Not After : Nov 23 09:52:48 2024 GMT
Subject: CN=6735c874-7b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:4b:b8:5c:93:c4:8c:4a:3b:3b:05:36:d6:
7d:09:d1:63:79:d3:2c:87:9b:e2:7b:b2:80:15:6e:
be:af:cf:2d:0b:4c:27:e3:14:26:76:0f:bd:16:f8:
5d:ea:4b:20:74:3b:64:0f:5e:76:6c:01:1a:ba:17:
66:74:cd:49:f4:19:71:91:fc:70:56:26:c9:c1:31:
5f:1e:49:e5:8c:cc:35:30:20:af:0e:7b:31:a9:93:
17:82:10:83:7c:0c:3c:eb:6e:a0:91:89:17:45:f1:
d3:63:5e:37:6a:51:5a:4e:3f:c4:4a:dc:e5:82:86:
e7:b1:42:cc:7d:8c:23:9e:0b:b8:b0:ee:d6:f1:f2:
df:aa:bf:e3:91:99:e2:01:67:c6:c3:47:dc:51:94:
4f:7a:e4:7c:b0:28:09:13:b0:0a:ca:53:b6:47:93:
88:5e:2e:ca:b3:e7:87:a4:46:4b:0e:31:03:81:32:
ab:fd:9c:85:03:1e:27:a1:e0:dd:d9:c0:6d:5d:c8:
4a:41:7b:a3:b9:bc:41:c3:50:8d:54:1f:d8:17:f8:
43:8c:c5:47:7a:24:6a:14:53:98:43:7e:23:b9:ed:
8b:43:62:3c:47:9c:27:48:d2:93:8e:23:fe:f6:17:
ae:32:45:83:10:aa:74:2a:7f:90:d5:e1:73:83:98:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D5:3E:F3:62:BC:9A:71:77:2C:02:58:07:00:01:06:CE:CA:17:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36B42D90A26E11EF8B41D469762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:ed:37:21:9d:d6:ef:13:2b:ba:9a:5f:79:f8:5d:fe:13:f3:
e1:b0:f5:83:ab:66:b9:a3:2e:29:bb:d9:70:be:e0:32:a3:3e:
20:05:c0:8d:4c:fd:93:72:b7:5a:54:82:31:86:c2:ef:15:20:
5b:00:d5:aa:d7:01:98:1a:fa:38:c2:a1:63:40:9c:59:0b:14:
6d:fd:fb:27:5a:44:d4:cf:93:9e:80:23:71:f7:c9:28:75:cf:
ad:4a:b6:41:db:80:e0:7e:6e:e5:ec:03:e0:ab:c3:70:ac:89:
e1:95:07:60:7e:8b:bc:8a:56:22:17:c0:6c:30:37:f5:2e:3d:
76:ad:f9:a1:10:ff:b2:2b:29:0c:6a:3c:ae:b2:75:8e:ff:66:
dd:3d:5b:79:93:a4:b2:5a:b3:57:61:a3:4f:75:1c:00:c6:e7:
78:d6:ef:92:f0:9c:51:b7:9a:c2:6a:54:94:c7:90:30:5c:d8:
62:2d:d2:bf:2b:05:f7:a8:b4:1f:fc:b0:54:c9:cf:ab:54:04:
d3:36:93:b3:b5:92:b1:9a:65:ad:56:29:c0:fa:9c:4c:e1:ac:
a3:2b:ba:a1:ce:e8:75:93:1e:f5:fc:34:e7:37:b5:90:8c:3f:
72:1a:08:48:ea:87:d8:b8:c4:f2:d3:61:92:7b:16:62:fa:ef:
f4:03:7b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:25 2024 by rpki-client on console-ams.rpki-client.org