Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/828CB0A0A45511EFBD25E165762E951A.roa
File: 828CB0A0A45511EFBD25E165762E951A.roa (raw, json)
Hash identifier: CQy0bemTWscfPW2dcddnmCB/LfV8n5cJx4LhCPWz0kg=
Subject key identifier: 47:DB:53:2B:CA:8F:90:4C:79:A4:AF:0A:9B:33:AD:AE:E4:1F:A4:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D3EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/828CB0A0A45511EFBD25E165762E951A.roa
Signing time: Sat 16 Nov 2024 20:01:04 +0000
ROA not before: Sat 16 Nov 2024 20:01:00 +0000
ROA not after: Tue 26 Nov 2024 20:01:00 +0000
asID: 39600
IP address blocks: 156.237.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54254 (0xd3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 20:01:00 2024 GMT
Not After : Nov 26 20:01:00 2024 GMT
Subject: CN=6738fa00-3559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:d9:45:94:c4:a0:18:0f:64:27:71:23:7d:
b9:41:8d:d9:5d:7d:a5:6b:40:db:7f:d0:b7:13:ce:
4a:87:52:a5:db:c8:77:09:d5:5a:41:85:63:83:c6:
b2:69:40:0f:a0:51:5b:78:db:a4:b9:43:fa:a9:2c:
26:39:52:59:f5:51:92:d3:43:34:b1:bc:44:33:97:
78:43:9d:27:a1:b6:02:88:c5:1b:4d:ba:91:6c:8d:
55:a5:76:79:c6:b9:e5:b0:1e:e7:e1:3f:60:94:d9:
78:1d:7d:f6:3e:f8:83:47:54:42:d8:7e:4f:f8:c7:
11:70:8f:18:14:7d:38:d2:98:a7:f9:f9:f9:0d:72:
8e:69:14:00:45:27:a1:1a:11:67:d4:69:2f:68:90:
15:81:52:62:82:8d:6a:4b:ef:7b:71:ec:d5:8a:23:
6a:e9:4d:02:23:24:d6:6d:48:af:6a:6a:e0:ac:32:
e3:03:eb:f6:1c:9e:59:db:5f:9c:c1:55:06:85:74:
2e:5f:71:ef:5e:69:2c:d5:7c:d0:54:97:3a:0e:b8:
2e:38:4a:ae:61:d3:73:11:1c:04:f6:9b:89:27:f9:
fb:87:79:52:af:54:f6:e2:47:c6:53:22:ca:9c:ad:
79:94:42:3c:39:1b:4a:2c:81:28:1a:2c:84:a8:f7:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DB:53:2B:CA:8F:90:4C:79:A4:AF:0A:9B:33:AD:AE:E4:1F:A4:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/828CB0A0A45511EFBD25E165762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.116.0/23
Signature Algorithm: sha256WithRSAEncryption
42:a4:32:0b:57:6c:69:45:36:7d:cf:a2:94:10:ac:cb:68:cc:
59:7b:85:17:80:6c:43:3b:91:f4:92:3b:f5:f0:f0:66:4e:44:
3c:b0:81:2c:9e:2a:bc:4b:88:ea:ae:df:9c:00:81:ee:1a:6d:
fa:68:a0:7a:37:8f:8e:c8:3f:ec:37:2f:58:c2:3f:ec:8d:3e:
d0:3e:8c:53:ff:74:7c:f5:65:51:6a:ae:ca:9e:eb:5e:9f:b7:
0f:41:7c:d9:79:d2:f3:9e:39:12:9b:14:67:6b:a4:be:fa:b6:
86:fa:7b:12:90:25:18:a3:75:67:77:e1:4b:7e:e3:50:78:e4:
e2:4d:57:3a:31:2c:ef:73:1b:31:1d:bc:5d:0f:ae:b2:1b:9f:
11:c6:c4:1c:77:a3:4b:0b:d7:4f:6c:ba:1a:5a:9a:6a:da:f6:
7d:5d:1f:ae:92:4a:f4:d1:f4:a9:5d:ba:f6:63:28:5a:8e:ab:
80:ef:f4:46:e6:f0:74:80:8a:2b:a8:3c:30:ad:7b:e9:b1:f6:
ba:55:f1:0d:52:55:f7:13:ab:38:68:ca:89:65:e7:29:d9:40:
d0:8c:0d:b2:4d:eb:18:95:6b:1b:d2:99:95:58:2e:a9:36:c6:
1b:a2:d2:30:b2:a1:ba:1e:77:5b:5d:f9:c1:fc:44:71:6d:a1:
51:d5:c6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:37 2024 by rpki-client on console-fra.rpki-client.org