Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C088A1E9B7C11EF91EE7D89762E951A.roa
File: 3C088A1E9B7C11EF91EE7D89762E951A.roa (raw, json)
Hash identifier: sFrqZ2WOEnV6fpkUjwF2FKe/EjpIiM5kdoqBp22wg7s=
Subject key identifier: F7:EC:E2:3D:12:C6:FF:E9:60:C3:C2:41:CD:DE:9B:D8:97:10:7E:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE73
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C088A1E9B7C11EF91EE7D89762E951A.roa
Signing time: Tue 05 Nov 2024 13:45:36 +0000
ROA not before: Tue 05 Nov 2024 13:45:32 +0000
ROA not after: Mon 13 Jan 2025 13:45:32 +0000
asID: 22773
IP address blocks: 156.237.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52851 (0xce73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 13:45:32 2024 GMT
Not After : Jan 13 13:45:32 2025 GMT
Subject: CN=672a2180-ffe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:0c:f7:2c:61:3a:0a:88:e1:7f:1e:bd:7b:
01:a3:48:c8:73:c9:71:0b:64:a0:74:4f:a8:85:70:
76:cd:c6:ab:5e:21:7a:ea:3f:ca:72:96:f3:55:f0:
56:b4:20:82:34:56:e0:01:39:ce:cf:96:a9:22:49:
af:26:32:6b:d7:2d:ee:29:90:28:af:de:f7:57:0d:
90:ef:36:f3:c3:1d:af:48:a3:01:2b:87:87:ad:d1:
55:57:b5:0c:33:4c:e8:4d:a9:34:60:d1:0d:4f:a3:
3d:d5:fc:8a:6f:58:5a:24:10:be:83:fe:68:38:a8:
15:66:ae:b4:85:70:07:1d:9f:2e:8c:50:12:5b:7b:
98:a7:cd:eb:a7:a6:f5:cc:56:9d:91:30:ad:44:27:
97:c1:53:b5:64:bb:16:2f:6a:22:df:d9:70:51:bf:
31:63:98:9b:32:cc:53:e9:7b:b1:df:f0:7c:7b:f3:
a1:d1:a7:5c:a2:83:72:a3:62:22:da:c5:c5:44:52:
40:0b:6f:24:74:73:35:77:5c:65:79:b5:1d:5b:51:
7f:08:27:73:2a:33:2a:0f:37:83:74:b8:f1:a6:83:
b9:e5:b8:2c:c1:f0:a8:e7:1b:58:7d:8a:6c:83:6a:
1d:a7:70:8f:eb:eb:6a:cd:b9:66:55:e7:9e:27:d5:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EC:E2:3D:12:C6:FF:E9:60:C3:C2:41:CD:DE:9B:D8:97:10:7E:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C088A1E9B7C11EF91EE7D89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.0.0/24
Signature Algorithm: sha256WithRSAEncryption
70:07:a8:8e:16:da:96:77:98:40:24:bd:4f:78:a1:2c:04:34:
68:3b:c1:b4:44:bd:1c:40:ec:f9:d3:95:38:d8:f1:e2:7a:fd:
ef:37:59:40:35:b2:05:fe:b6:d2:db:3c:58:9b:c0:ef:cc:48:
a5:b5:98:40:38:55:79:c4:0f:c8:1f:ad:f5:7e:27:f3:da:38:
f9:c3:31:19:5c:2e:d1:a0:4f:7a:b7:3b:b4:37:43:62:f2:69:
b8:ec:5b:62:bb:cd:aa:30:44:65:ed:53:4e:a7:82:25:86:13:
ff:2f:da:82:34:a4:e2:c8:ba:39:7a:52:f1:ad:d6:7f:82:da:
ad:4d:63:7f:ee:4f:7a:24:7a:d2:05:36:dc:4c:3b:c0:10:33:
e4:a1:ef:71:f1:43:6d:da:d0:8f:b0:67:2b:ec:e7:63:ea:19:
98:c4:a3:a3:83:12:87:09:e4:15:24:f0:bb:39:fd:3c:a7:95:
6c:8e:32:c3:96:71:11:74:46:81:11:0f:7f:f7:d3:3b:27:d7:
17:26:41:31:a9:74:39:cc:34:ab:90:97:b4:d9:0f:47:86:bc:
67:49:cc:68:e8:51:5d:21:fe:d2:1a:77:80:50:87:51:61:07:
dd:72:f8:8d:56:29:f2:94:ff:47:d0:f7:b8:b0:92:29:cd:78:
16:bf:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:26 2024 by rpki-client on console-ams.rpki-client.org