Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57DEDFE89B5B11EF890252BC762E951A.roa
File: 57DEDFE89B5B11EF890252BC762E951A.roa (raw, json)
Hash identifier: 0pMZM010i1FES+d9SFR+PEdejgKq3JpG8qU24LSHttg=
Subject key identifier: 8C:C8:9C:6B:BD:D9:F9:61:C0:C4:61:C0:21:A0:0A:BD:BE:A3:EF:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57DEDFE89B5B11EF890252BC762E951A.roa
Signing time: Tue 05 Nov 2024 09:50:09 +0000
ROA not before: Tue 05 Nov 2024 09:50:05 +0000
ROA not after: Mon 13 Jan 2025 09:50:05 +0000
asID: 212238
IP address blocks: 156.235.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52811 (0xce4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 09:50:05 2024 GMT
Not After : Jan 13 09:50:05 2025 GMT
Subject: CN=6729ea51-425c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:d5:37:4f:5a:6a:7a:3a:26:9d:cc:d2:b3:
ee:07:08:bf:83:94:c1:d2:ba:30:2a:e0:70:8a:2e:
a5:5e:bd:77:a8:bc:56:d8:1e:08:14:3e:87:9e:6a:
ef:be:1a:d2:58:47:e2:60:1c:92:21:51:8e:9d:df:
d0:d4:d9:6d:87:26:7b:0c:e1:62:9c:56:23:9a:cf:
4c:fe:5c:3f:e0:6c:05:9e:1b:42:64:db:5e:7b:97:
02:6d:bf:16:14:16:7c:31:74:41:b7:c8:f6:77:06:
7f:53:a1:83:18:7a:62:31:83:f3:0e:c6:40:b6:f6:
0d:38:4a:7a:d0:d8:e8:d3:1d:3c:7c:c1:8c:00:17:
33:3b:c3:3a:4f:33:a4:3b:c2:96:b7:94:01:53:86:
3f:86:49:be:6b:ba:8f:19:93:ea:ca:e9:e7:b7:65:
87:04:aa:0d:ec:6a:70:39:92:4a:54:d8:63:b7:af:
53:24:ba:b6:d8:42:e8:e4:95:46:1d:93:2f:ca:e6:
1e:1e:da:29:50:8f:ab:10:78:2c:43:fb:85:b6:31:
11:b1:2b:12:2e:ac:6e:cc:db:94:a3:0e:36:36:3f:
9c:3f:6c:fa:82:d3:c3:ba:49:db:18:00:ea:98:db:
61:a1:da:07:61:68:dc:a0:66:dd:18:87:ae:2f:dc:
4a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C8:9C:6B:BD:D9:F9:61:C0:C4:61:C0:21:A0:0A:BD:BE:A3:EF:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57DEDFE89B5B11EF890252BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.53.0/24
Signature Algorithm: sha256WithRSAEncryption
91:16:5a:77:63:7c:33:1b:2a:f0:0a:7b:2f:82:a2:8f:90:96:
01:84:75:7d:4a:56:c8:56:7d:78:8d:2f:17:e3:4b:39:6b:ba:
1c:fc:03:9a:71:26:40:bb:6a:f3:74:9b:f1:4a:fb:91:02:ec:
82:fe:fa:3c:e8:3a:60:82:57:9c:45:33:da:23:61:7d:59:2a:
5a:43:2d:fb:92:15:05:11:df:b4:be:9c:af:9c:eb:94:0b:33:
cd:d1:96:f3:a1:13:80:9e:35:92:b6:a2:1c:c3:3f:04:cf:8c:
42:e4:d4:a3:cc:b9:bb:7f:65:18:63:83:2e:f2:57:bd:80:69:
3f:b7:6e:f5:78:41:18:80:41:44:8a:50:0a:88:ac:30:ec:59:
f0:c7:f0:79:f6:0e:0c:17:43:71:10:a7:d0:ff:f9:58:37:68:
29:4d:a9:1c:fc:58:e8:a0:13:c6:11:19:3b:38:73:a2:e7:25:
b7:54:1b:31:d2:4e:d8:5d:93:d7:4a:ff:da:28:a9:e8:22:02:
f0:60:89:4f:8f:9c:fb:9b:25:69:c2:e4:34:f8:43:45:b0:a6:
91:c3:56:e0:47:cb:ab:3f:3c:38:54:88:36:7c:32:1d:5b:5f:
51:b6:5f:84:62:46:98:30:33:87:ea:95:1f:17:d2:75:28:f4:
75:06:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:30 2024 by rpki-client on console-fra.rpki-client.org