Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83624A22ABB211EEAAB54CB9775412E6.roa
File: 83624A22ABB211EEAAB54CB9775412E6.roa (raw, json)
Hash identifier: fuokET4DVkDrMtm9LVDHruQOnw7ADvkFbYiCrm33lnA=
Subject key identifier: 84:40:DD:2F:54:CF:6B:07:10:FE:5E:BC:36:4D:47:E9:CE:9B:2A:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5C97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83624A22ABB211EEAAB54CB9775412E6.roa
Signing time: Fri 05 Jan 2024 10:09:29 +0000
ROA not before: Fri 05 Jan 2024 10:09:26 +0000
ROA not after: Thu 12 Dec 2024 10:09:26 +0000
asID: 23764
IP address blocks: 156.242.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23703 (0x5c97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 5 10:09:26 2024 GMT
Not After : Dec 12 10:09:26 2024 GMT
Subject: CN=6597d559-1c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:34:28:68:24:28:e9:01:70:57:6d:b2:07:
96:4d:f4:15:47:3c:e9:d4:13:aa:63:82:e1:ab:5d:
be:b8:a6:e2:b3:40:71:9e:1d:85:ea:ef:27:16:ba:
0c:f9:d5:2b:80:98:a1:fe:32:1d:10:29:04:ff:7e:
9f:a1:50:bc:4f:14:9f:ba:a7:4f:14:f8:a0:31:1d:
81:48:e9:a3:fa:9a:fc:8c:47:67:1f:e9:cc:f2:c3:
0d:56:ba:fa:85:a8:f8:fb:c4:2a:4c:27:8c:b2:9e:
16:aa:ce:34:c4:e4:0d:f6:30:12:44:ec:cb:50:ff:
fa:5e:31:d3:b5:81:21:e5:e3:ff:5d:9d:15:e2:61:
ef:99:18:d0:ad:a1:c8:00:3c:13:f6:dc:d8:45:4c:
7a:f9:25:8e:b5:31:4c:ce:94:7f:4b:e7:6c:0a:b8:
24:55:7b:0f:1e:cc:25:a9:52:4b:13:59:a9:12:c2:
76:55:08:3e:42:f2:22:2f:54:69:cc:35:39:2d:fe:
a0:38:70:a6:87:2f:c5:70:f2:4c:3c:56:b0:8b:19:
f2:96:05:45:15:f7:32:75:19:59:67:3f:27:07:6f:
c0:d7:56:ad:b9:ea:a8:0b:e8:b9:d9:62:21:90:11:
73:f7:a7:68:66:48:30:e3:e8:51:7c:a7:90:8a:87:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:40:DD:2F:54:CF:6B:07:10:FE:5E:BC:36:4D:47:E9:CE:9B:2A:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83624A22ABB211EEAAB54CB9775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.8.0/24
Signature Algorithm: sha256WithRSAEncryption
90:bf:c4:4a:85:03:1f:d2:07:d6:38:0d:1d:d4:7b:16:2b:b9:
99:70:fb:ac:66:85:96:02:84:4e:7a:11:c2:ff:38:a7:8c:5b:
35:8f:0e:b3:85:99:81:13:c6:27:e9:6e:db:9b:da:92:9d:7c:
38:5e:e5:7d:71:0a:12:3a:7a:50:04:fc:68:14:1f:e6:49:7b:
6d:2f:50:bf:58:ec:48:21:32:27:7d:79:55:53:0d:37:f6:6a:
bd:4d:73:e3:39:91:02:5d:00:e8:70:12:10:b3:45:0b:e1:9a:
e0:aa:8e:3e:90:41:f8:5b:a3:10:31:ee:83:d2:13:02:04:3b:
18:1a:f6:d0:2d:74:95:a1:58:c1:6d:e6:b6:df:3d:5f:d5:aa:
a5:07:5d:6d:e4:ad:dd:25:4d:6e:ef:af:5c:cb:c4:5e:ac:37:
9f:cc:24:5c:01:fa:a3:ff:c3:31:e2:84:e7:11:c2:01:4e:e8:
77:85:24:82:2f:46:5b:8b:a5:7c:8e:58:89:13:15:20:d3:b5:
19:b5:03:cb:be:f9:7c:70:fe:68:c6:a8:ce:2c:a2:e5:db:14:
2b:07:ac:c9:54:c0:00:b7:85:32:b0:4a:5c:20:09:b3:cf:8a:
ae:c3:ba:80:90:cf:1b:fb:dc:6a:42:e8:75:ed:4e:d4:a0:4c:
96:75:1a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:37 2024 by rpki-client on console-fra.rpki-client.org