Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61EEC240976511EF870A46BD762E951A.roa
File: 61EEC240976511EF870A46BD762E951A.roa (raw, json)
Hash identifier: DnIp+y2jMyX0GlZxLZgnPFir0tktwhn3VmkT8soy7xc=
Subject key identifier: BA:5F:5A:C8:1F:6D:68:7C:86:59:5C:6A:A8:19:E9:D9:8D:17:FE:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CAF8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61EEC240976511EF870A46BD762E951A.roa
Signing time: Thu 31 Oct 2024 08:51:56 +0000
ROA not before: Thu 31 Oct 2024 08:51:53 +0000
ROA not after: Tue 31 Dec 2024 08:51:53 +0000
asID: 135377
IP address blocks: 156.232.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51960 (0xcaf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 08:51:53 2024 GMT
Not After : Dec 31 08:51:53 2024 GMT
Subject: CN=6723452c-10b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:e5:b3:37:e5:95:e1:5e:ce:0c:65:0d:be:
4e:28:fe:82:ad:09:b7:58:e0:2e:fe:1d:81:3e:77:
40:3a:34:38:b3:86:73:f3:86:80:d3:f2:cb:5d:d1:
d0:92:6a:87:b5:d5:df:91:a6:85:32:c6:97:a2:94:
c0:4e:4c:89:7a:fc:77:59:f2:5e:46:e3:a1:04:e1:
ee:7a:64:0b:cb:cb:e1:c3:07:60:23:12:b4:0e:36:
0a:da:2d:b5:06:ef:81:77:81:31:ef:9f:02:f2:63:
0e:14:ab:0b:ac:3f:1a:51:20:7d:46:08:47:7e:b6:
97:65:4d:8a:fe:ba:f3:72:04:5a:ac:e1:a1:8a:62:
e6:8e:ed:5c:55:7c:7b:1f:64:e5:fb:57:cb:5f:f6:
7d:a3:4d:3c:ca:0b:6f:59:a5:f1:b7:a2:fb:81:2b:
ec:d9:8f:8b:8a:2e:2e:51:37:9b:31:8f:62:f4:f9:
4c:29:62:ba:4a:81:99:5d:ff:7e:3c:61:1d:ad:e6:
f1:4a:a2:71:2c:59:fe:8a:ec:c3:75:90:ef:2b:57:
a6:13:9c:95:a2:fd:be:b6:a0:2d:ee:16:32:3f:f8:
5e:05:2a:7c:c4:c7:19:c5:70:3e:c4:8b:e8:0c:3b:
84:de:46:d5:9a:cb:82:18:12:3a:6f:ec:c2:b8:97:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5F:5A:C8:1F:6D:68:7C:86:59:5C:6A:A8:19:E9:D9:8D:17:FE:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61EEC240976511EF870A46BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.96.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:72:71:2d:dc:76:31:30:36:ea:3e:03:74:d0:00:2e:f8:0d:
fe:93:0b:ad:e6:e9:55:fb:93:c6:0e:a0:0c:aa:35:a6:74:9f:
c6:0a:94:51:bb:9e:ef:78:17:0d:d3:00:fb:9c:a0:ec:96:9f:
3d:b5:ea:e8:db:90:84:19:05:90:44:2f:56:c0:92:ec:1d:cf:
c5:66:60:d8:d2:ca:a2:e0:d9:fd:c0:87:95:6d:6a:8a:f5:ae:
ae:28:ed:8c:42:16:ed:1a:60:28:cd:60:84:39:8a:9d:ab:6e:
73:95:f7:75:2e:da:20:10:a4:e8:69:9e:9a:63:95:de:aa:9b:
df:98:c1:f5:c9:58:41:b7:a0:f6:1a:f3:9e:f0:6d:48:0c:5d:
18:6b:8a:09:ad:f4:9a:26:b7:f5:85:81:13:02:dc:14:11:fd:
25:54:ae:7d:89:51:9c:cf:3a:e6:4d:3b:04:15:88:44:a4:69:
ee:ab:92:14:50:c9:c4:81:1e:c3:96:e5:75:89:26:0c:50:34:
58:74:70:30:a0:21:68:3c:26:be:38:b5:63:f1:8b:3a:9e:44:
ac:78:da:9c:13:87:96:a4:29:ce:81:26:96:8e:ec:b9:fb:85:
68:6e:6d:e7:8e:46:90:b7:70:40:83:f6:47:0c:ea:ad:7f:77:
ec:d1:e4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:31 2024 by rpki-client on console-fra.rpki-client.org