Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76F78EBEA0E411EFB366F392762E951A.roa
File: 76F78EBEA0E411EFB366F392762E951A.roa (raw, json)
Hash identifier: dNYVn9Sl4X0APSWnUieTP2L032Jrh64H7Q0d7uUsLmY=
Subject key identifier: 74:BE:54:6A:75:DD:A1:2F:01:45:8A:B6:BB:17:42:10:9C:44:DE:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D1B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76F78EBEA0E411EFB366F392762E951A.roa
Signing time: Tue 12 Nov 2024 10:54:18 +0000
ROA not before: Tue 12 Nov 2024 10:54:14 +0000
ROA not after: Fri 22 Nov 2024 10:54:14 +0000
asID: 39600
IP address blocks: 156.252.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53681 (0xd1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 10:54:14 2024 GMT
Not After : Nov 22 10:54:14 2024 GMT
Subject: CN=673333da-3d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:27:4c:04:2c:e1:47:eb:e8:cc:4b:f5:11:13:
3e:0f:e8:a0:0a:a1:1a:85:66:f7:0b:2e:69:5b:e3:
a9:1b:e0:9a:e3:35:17:b3:b3:17:7f:be:7f:e0:52:
eb:44:84:d7:05:6d:78:34:24:2d:e8:14:01:a9:68:
7d:e1:1f:fa:fe:5b:6b:3c:80:f9:9d:a0:77:8f:7b:
88:c7:32:bf:f2:9d:fe:de:28:2d:e4:a7:f7:09:ab:
56:34:1e:6f:d7:26:a7:dd:a0:83:ce:1d:e3:c9:6c:
86:79:ce:4a:92:fe:45:4f:5c:05:12:32:0a:73:ac:
1a:91:3b:62:3d:0a:3f:c5:f5:7c:6d:df:ac:6c:b9:
af:af:cb:18:a3:37:ea:5d:7d:b4:a2:6c:a2:7d:ec:
fd:50:4c:2d:31:c1:c0:73:9a:7e:e1:50:b2:e5:22:
85:65:73:81:67:29:85:08:db:a5:c8:17:bc:d5:4e:
40:3b:31:9f:c1:10:82:b9:fa:6b:65:e4:3f:8a:d8:
f5:87:bf:0e:41:24:a8:43:6c:a3:4f:19:0d:29:f2:
00:a3:bb:1f:60:e1:a3:70:ba:7f:8b:e6:47:2f:a3:
36:3d:75:18:c4:1c:45:e9:7f:c8:b9:79:b6:4f:ed:
1d:45:1d:32:00:6a:16:bc:37:3b:b0:d2:8b:f1:5f:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BE:54:6A:75:DD:A1:2F:01:45:8A:B6:BB:17:42:10:9C:44:DE:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76F78EBEA0E411EFB366F392762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.10.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ff:fe:22:1f:85:b7:4f:96:5d:43:80:6d:0e:2b:1a:11:2d:
69:e9:a6:7a:8e:84:4d:c1:74:e1:31:4e:ce:ae:9d:38:7f:3c:
fe:b1:6b:99:1a:fa:bc:31:0a:74:be:e1:c8:ff:ae:59:8e:4c:
60:29:7f:f2:ef:9e:a0:a6:bd:b8:71:29:f4:6f:05:27:8b:47:
66:b0:32:4d:3d:f6:42:c2:f0:82:50:b0:8a:6d:02:6a:c0:c8:
09:62:78:fb:60:14:87:92:80:dc:06:f9:90:5f:17:a0:7e:f1:
be:05:b7:dc:66:4c:98:35:5a:e0:a9:ad:75:7e:ce:23:0d:f8:
90:4b:2e:1d:25:2d:85:3a:ca:7b:37:49:eb:22:c9:fd:53:99:
4b:d6:8e:50:97:70:e6:9d:95:ad:b4:9d:70:42:5f:1b:66:69:
05:8c:57:c5:f5:e0:ba:0d:e5:4e:7b:dd:23:d4:a9:c1:d0:d2:
2e:a3:45:89:e8:25:b3:e0:c7:84:e3:e2:ce:48:f3:46:00:22:
de:f3:2f:5e:b0:75:00:fc:be:e0:a1:f7:33:1d:8a:a7:43:95:
93:1a:a2:4c:bf:36:d8:07:3c:9d:1b:f5:33:e7:c0:ec:85:2c:
3c:2f:0f:58:82:8d:1a:8b:e6:1b:12:f9:a2:ec:fd:4f:c7:b2:
82:7e:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:35 2024 by rpki-client on console-fra.rpki-client.org