Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83E75832766B11EFBFBCD36D762E951A.roa
File: 83E75832766B11EFBFBCD36D762E951A.roa (raw, json)
Hash identifier: 3WsC5k7jsNub+bKAkF3LgN/rh07SBMMNjOYHhYIYJ4Q=
Subject key identifier: D2:F0:17:E2:00:3A:33:B7:0F:5B:F5:76:17:5A:B2:13:24:3F:C2:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B821
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83E75832766B11EFBFBCD36D762E951A.roa
Signing time: Thu 19 Sep 2024 09:42:42 +0000
ROA not before: Thu 19 Sep 2024 09:42:38 +0000
ROA not after: Fri 08 Aug 2025 09:42:38 +0000
asID: 133861
IP address blocks: 156.245.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47137 (0xb821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 09:42:38 2024 GMT
Not After : Aug 8 09:42:38 2025 GMT
Subject: CN=66ebf212-9e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:25:9b:3f:0b:6e:9d:3f:9d:81:f6:49:90:
dc:b0:6e:ec:70:23:ef:32:d0:71:88:eb:61:ad:1d:
39:b6:fb:3f:5c:5c:ee:8c:44:cc:33:4d:0f:b2:ef:
16:b0:08:9d:e8:3e:4e:e4:90:97:ee:71:7a:78:ce:
77:99:4e:f6:e4:57:06:19:d6:b3:ec:35:23:4e:e9:
ee:f0:c4:2d:84:c4:31:9c:43:b2:46:09:90:d0:cd:
e1:07:44:89:f0:be:c1:4b:ed:65:a2:50:fc:87:72:
6e:01:5c:d0:9f:7c:dd:b7:1b:24:9c:8e:88:b4:c5:
e5:0d:a2:3d:a9:e5:5c:09:18:aa:3b:0b:ed:a6:56:
57:4c:04:fe:54:e5:15:60:dd:19:61:7c:e1:93:ab:
bb:c5:ab:4c:e2:55:5d:59:45:5e:a0:cb:0d:26:74:
5b:47:72:65:25:9d:2f:f1:b3:e5:62:a4:48:be:b0:
13:b6:fe:f8:44:4c:27:93:62:c1:53:13:c8:51:1c:
d2:0c:20:a4:a3:4b:ba:e7:b3:06:c8:8f:62:c6:58:
63:87:f1:8d:2a:f6:81:de:59:14:db:6f:39:ec:96:
a9:dc:d0:74:4e:81:b0:ec:f6:11:6b:20:0d:03:50:
58:a1:b1:2c:e9:10:00:af:92:54:78:20:db:f3:4e:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F0:17:E2:00:3A:33:B7:0F:5B:F5:76:17:5A:B2:13:24:3F:C2:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83E75832766B11EFBFBCD36D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.18.0/23
Signature Algorithm: sha256WithRSAEncryption
78:71:4c:ad:5e:c6:b9:65:94:85:1a:6b:dd:cf:db:bc:45:c2:
39:eb:f8:db:56:de:ad:3e:1b:59:9c:b0:1a:82:9d:96:a2:93:
a7:5c:22:fa:52:7e:f9:e9:f4:44:79:20:78:42:e3:f6:9b:4e:
f8:49:fc:32:32:9b:67:83:6b:b0:3b:67:19:10:a1:fc:16:83:
f6:fc:ef:39:d6:71:bc:9e:b7:ea:16:06:a4:46:26:ae:51:14:
19:b8:10:8d:bb:97:ad:4e:bb:a8:ae:da:c6:c0:07:b0:2d:b1:
4c:cd:40:5d:a8:8f:1a:fc:41:3f:7c:52:9b:db:f3:8d:6d:bd:
0d:55:41:94:f2:ba:20:07:62:d0:95:a3:c1:80:93:f7:eb:9a:
10:bc:af:6f:92:bb:9e:55:85:38:b4:77:b1:7c:b2:84:05:a0:
6a:c3:e7:60:5a:6e:8a:b2:d9:de:a1:ee:bd:5e:15:9f:16:f1:
77:93:27:dd:2a:28:23:0b:31:b7:5f:38:c0:cd:df:12:05:41:
02:f7:2f:15:be:12:65:3e:be:bb:0a:62:44:c5:d8:36:67:f7:
87:c8:c8:00:59:94:cc:5f:2b:e9:0e:00:af:2c:3e:f5:69:90:
ee:50:93:d3:91:ec:f6:e2:9c:51:65:38:49:b0:4e:18:10:85:
07:bf:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:38 2024 by rpki-client on console-ams.rpki-client.org