Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7963ABC0A45D11EF92C8CB96762E951A.roa
File: 7963ABC0A45D11EF92C8CB96762E951A.roa (raw, json)
Hash identifier: z56OOmB36A9PWp5bdclMUcFratEaRGyGBpkyh45ooQk=
Subject key identifier: 57:34:C3:C6:6C:A9:CB:FA:C0:8F:D8:CA:5A:96:E3:CA:7A:58:1D:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D43C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7963ABC0A45D11EF92C8CB96762E951A.roa
Signing time: Sat 16 Nov 2024 20:58:05 +0000
ROA not before: Sat 16 Nov 2024 20:58:01 +0000
ROA not after: Fri 29 Nov 2024 20:58:01 +0000
asID: 147302
IP address blocks: 156.238.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54332 (0xd43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 20:58:01 2024 GMT
Not After : Nov 29 20:58:01 2024 GMT
Subject: CN=6739075d-260c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:4a:0c:32:c3:c6:98:07:67:9a:cd:b9:0e:
09:de:64:02:44:2c:77:f0:14:e5:52:62:07:e8:c3:
07:46:b2:17:a8:45:15:dc:6b:f1:c6:84:e9:91:3c:
87:a4:b0:6a:77:a8:59:9a:23:12:25:9f:d3:bc:37:
1b:a4:9b:9d:0f:63:c1:19:e8:59:6b:5f:93:17:8a:
0c:30:ff:5a:8e:ee:58:a7:c6:73:51:af:4f:90:1f:
9f:79:72:8d:a1:cf:cf:79:7f:e2:c2:3c:8b:2c:e4:
d5:92:b8:04:8f:29:c4:0d:ef:25:5a:bc:4d:85:c8:
5f:f0:31:5a:2c:9c:3b:50:c8:92:61:1c:28:9d:8c:
44:ac:2d:6d:da:d2:b8:4d:a3:4c:6e:a6:0c:e3:e7:
89:0c:54:60:9a:44:0d:10:3e:17:c8:bd:be:0a:dd:
0e:75:cd:25:f8:67:a8:1b:f7:24:df:c6:20:e7:9b:
0a:90:fc:6a:75:c1:65:ee:c6:2e:dd:d2:2f:6b:1e:
f3:09:f7:6c:09:e9:c4:0d:31:93:1b:94:0b:ba:b2:
4f:dd:26:79:db:bb:e3:40:ee:9a:4d:0a:2c:71:04:
29:24:55:60:a9:2f:76:8b:54:92:dd:88:de:f2:46:
c7:23:51:79:02:66:37:75:5d:c7:98:e4:80:6b:cd:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:C3:C6:6C:A9:CB:FA:C0:8F:D8:CA:5A:96:E3:CA:7A:58:1D:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7963ABC0A45D11EF92C8CB96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.71.0/24
Signature Algorithm: sha256WithRSAEncryption
19:18:ee:da:90:0f:00:5d:6a:e2:cf:d3:e1:45:14:d7:ea:98:
67:67:19:bf:bb:cc:d7:97:88:d7:69:61:64:94:15:4f:4c:eb:
a8:73:48:d3:f4:36:b3:81:56:9b:c9:d4:df:9c:78:f0:55:e4:
9e:4d:04:49:fa:50:1a:d1:fd:20:1d:7c:01:e1:b7:cf:72:08:
e4:b7:7e:9e:d0:ae:d9:53:fd:6e:15:fc:81:0a:51:b3:26:bf:
f3:38:31:53:6e:3c:db:61:b5:d1:23:fc:b3:4c:56:12:7b:3b:
1f:d8:67:77:a3:71:01:5e:f6:4d:ee:da:74:f4:53:50:1f:ba:
95:84:87:61:f9:76:4a:75:71:52:23:89:d4:e0:15:f4:59:14:
4d:fb:42:e7:fd:54:db:8c:3f:32:f7:0a:5d:ff:54:89:41:c7:
44:63:90:5c:d7:cb:96:ec:98:76:17:a7:8b:77:79:72:bd:1c:
43:a7:50:37:5c:f5:1d:34:2b:fe:e5:d1:1b:dc:30:ee:7d:26:
30:10:27:27:56:58:ba:a9:f8:ef:6f:43:ed:13:f8:e6:be:51:
16:a1:95:9c:7b:a8:e1:fe:22:3a:c9:74:1b:24:0d:84:16:94:
06:8a:c4:79:65:de:65:cd:19:3c:4c:70:ea:73:8f:42:2c:57:
f6:f5:2e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:37 2024 by rpki-client on console-ams.rpki-client.org