Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37782BDE985D11EFA4312557762E951A.roa
File: 37782BDE985D11EFA4312557762E951A.roa (raw, json)
Hash identifier: rBJC9/CFZ5h0vk8AJZbe4HPpUTgElKKCK5jY+oUjDvw=
Subject key identifier: 49:AA:2A:56:E3:91:5D:AD:D6:1B:AB:C7:45:5C:94:50:7D:EB:3A:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CBAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37782BDE985D11EFA4312557762E951A.roa
Signing time: Fri 01 Nov 2024 14:26:00 +0000
ROA not before: Fri 01 Nov 2024 14:25:57 +0000
ROA not after: Mon 25 Nov 2024 14:25:57 +0000
asID: 62468
IP address blocks: 156.245.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52143 (0xcbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 14:25:57 2024 GMT
Not After : Nov 25 14:25:57 2024 GMT
Subject: CN=6724e4f8-b8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:76:e0:6b:bc:61:66:be:6c:e4:46:5c:5f:50:
89:e3:60:dd:ee:ca:63:7d:eb:85:65:8f:1a:a0:63:
35:b1:a1:cc:05:fb:04:cb:d5:0f:b7:18:a5:9e:90:
ec:3e:3a:e8:ae:e1:75:6e:cf:42:2f:23:52:db:72:
55:3c:4a:7f:ac:6c:06:d3:77:88:18:6d:50:fd:4a:
eb:3c:33:ad:a4:db:20:25:54:b1:90:ab:d6:4f:07:
57:4f:c6:69:fc:71:7b:5f:6c:7f:5d:11:6f:f8:98:
1c:ce:69:eb:17:3d:fc:24:64:28:28:f5:f4:3c:4a:
16:59:c4:1e:c6:10:4c:ee:9a:41:2c:87:c5:49:42:
3e:8d:10:f5:65:ae:2b:b8:39:97:e5:86:a5:f5:3e:
d3:e5:cd:69:0d:c7:e2:2d:39:cd:d4:ca:a5:78:5c:
3b:55:56:35:3b:2f:b7:41:77:d8:c7:0d:39:bf:4d:
79:8e:3c:be:2c:62:80:6a:5a:2c:85:f4:3d:08:20:
b9:42:37:55:29:22:fc:d6:8c:e9:97:95:15:c9:c4:
d7:ff:be:32:5b:12:f6:2f:4a:e8:10:9d:d3:77:9d:
5c:14:00:b4:d9:8e:66:b0:ef:dd:5e:9f:e5:71:f0:
7e:78:19:d5:30:c7:32:2e:73:a8:11:51:7e:94:fc:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AA:2A:56:E3:91:5D:AD:D6:1B:AB:C7:45:5C:94:50:7D:EB:3A:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37782BDE985D11EFA4312557762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c5:05:2b:08:9b:4a:7d:13:63:98:56:59:7a:92:cb:d4:8b:
d8:59:44:30:12:28:5f:a6:94:4f:89:e4:58:53:29:eb:28:d0:
ea:bd:ff:27:ab:39:20:93:57:4b:85:67:08:31:ff:6d:4d:12:
f1:21:99:b8:f5:50:33:0b:38:0c:f2:19:f6:ee:91:38:10:15:
4e:cd:3f:c3:a0:f2:cf:13:3b:14:ef:b6:c1:d9:48:e1:e6:c4:
88:0a:01:bc:1c:44:42:52:bc:40:9b:ac:fe:92:4d:3c:4d:ff:
a6:a6:8a:34:9f:2f:4e:6a:ee:2f:e7:ee:61:7c:8c:28:aa:b9:
d4:4b:b9:c5:75:dd:52:75:c6:48:99:5b:e3:0e:44:b1:a9:ea:
6f:83:4c:68:a0:d7:fb:44:69:f2:c1:cf:71:72:94:64:f8:c8:
57:c6:35:ef:17:5f:f1:d2:2d:2e:4f:c1:39:4b:28:2d:db:78:
ad:34:72:95:08:ba:4e:d6:d2:c9:4e:8c:d9:a9:73:5f:f0:22:
25:31:6c:d0:d5:7c:5a:41:85:fa:ab:1a:88:e8:5f:44:2d:93:
d1:6e:0d:8e:0e:ce:7d:8f:26:52:c6:73:c4:26:17:90:c2:30:
26:77:20:74:5c:c5:34:69:28:f4:8e:02:cd:f2:7e:55:4b:5a:
58:3a:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:25 2024 by rpki-client on console-ams.rpki-client.org