Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64472AEAA45911EFBE3F2B7D762E951A.roa
File: 64472AEAA45911EFBE3F2B7D762E951A.roa (raw, json)
Hash identifier: Xs5dwQY5SYqN44caF7mG7mrHuEwxWzJyj0Q9NOJwrA4=
Subject key identifier: A6:0E:DA:D4:9A:4E:6E:DD:2C:7C:F0:72:9C:8D:BF:85:1F:1E:EE:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D40A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64472AEAA45911EFBE3F2B7D762E951A.roa
Signing time: Sat 16 Nov 2024 20:28:51 +0000
ROA not before: Sat 16 Nov 2024 20:28:48 +0000
ROA not after: Wed 27 Nov 2024 20:28:48 +0000
asID: 39600
IP address blocks: 156.238.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54282 (0xd40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 20:28:48 2024 GMT
Not After : Nov 27 20:28:48 2024 GMT
Subject: CN=67390083-43f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:23:14:35:76:59:eb:08:29:1c:ac:e1:95:
ed:be:10:a1:58:59:d1:9e:d1:0f:aa:7d:b1:9c:9e:
ee:6d:84:ce:bf:03:32:b1:74:6a:38:55:b9:d6:3e:
48:5f:8c:56:51:0f:e5:03:6e:d7:20:b6:e0:70:0a:
cc:b7:0b:f1:58:5a:61:2b:38:8e:e6:0e:07:65:e0:
f7:8e:62:2a:b9:6c:06:27:76:c1:89:f5:4f:f3:fb:
54:a2:94:4a:55:62:16:35:c8:81:f9:62:95:fe:11:
12:c7:ce:fa:10:71:42:3f:24:a5:bf:47:6d:22:f0:
3a:90:db:f8:d5:41:23:00:ba:70:4e:7b:db:fa:fa:
a3:7e:fc:a4:50:f3:2b:31:2f:61:f5:80:6d:40:be:
ef:b4:d0:f2:87:46:4f:68:d4:46:a4:52:be:80:3d:
9f:8d:2d:ed:97:0f:a1:18:18:0f:5c:73:e7:cb:98:
e8:e8:67:80:00:4c:d5:11:5d:71:53:78:cc:b6:94:
7d:0b:f8:11:f1:e5:03:b7:8d:68:58:5b:71:e4:c2:
d5:28:d3:93:de:8d:95:03:f2:1d:5d:5d:15:53:20:
63:4e:f1:42:0a:bb:0e:60:c6:b9:28:28:9a:ec:cf:
ab:fc:0d:57:56:b1:8a:71:63:f9:a0:bc:87:a1:26:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0E:DA:D4:9A:4E:6E:DD:2C:7C:F0:72:9C:8D:BF:85:1F:1E:EE:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64472AEAA45911EFBE3F2B7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.170.0/23
Signature Algorithm: sha256WithRSAEncryption
87:12:ea:c1:ad:63:dd:d0:23:be:88:5b:17:4f:fe:f9:6e:72:
f9:dd:85:10:62:f7:fa:ad:9d:c7:ed:ce:bd:32:3b:0a:ca:40:
68:30:ab:e4:ea:af:e1:d0:a5:96:a1:09:8d:36:1a:69:1c:38:
db:4a:3f:e9:bb:0c:9a:c7:cd:cc:fe:11:b0:ae:3a:6a:5a:58:
ce:e3:69:5e:ec:a0:8b:4a:de:40:54:40:e5:68:94:46:d6:87:
77:50:af:0f:ab:de:d3:38:f1:c1:1d:3f:fe:bc:a8:2d:b1:0d:
b3:c9:fe:58:5c:5e:64:cc:03:f5:f5:5f:1c:3c:55:c6:67:9d:
33:bb:6f:f7:35:8d:a0:8a:ad:9c:3e:1a:69:f4:b4:38:ee:17:
4d:8a:2a:49:74:e0:1b:c6:75:e8:a5:7d:4e:83:49:66:40:13:
3a:ed:c1:54:3a:42:60:4a:0d:01:a0:35:ec:a8:2c:be:04:01:
0a:b2:63:9e:70:4a:f4:53:47:55:15:df:bd:86:98:27:9c:05:
d7:3a:79:6a:0b:08:78:79:a8:89:d0:c4:53:63:1e:68:05:f2:
3d:6b:de:af:9a:39:90:f8:73:ae:b1:5d:55:1b:76:81:b3:87:
ae:ed:8f:a5:9e:98:0a:7c:ac:c4:b6:c4:cd:1b:11:09:91:0b:
56:1a:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:32 2024 by rpki-client on console-fra.rpki-client.org