Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6345D38A9B8A11EF8C734861762E951A.roa
File: 6345D38A9B8A11EF8C734861762E951A.roa (raw, json)
Hash identifier: NkAvR5lVo4BWOwJY2JuGsOBureJCKfImKDn3ltmismY=
Subject key identifier: 8E:D7:6F:10:66:82:9B:4C:E5:7E:F9:C4:4A:23:58:7A:3D:F7:7E:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CEDF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6345D38A9B8A11EF8C734861762E951A.roa
Signing time: Tue 05 Nov 2024 15:26:54 +0000
ROA not before: Tue 05 Nov 2024 15:26:51 +0000
ROA not after: Wed 04 Dec 2024 15:26:51 +0000
asID: 200373
IP address blocks: 156.228.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52959 (0xcedf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 15:26:51 2024 GMT
Not After : Dec 4 15:26:51 2024 GMT
Subject: CN=672a393e-bfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:87:2f:f5:df:4d:a5:54:cc:47:9a:32:0c:
b3:54:e7:77:b5:fa:21:21:b5:08:97:13:8d:3e:6a:
94:e4:2e:d1:47:b7:d5:2d:0a:a7:ac:a0:50:b3:71:
2e:2d:79:5d:82:b4:f6:ca:43:d8:34:f6:83:81:74:
38:fe:a5:b8:bd:15:74:e8:fe:f9:b8:8a:01:7f:07:
3a:95:1c:53:fe:08:2d:12:25:99:e5:6e:b5:98:22:
5e:7a:5e:16:76:94:af:99:16:11:e2:3f:8c:57:df:
2e:f8:5f:d1:bc:69:e7:17:28:37:fe:dd:df:8d:e1:
19:70:ff:fa:76:57:67:d5:35:fa:cb:10:3d:1a:61:
d5:2a:cc:6f:5a:75:48:24:67:80:4f:80:69:0c:8e:
a6:ae:ce:c5:8a:ee:87:9d:3b:d3:1d:c6:06:df:e3:
d5:e2:ab:05:a5:f0:67:ca:e6:fc:82:b4:d3:ac:3e:
f0:28:60:5a:f3:a8:3a:06:4a:e6:9f:7b:01:8b:75:
08:2a:82:df:01:90:32:e6:3e:b7:fe:e4:83:e3:b3:
b9:4f:99:3b:60:04:70:cd:84:44:ec:f0:48:ac:f9:
dd:c0:81:aa:08:ae:41:02:45:c9:90:f1:bd:30:71:
c7:ff:f8:80:30:29:93:2d:3f:f1:ca:d9:c2:85:20:
52:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D7:6F:10:66:82:9B:4C:E5:7E:F9:C4:4A:23:58:7A:3D:F7:7E:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6345D38A9B8A11EF8C734861762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.176.0/21
Signature Algorithm: sha256WithRSAEncryption
26:a6:29:c6:c9:2b:9d:21:6a:00:d0:9c:6a:25:aa:c2:2b:07:
6a:6d:9a:e4:b1:62:d7:89:d4:d9:7f:d3:d4:80:77:7f:79:f5:
42:9d:e4:be:c4:cd:0c:2c:a3:8b:6a:c6:c0:a0:1b:75:c9:29:
43:b2:42:66:0d:de:e7:d0:be:e0:e6:d4:12:99:12:53:ee:92:
ec:46:d3:2b:d5:c1:09:54:54:ef:4d:f9:f9:11:df:e7:f2:3b:
fb:63:b9:8f:71:cc:70:f6:2a:69:6b:4b:7a:cd:64:cf:15:88:
df:05:9f:aa:77:46:02:ec:8c:4b:4c:a7:4f:d8:16:55:4e:dd:
13:88:cf:4c:5c:80:0f:92:5c:c1:67:02:a7:d9:13:7f:7a:c7:
39:79:0b:7a:52:31:2b:6f:99:4c:bc:b3:82:11:ef:48:22:db:
8d:98:11:ec:a5:46:cc:c5:f3:8a:70:8b:fc:66:78:e5:19:19:
43:67:fb:92:13:5b:22:09:ba:b9:b6:f3:24:41:7e:62:b0:3f:
d5:a9:20:7d:27:64:c5:2b:b9:61:9e:bd:4c:50:2f:f6:ec:6c:
ba:a7:ba:2f:29:11:ff:2a:65:73:15:f1:e7:76:79:cc:7a:47:
2a:f6:e6:8d:90:8c:00:c5:14:cd:18:39:38:36:12:91:eb:10:
75:97:72:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:33 2024 by rpki-client on console-ams.rpki-client.org