Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46B1FC4E76AA11EFBCDA2472762E951A.roa
File: 46B1FC4E76AA11EFBCDA2472762E951A.roa (raw, json)
Hash identifier: kZg3I4BMXFNGU3XUecwgt/JsdKFowvDVSE+cYBAxSZs=
Subject key identifier: 9E:89:46:93:BC:30:FB:9A:59:7A:BA:8B:95:79:C3:1F:57:C4:CF:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B8D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46B1FC4E76AA11EFBCDA2472762E951A.roa
Signing time: Thu 19 Sep 2024 17:11:57 +0000
ROA not before: Thu 19 Sep 2024 17:11:54 +0000
ROA not after: Tue 24 Dec 2024 17:11:54 +0000
asID: 132839
IP address blocks: 156.242.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47318 (0xb8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 17:11:54 2024 GMT
Not After : Dec 24 17:11:54 2024 GMT
Subject: CN=66ec5b5d-b288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:8f:0a:ab:0b:82:cb:3b:87:08:93:f2:3f:
68:75:06:68:c5:f0:bd:26:b0:4f:9f:f3:c0:33:a6:
eb:69:b1:d6:3c:e3:29:e1:4e:c6:8e:01:bd:f7:ae:
21:d9:6c:e7:32:20:0a:8a:e3:49:fd:c9:1c:9c:87:
2a:1d:28:cf:d9:30:65:6f:25:7c:d4:4d:7c:d4:86:
e2:a4:44:4d:c6:f0:67:c9:63:31:72:a4:59:bb:fe:
00:1b:f1:fb:73:d6:b9:42:cf:4c:49:59:c3:0f:dc:
d5:9d:6e:fa:fb:99:de:2b:ee:a0:df:c9:55:eb:ea:
04:8d:48:ad:99:91:7e:66:c4:0b:90:55:de:4f:97:
0d:4f:c5:9f:a6:4a:4c:14:aa:d7:79:f3:67:36:6a:
cb:6e:64:6a:a3:fb:3a:65:be:ad:d0:b6:f1:af:fe:
d4:ee:0b:98:9a:5e:3e:c9:d8:1a:b1:5b:37:1f:b3:
3e:df:03:ff:4d:1c:ff:3b:c3:4c:52:70:36:ca:26:
6f:5d:d6:a6:79:3b:8e:29:55:28:ef:44:d3:b8:38:
ed:f9:ad:d8:0d:2e:bb:a2:62:d0:c7:41:15:48:94:
e8:46:d2:0d:b0:6c:cc:b0:b0:0e:fa:c6:88:ba:cb:
45:76:54:d4:df:34:f2:c1:47:a3:06:d9:d9:50:7c:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:89:46:93:BC:30:FB:9A:59:7A:BA:8B:95:79:C3:1F:57:C4:CF:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46B1FC4E76AA11EFBCDA2472762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.128.0/19
Signature Algorithm: sha256WithRSAEncryption
3b:27:18:5e:40:0a:e2:5d:d6:cc:28:69:87:e3:73:ca:b0:d8:
cf:76:58:42:ac:03:69:e0:3e:ba:49:aa:25:37:00:2b:00:59:
e5:38:a9:26:83:b6:66:44:98:77:28:6e:b6:c3:fe:8b:33:fe:
1c:70:7b:0d:25:c6:d0:bd:1b:f2:e3:21:31:92:41:da:01:f6:
2a:a8:3b:18:4b:30:82:a3:4a:9c:92:8b:17:ab:12:08:8c:71:
b4:2e:53:a5:df:a7:91:63:19:9a:a5:6d:8d:f5:58:9c:58:8b:
47:1a:4c:af:7c:25:17:d8:d1:92:8f:08:76:4f:56:64:62:77:
48:57:f9:93:db:52:e3:fb:de:ec:be:cc:36:2d:c9:22:6e:6b:
39:6f:6f:47:03:e9:7f:83:f5:bd:11:99:2a:6b:bd:7c:83:29:
93:4f:42:5a:85:75:58:df:1b:e5:13:15:7f:28:49:ef:33:9b:
44:88:02:55:e7:4d:bf:ce:24:b8:6c:0b:f2:d8:cd:65:ab:dd:
73:e8:d0:3e:3f:5e:b1:58:47:e3:82:ff:d1:fe:b6:f9:4f:8a:
93:f7:57:9f:15:a4:96:ba:a9:2c:24:0b:20:1e:80:61:65:2c:
c0:7b:fd:2a:e4:91:24:4f:0c:bc:80:56:c5:b1:4f:1c:fb:c9:
ae:49:bd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org