Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42819122A0DD11EF8ABAA166762E951A.roa
File: 42819122A0DD11EF8ABAA166762E951A.roa (raw, json)
Hash identifier: i8GqQ/Yg0pPc1RlQaUxs72I7JkOvvgW7byu7Vw7VDT0=
Subject key identifier: 80:07:A7:CE:1C:C4:F2:76:3B:3B:FB:BE:86:AA:1A:F2:87:F0:F0:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D18F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42819122A0DD11EF8ABAA166762E951A.roa
Signing time: Tue 12 Nov 2024 10:02:44 +0000
ROA not before: Tue 12 Nov 2024 10:02:40 +0000
ROA not after: Sat 01 Feb 2025 10:02:40 +0000
asID: 149440
IP address blocks: 156.236.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53647 (0xd18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 10:02:40 2024 GMT
Not After : Feb 1 10:02:40 2025 GMT
Subject: CN=673327c3-5b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:cc:5b:c2:92:4c:71:62:6a:d8:a7:67:cc:
cc:57:1f:39:08:d1:32:97:67:3a:48:bf:28:87:a3:
08:be:52:9c:02:76:03:fc:22:fc:15:5d:f0:cf:c4:
dc:5a:b9:80:a3:e5:65:e8:41:3d:71:c5:44:0d:fd:
63:c5:3b:3b:ce:6f:ec:a4:7f:9f:17:14:69:8b:02:
a6:c3:43:1a:45:d3:74:6f:6f:be:9d:c6:40:a2:16:
e7:ed:6e:b7:51:88:e6:96:e2:8c:19:3a:1d:bd:12:
fe:43:84:79:cc:5e:ef:b1:14:12:77:c3:02:4a:8b:
5d:0a:c4:85:bd:e7:34:b0:78:04:22:a9:5e:27:6f:
58:5c:68:4c:68:71:3f:02:4d:46:1f:19:9b:3d:17:
c1:14:28:44:40:5a:53:3b:44:72:04:10:3b:ee:f8:
ba:5f:2f:8d:8d:77:1d:ee:1d:b0:67:fc:f9:ee:ea:
55:24:cb:58:f5:fb:e3:75:7f:19:6c:d6:01:0c:2f:
11:da:ea:6a:2e:6b:e5:43:de:b6:95:41:d3:0a:f4:
20:18:0d:5a:ac:9c:90:40:45:03:20:2d:e2:56:5e:
f0:97:5d:d3:a9:8a:5d:c4:07:3f:95:2e:d8:a7:a3:
1f:55:d3:0a:d7:4a:bb:85:ef:c6:be:fe:36:60:bf:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:07:A7:CE:1C:C4:F2:76:3B:3B:FB:BE:86:AA:1A:F2:87:F0:F0:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42819122A0DD11EF8ABAA166762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:1b:57:1b:ed:d3:4e:14:d7:37:c5:9b:65:be:25:5a:79:90:
1f:79:e8:be:f7:5a:5b:0d:cc:9c:77:31:7f:05:42:54:de:d8:
32:87:6b:7f:6d:a2:67:02:c6:41:45:fb:fc:bb:41:f5:90:25:
45:86:9f:43:a3:83:f5:df:32:94:bf:ac:3f:fa:70:12:6f:49:
37:0f:e4:91:56:84:8a:5f:4b:23:db:38:8a:3c:4e:90:00:37:
7e:cf:fa:70:01:42:56:79:7b:4c:f0:43:cb:0e:9c:1e:8a:3f:
7b:ed:6d:0b:e3:39:fb:a0:3a:bd:19:ab:4d:7f:18:bf:9b:90:
a5:bd:da:84:7c:e4:ae:a9:75:97:9f:68:e6:8f:59:c7:c8:e4:
f1:69:84:3a:69:04:62:37:2c:5c:3f:7a:0b:79:1b:97:2c:2b:
83:fb:84:67:ec:94:1f:95:1a:f6:e8:20:e7:b4:de:1c:45:0f:
bb:fa:6d:12:2f:0f:d1:c3:4f:a2:05:c4:49:f9:57:a5:9d:44:
69:89:6e:b2:0c:35:43:a5:02:91:1f:5d:21:be:74:d0:e8:a3:
7f:5d:a5:70:ad:7a:ac:60:9c:1b:19:a0:33:4a:c2:0d:76:f0:
e5:15:dc:4e:06:8c:9c:9f:cc:09:ba:fb:31:b8:2d:a1:61:ee:
9e:0f:e4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:27 2024 by rpki-client on console-ams.rpki-client.org