Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50BDED98A4BC11EFB4D86A75762E951A.roa
File: 50BDED98A4BC11EFB4D86A75762E951A.roa (raw, json)
Hash identifier: 5k91uZAvn+v2ifwFDLLddYD62lM4mqZLdFj9Sc92Uq0=
Subject key identifier: 41:CC:16:94:A3:9C:B8:82:EA:FB:1D:CB:A1:91:CD:20:BA:D6:A1:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D45B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50BDED98A4BC11EFB4D86A75762E951A.roa
Signing time: Sun 17 Nov 2024 08:16:59 +0000
ROA not before: Sun 17 Nov 2024 08:16:55 +0000
ROA not after: Wed 18 Dec 2024 08:16:55 +0000
asID: 60223
IP address blocks: 156.253.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54363 (0xd45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 08:16:55 2024 GMT
Not After : Dec 18 08:16:55 2024 GMT
Subject: CN=6739a67b-055a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:77:4b:6b:89:de:ec:60:2e:57:72:8c:56:
23:f2:05:8f:64:0f:87:25:fb:65:ce:d6:86:33:65:
4b:93:80:68:cb:37:d0:7e:47:95:2a:24:c4:0f:f1:
5d:86:d1:b4:5b:48:56:14:62:a2:2d:dc:ce:64:f0:
85:7e:4c:a7:0d:60:da:f8:ba:79:e6:3f:85:f7:18:
6c:d5:01:fc:c5:db:e1:c0:3e:db:a2:e0:f6:87:e9:
1b:2e:e5:20:ed:a7:47:51:4f:37:73:5a:b1:e5:52:
d0:80:e4:dc:d3:7f:7b:9c:55:74:cf:87:32:11:8d:
84:5f:0d:b6:55:6e:51:53:f9:ae:6f:53:9d:f4:d7:
a2:39:4c:70:4f:f2:2e:24:99:a6:25:6f:da:05:f8:
f7:10:4a:6a:bb:f1:ca:2d:5e:ba:79:50:f2:a2:69:
52:fc:a9:e8:7a:21:b4:3a:29:4e:c5:87:e2:2c:8c:
45:79:5e:db:0f:f4:e6:20:17:65:38:21:dc:7b:fb:
7d:9b:27:d5:d0:d3:bd:b6:60:d9:b4:24:82:19:b9:
49:0a:22:3e:64:db:ca:23:c8:e5:46:f8:46:11:06:
5a:b8:a6:28:18:8f:f3:67:36:3f:71:4a:68:0c:de:
d6:da:97:3d:55:fb:3f:64:00:4f:4f:c7:d7:ed:58:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:16:94:A3:9C:B8:82:EA:FB:1D:CB:A1:91:CD:20:BA:D6:A1:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50BDED98A4BC11EFB4D86A75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.224.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:8a:79:45:db:39:9b:0e:3d:2e:4b:e8:3f:89:70:ce:7d:38:
0f:b3:74:e1:1c:7d:a8:73:90:b1:ad:da:02:fa:91:78:a6:32:
95:ca:9e:46:ec:6a:5c:51:9d:56:16:38:49:44:a5:e2:ff:21:
ef:80:5e:f9:e3:e9:5b:60:18:09:05:0f:58:03:ed:b1:92:1a:
b0:67:6b:14:fb:3c:6f:e9:72:4d:33:96:3d:1a:da:98:69:63:
06:eb:2b:4e:13:12:34:07:12:c6:a8:b3:39:aa:be:3c:08:00:
57:0c:3f:9d:4b:b4:27:e8:fc:5d:d2:ad:fe:26:26:df:81:e1:
8e:5d:93:22:fc:76:2a:89:1f:e1:30:20:c2:e2:eb:27:26:7a:
a2:1e:f3:2d:d8:fe:d1:d1:b3:11:96:00:81:f3:36:f4:e1:58:
2e:1c:92:7d:06:6c:cc:50:15:c8:40:aa:21:95:7e:44:52:fa:
4c:b2:38:e3:8d:92:50:b0:8f:27:0c:02:64:29:d8:f7:a7:92:
57:df:a3:94:61:25:72:5f:4f:c4:83:07:34:ca:65:a8:e8:93:
7f:28:8c:c9:c5:be:60:8c:fa:a3:47:7a:08:1e:7b:da:73:5d:
ec:67:d3:64:8e:09:69:aa:27:95:b1:d7:36:bd:99:07:78:cc:
15:28:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:30 2024 by rpki-client on console-ams.rpki-client.org