Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58BD50029C1911EF99AAAC6D762E951A.roa
File: 58BD50029C1911EF99AAAC6D762E951A.roa (raw, json)
Hash identifier: EtmhHxmSVP5PAfluD1L/4NXIvkBeYAoFTY0UzjzSu/U=
Subject key identifier: D8:55:0D:A2:42:62:07:D7:B4:C5:F9:EC:3B:C8:A3:4E:32:41:38:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CF16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58BD50029C1911EF99AAAC6D762E951A.roa
Signing time: Wed 06 Nov 2024 08:30:15 +0000
ROA not before: Wed 06 Nov 2024 08:30:11 +0000
ROA not after: Mon 25 Nov 2024 08:30:11 +0000
asID: 152092
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53014 (0xcf16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 6 08:30:11 2024 GMT
Not After : Nov 25 08:30:11 2024 GMT
Subject: CN=672b2917-82ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:ca:d1:9a:86:48:64:b3:5e:36:2f:ba:e0:
eb:dd:d7:a5:99:9b:77:7d:81:90:2e:6e:91:e1:12:
f5:e7:9b:8e:fb:58:64:be:40:65:d7:b7:85:63:69:
e2:88:f8:28:d6:36:09:d1:16:47:9e:0a:6d:c6:87:
85:d8:34:db:0b:7a:da:3f:ec:a8:29:96:29:42:63:
97:6e:e7:68:38:33:10:52:d2:8c:d5:85:d2:00:06:
54:2f:c5:86:75:4a:ab:8a:e2:55:0a:8b:3c:d0:ad:
c0:cc:f4:a8:53:8e:0c:72:25:12:b9:a6:8e:36:90:
31:dd:37:23:43:b7:be:4d:ea:bf:27:aa:13:ea:14:
b9:f3:c6:db:44:82:15:a4:ed:11:96:40:1e:31:ec:
6c:2b:da:64:aa:73:bd:29:71:b7:72:b9:31:87:a6:
c8:54:5b:16:42:60:38:6c:be:8d:da:4b:8e:6f:e0:
fd:24:40:83:03:8f:40:e4:b1:a5:66:97:68:5a:17:
e7:60:92:01:f1:93:c9:39:c0:2f:1c:01:dc:43:a0:
7d:1c:e4:81:e3:98:4e:7c:6c:68:cd:79:ca:f1:eb:
31:46:a0:5f:04:24:c4:18:32:3d:4f:ea:0f:da:46:
63:40:25:5b:21:2a:16:23:e1:2f:23:d9:50:38:a3:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:55:0D:A2:42:62:07:D7:B4:C5:F9:EC:3B:C8:A3:4E:32:41:38:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58BD50029C1911EF99AAAC6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
18:5c:91:96:cd:88:c8:35:0b:07:d1:c5:fa:6a:4f:23:2d:14:
7e:50:3c:b1:17:be:15:7e:02:9b:ba:6b:1e:7b:bd:cb:87:af:
14:d1:f0:34:84:8c:01:02:dd:e4:29:e6:2a:a4:d9:84:45:70:
b8:87:f3:5e:1b:1a:6e:e0:a9:65:1c:04:29:cc:fe:b0:86:b1:
4b:28:44:1a:7e:c3:74:b3:25:e1:3f:21:9e:82:89:3e:94:97:
d1:58:40:00:49:31:03:fd:a4:42:c2:b7:80:f5:be:68:9a:06:
d9:1b:e1:82:09:30:08:0e:b1:71:a5:42:aa:f8:2a:33:d2:d4:
a6:41:3f:ca:17:65:43:63:1f:f0:b7:b9:d1:2c:15:d0:1f:dd:
ce:21:37:a9:ce:dd:62:1e:c8:66:f3:74:9e:6c:ec:d5:97:6f:
28:f6:89:a4:74:fa:c2:bf:66:4b:93:96:f4:9d:87:e3:8e:01:
58:1e:c2:b2:4f:8e:33:b2:93:7b:52:a3:b3:07:ad:ac:68:66:
38:b4:45:a9:8d:67:35:5e:c0:ae:26:1d:fb:2a:21:f8:79:47:
e1:3c:c4:8e:01:81:a6:98:2d:2d:0b:7f:af:91:74:3c:a9:e6:
e8:0b:9a:7b:a4:2f:9f:45:5c:17:2d:4a:82:83:1e:e5:79:09:
05:e6:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:30 2024 by rpki-client on console-fra.rpki-client.org