Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38FB39429B7D11EFB7EBE78D762E951A.roa
File: 38FB39429B7D11EFB7EBE78D762E951A.roa (raw, json)
Hash identifier: kzSwnFR0NIe344UIshUmYAWb3/aWJl+H2UxUFaR3ADc=
Subject key identifier: E8:61:EF:EB:C0:65:00:1F:C2:8B:E8:94:DD:BB:F0:71:D2:D4:4A:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38FB39429B7D11EFB7EBE78D762E951A.roa
Signing time: Tue 05 Nov 2024 13:52:40 +0000
ROA not before: Tue 05 Nov 2024 13:52:36 +0000
ROA not after: Mon 13 Jan 2025 13:52:36 +0000
asID: 22773
IP address blocks: 156.238.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52863 (0xce7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 13:52:36 2024 GMT
Not After : Jan 13 13:52:36 2025 GMT
Subject: CN=672a2328-bf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8d:bf:ed:29:66:e5:1b:b9:63:c8:49:db:0c:
e2:c0:35:98:3e:dd:7e:8f:ed:62:e2:36:6d:6c:31:
c0:37:eb:82:6e:84:45:ce:58:d8:e2:c9:0e:b1:d9:
a4:f6:c4:e3:3c:3e:c6:1c:6f:04:40:91:2e:34:bd:
be:a0:bf:bf:e2:7e:d1:4c:ab:2a:50:e5:b5:8f:9b:
40:90:08:a2:a0:ba:a7:73:32:29:07:be:59:79:71:
9c:98:4e:b8:c4:63:02:bc:4c:56:ad:10:b9:00:e8:
0f:be:87:91:a9:c8:91:69:f4:b4:aa:80:46:ba:4a:
70:19:2e:67:a8:20:3f:37:3c:1e:89:10:3c:86:97:
32:f9:bf:48:88:a5:7a:ae:e6:ee:a6:c6:4b:a4:0f:
a6:10:38:fd:50:e4:87:1e:45:42:e3:74:b6:70:8d:
53:ec:57:51:08:46:49:18:14:3f:ed:70:bb:74:ba:
34:cc:2b:ec:ef:24:67:fe:df:50:7c:10:8d:61:a8:
26:c8:29:a1:b0:18:80:c4:5d:7f:55:03:63:47:77:
d5:2f:28:2b:f4:f0:cb:c9:b6:8e:04:f6:92:93:2c:
cd:dd:45:33:75:9a:df:b7:da:18:6b:4e:77:71:26:
b6:95:e1:72:f7:ce:66:45:ed:06:1c:7e:fa:b6:ee:
01:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:EF:EB:C0:65:00:1F:C2:8B:E8:94:DD:BB:F0:71:D2:D4:4A:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38FB39429B7D11EFB7EBE78D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.144.0/20
Signature Algorithm: sha256WithRSAEncryption
75:25:fb:69:ab:f3:5e:85:fd:84:09:43:78:f6:90:82:fa:4a:
7f:a0:56:87:09:4a:5f:a7:8c:60:69:93:cc:ec:25:30:b0:c8:
2b:d2:77:02:c9:b4:c8:c9:e0:ad:bd:dd:5b:f3:10:33:c9:44:
82:9a:76:09:ba:94:23:84:37:8c:2f:db:f0:2b:70:7d:1d:2c:
24:69:3a:97:d9:fc:61:b7:52:92:b4:4a:3c:ea:35:76:72:d6:
26:d5:b6:69:b5:99:3d:61:29:95:68:fa:46:c8:6a:90:b4:cb:
18:cc:ef:2c:4b:90:3b:c3:2d:32:9b:77:45:e1:a2:8b:a2:87:
40:97:3b:f4:33:a0:ad:43:8f:b3:a5:13:06:33:12:35:5e:e2:
c1:06:f7:2a:89:76:1c:37:27:3e:8e:75:22:69:3b:b1:9a:6f:
64:20:86:89:bd:54:3e:2f:01:b7:96:eb:a7:4d:a1:e2:ea:c3:
7e:c6:42:29:ea:e4:e7:82:eb:30:d3:f5:a8:71:38:d1:5f:40:
c6:19:ea:cf:ec:f5:45:31:17:75:b9:56:fc:86:66:fc:b3:ca:
1b:c2:28:f2:40:9c:df:9e:8d:a1:06:2e:43:02:8b:6c:8d:6f:
c9:a5:7e:ba:93:99:2f:f1:e8:04:d0:ee:03:51:82:6d:d1:ae:
21:4b:de:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:25 2024 by rpki-client on console-fra.rpki-client.org