Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F78F544A25F11EFAFBD208C762E951A.roa
File: 5F78F544A25F11EFAFBD208C762E951A.roa (raw, json)
Hash identifier: pGw/boeDZqnRsSWjPD6whAemEpsPN+GhOj3ZuH3lYWQ=
Subject key identifier: 19:86:06:AF:8E:77:ED:47:3F:D4:92:B4:97:69:53:B5:B7:D9:9E:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D28B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F78F544A25F11EFAFBD208C762E951A.roa
Signing time: Thu 14 Nov 2024 08:06:38 +0000
ROA not before: Thu 14 Nov 2024 08:06:34 +0000
ROA not after: Tue 31 Dec 2024 08:06:34 +0000
asID: 135377
IP address blocks: 156.232.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53899 (0xd28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 08:06:34 2024 GMT
Not After : Dec 31 08:06:34 2024 GMT
Subject: CN=6735af8e-bf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:ec:67:be:92:06:43:ff:d5:be:1c:c8:42:
6f:fc:fa:bd:1d:6e:6e:e7:2b:1d:4e:42:2b:db:89:
a7:8a:e8:5c:08:68:2f:1e:41:3e:17:4f:0d:f5:ea:
11:67:0b:2f:82:43:74:85:1e:6e:44:7f:26:1c:74:
0e:38:0d:0b:5c:11:3d:45:b1:7f:10:04:d8:3b:e0:
7b:40:3a:6f:28:33:81:69:a0:c0:e8:43:9d:1f:82:
40:4f:3a:9c:88:6c:81:fa:2d:04:36:9b:b5:be:44:
8f:e2:76:3f:48:81:70:e8:8b:1a:c9:01:c0:64:19:
1c:19:15:3d:86:79:fd:e5:bd:45:0d:ac:f9:23:70:
41:05:78:1f:a4:c0:9d:00:b8:3a:ad:42:2d:b0:91:
04:ef:3b:ff:6f:31:2e:e8:05:9a:56:83:4f:83:0d:
ee:b5:38:e9:b2:34:78:7d:53:0a:77:d5:c0:6d:2b:
b6:05:c9:96:f9:67:c2:04:fe:37:9f:e0:d4:21:e7:
11:e0:c5:a0:92:81:54:9a:45:1a:79:28:97:0d:76:
ed:4d:6b:d2:b5:fb:7c:19:5e:fe:4b:3d:ee:e6:ec:
e2:8b:09:10:18:c0:09:1f:ad:6d:75:f1:0f:12:7e:
c0:09:33:a3:89:c6:df:1d:26:6a:8c:3b:63:d3:c8:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:06:AF:8E:77:ED:47:3F:D4:92:B4:97:69:53:B5:B7:D9:9E:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F78F544A25F11EFAFBD208C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.100.0/23
Signature Algorithm: sha256WithRSAEncryption
71:52:e5:54:6e:13:7b:31:10:2b:c5:a8:07:fa:8c:46:bb:65:
42:7d:f6:d2:92:1d:e7:a3:fa:15:c3:14:52:45:ab:46:03:2d:
a1:37:d4:3b:54:2b:61:eb:02:60:39:3f:fa:57:38:66:49:59:
34:a6:f7:32:31:40:65:16:8b:76:f3:62:fc:aa:91:51:b6:10:
6c:ad:ef:db:11:14:08:8b:ee:57:97:c0:f2:3f:b0:9e:8d:d1:
7c:8d:a4:fc:4d:e7:29:ad:75:66:1d:f0:7f:02:da:07:56:5f:
b8:8f:1a:96:de:a0:fa:4a:ff:20:54:6c:0d:93:ae:6b:d3:40:
79:7f:63:11:b7:dc:08:98:ba:72:e5:44:a2:b3:54:d2:c8:6f:
12:7a:96:52:ab:c5:6d:74:93:c9:01:41:5c:c1:d3:80:4c:e9:
30:ed:35:bd:cb:2a:de:56:28:6a:be:7c:da:ff:38:1b:f4:a4:
48:ee:38:58:e6:ae:be:dc:6e:7b:2c:97:23:ff:ff:ac:2b:03:
91:aa:81:c2:b3:7c:0c:05:ba:71:e7:6c:aa:3b:c4:a0:19:88:
27:2c:6f:5c:1f:af:8e:72:60:e5:68:77:8f:f5:94:24:24:cc:
11:41:eb:80:dd:fd:f9:e3:0c:f4:14:a5:f1:bc:04:62:56:ed:
fd:7a:07:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:31 2024 by rpki-client on console-fra.rpki-client.org