Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E0EA87E8ACB11EF9CAAC75A762E951A.roa
File: 7E0EA87E8ACB11EF9CAAC75A762E951A.roa (raw, json)
Hash identifier: KD04FTj1gAWXUyUKBgktFEIwFTm6w+ESz/9kUCY+Ymw=
Subject key identifier: BB:CC:91:C3:EE:B1:3F:0F:C7:B6:41:E4:E2:E9:BD:F3:67:45:71:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C4B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E0EA87E8ACB11EF9CAAC75A762E951A.roa
Signing time: Tue 15 Oct 2024 08:00:07 +0000
ROA not before: Tue 15 Oct 2024 08:00:03 +0000
ROA not after: Wed 27 Nov 2024 08:00:03 +0000
asID: 20473
IP address blocks: 156.236.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50359 (0xc4b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 08:00:03 2024 GMT
Not After : Nov 27 08:00:03 2024 GMT
Subject: CN=670e2107-73c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:97:89:4d:63:d4:78:01:4f:45:85:4e:7e:
13:ee:52:ab:00:e2:c6:9a:54:7f:b1:55:cd:29:ae:
7b:4f:d9:b6:b1:f6:50:57:8b:55:cd:4c:5d:a6:50:
62:33:fb:6c:c0:21:c3:d2:f5:83:e1:ab:57:a3:6d:
6a:c6:30:f2:da:d1:99:2d:a3:e8:cd:5a:80:e7:f9:
6b:60:df:23:12:3a:25:66:24:36:94:d1:61:f5:8f:
75:b0:36:6d:44:5f:79:3c:f8:2c:ba:e2:35:72:48:
ee:d2:b1:c6:15:45:18:2a:90:55:7d:91:89:73:b2:
22:d0:7c:2e:b5:36:7c:b3:70:eb:fa:e1:b4:81:1e:
27:af:bc:d8:42:00:bc:2b:1f:3d:aa:0b:00:21:8a:
1a:3b:2e:4f:9d:23:03:ce:c2:81:cb:c9:40:ef:47:
b1:3f:da:72:e5:12:c0:71:9d:0d:03:65:37:4d:6c:
94:20:63:2b:1b:85:b4:b1:f1:5b:ce:6c:f9:3c:d0:
ad:cb:90:19:1e:39:c5:44:64:c6:66:e5:20:2e:ce:
a5:fa:5b:cc:63:a4:df:86:61:2c:cb:6c:ca:99:ea:
5c:e3:de:f1:e8:90:66:9c:76:b5:d9:fe:34:e9:f3:
cd:c0:f3:eb:d0:e2:3f:ef:ce:eb:ad:b9:e1:63:76:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CC:91:C3:EE:B1:3F:0F:C7:B6:41:E4:E2:E9:BD:F3:67:45:71:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E0EA87E8ACB11EF9CAAC75A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.78.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:bb:f2:99:b3:74:be:36:86:a6:93:80:19:a6:55:24:1b:6a:
ea:12:b2:90:1b:28:1a:13:32:34:30:db:73:6f:71:e1:21:5a:
91:2a:ba:3c:ed:eb:c2:a3:58:19:d6:1c:1c:4f:60:b4:32:23:
f1:7a:c7:9b:29:5a:c3:4e:b6:ff:8e:c2:ca:21:67:d8:8f:9a:
cc:cd:2e:a1:13:89:66:f7:7d:c9:5f:6e:45:88:4a:b5:be:7c:
a6:e2:c0:cd:13:e6:66:d0:19:3a:69:72:1b:ce:e6:5b:af:df:
6c:c8:d9:96:d4:f6:42:7d:35:1f:b9:72:9f:e0:62:d9:4e:53:
b5:38:8d:a8:97:57:7f:47:6d:c8:ed:81:a2:1f:1b:33:6d:06:
53:ab:6f:56:8b:2a:dd:c6:0a:19:9a:71:41:ec:ef:41:2e:0f:
59:45:d9:b6:2d:a9:3e:ad:e7:46:71:53:95:4c:f2:87:3d:b1:
39:3d:a9:80:03:7c:3f:95:8c:33:d0:a4:c0:be:42:a4:16:e8:
cd:ef:4a:18:3f:f0:10:9a:cb:18:be:ed:81:38:4d:c8:6c:a4:
02:bb:0d:53:7f:25:d3:77:36:12:d6:a0:48:7a:23:55:26:a0:
ea:9a:d9:4b:ce:99:34:59:c7:7b:aa:43:30:9e:91:31:0e:4a:
3b:5b:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:36 2024 by rpki-client on console-fra.rpki-client.org