Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D249406A4CB11EF90EDFD53762E951A.roa
File: 5D249406A4CB11EF90EDFD53762E951A.roa (raw, json)
Hash identifier: qlbtb2c80Y8ZWfkE5drHrpw88zOiaguPVKK7o0JdXB4=
Subject key identifier: E0:0F:61:36:0C:88:90:ED:22:1C:D2:B7:D2:50:32:5E:AA:63:F8:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D249406A4CB11EF90EDFD53762E951A.roa
Signing time: Sun 17 Nov 2024 10:04:42 +0000
ROA not before: Sun 17 Nov 2024 10:04:38 +0000
ROA not after: Mon 25 Nov 2024 10:04:38 +0000
asID: 7029
IP address blocks: 156.238.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54471 (0xd4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 10:04:38 2024 GMT
Not After : Nov 25 10:04:38 2024 GMT
Subject: CN=6739bfba-66d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:e7:d8:d2:50:4e:79:71:0c:5f:97:fb:a1:
d0:d9:9b:79:9f:2e:17:7a:4f:74:dc:13:11:ce:7b:
4e:74:00:a8:20:8c:aa:59:d5:af:80:ec:ac:af:05:
c7:07:e4:50:57:db:f8:28:61:eb:3e:24:28:b3:ea:
e0:15:46:1a:8c:5e:5b:0f:04:95:f3:02:ac:cf:51:
73:eb:39:67:22:26:b8:c1:9e:cb:c8:e8:9f:19:bb:
6f:c4:d7:d5:a4:6c:64:b0:f9:21:9f:4b:17:b3:51:
f2:3b:a1:d2:36:35:7d:2f:0b:8f:61:4a:d4:1b:12:
aa:35:c6:e0:d9:cf:88:9f:60:c0:4e:40:c9:1f:df:
d5:39:c8:4d:6b:25:17:fe:e5:77:ee:86:d1:7d:97:
b0:7f:9a:5f:11:07:e9:61:c6:29:0b:87:0e:a4:ce:
9d:27:5d:2f:a1:50:37:2f:fe:b8:3e:4c:9f:61:69:
52:0b:19:75:7d:e3:db:55:00:f4:39:fa:ce:39:8f:
57:c5:fd:d3:5e:33:39:dd:d8:69:29:a1:19:72:21:
30:d2:54:44:b4:fb:e9:3c:a3:93:ff:11:7a:c7:c8:
2b:6f:da:43:c7:02:cc:e1:77:3a:8e:6b:79:78:13:
72:52:ce:d7:29:ab:82:a1:12:c9:f9:ad:10:4b:e2:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0F:61:36:0C:88:90:ED:22:1C:D2:B7:D2:50:32:5E:AA:63:F8:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D249406A4CB11EF90EDFD53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
Signature Algorithm: sha256WithRSAEncryption
48:85:3b:bf:ac:9f:68:93:64:50:fd:bb:9b:7d:80:cb:73:e4:
c5:7a:92:ca:89:76:eb:2e:57:24:13:19:ab:c4:bc:0c:6c:85:
13:d0:b4:f0:b8:d2:76:a4:e8:bd:77:26:25:26:c2:70:53:bd:
37:c3:cb:c4:09:69:d1:a9:db:27:20:19:dd:df:7a:1d:f4:28:
99:74:83:5f:57:ce:ad:b0:8e:06:2b:f1:31:74:b6:55:d2:c0:
59:21:00:f9:f7:76:15:f7:4b:3f:f9:4f:6a:a0:98:b8:83:3d:
66:0a:3c:ab:29:bd:6e:8d:ee:f4:25:40:38:ac:bc:5b:1c:72:
88:74:66:10:8a:ef:49:ec:15:4b:39:1f:a9:63:5c:33:69:c9:
8a:cb:6a:0e:53:01:cf:a7:be:e2:80:60:8e:6e:0d:57:52:02:
88:cc:a7:5f:86:34:d2:77:6c:2b:7b:33:89:1e:02:da:93:07:
83:6e:cb:b8:9e:d6:be:43:28:bc:fd:19:88:74:06:44:5e:f2:
01:26:c5:5c:de:ee:57:20:ce:86:5b:8e:d0:e2:7c:83:df:a8:
18:67:6d:5f:cd:e2:0a:30:1b:0a:8e:ef:05:6c:9e:57:4f:f2:
48:45:d3:98:62:25:e7:2b:12:a0:ba:9f:c9:46:06:26:0f:df:
cd:89:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:32 2024 by rpki-client on console-ams.rpki-client.org