Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CA5D3EA983511EF94F7645E762E951A.roa
File: 8CA5D3EA983511EF94F7645E762E951A.roa (raw, json)
Hash identifier: 3bOHiXyIbhfwhi6LpSDPkXO5mE2MqC2IibbJBBZFr70=
Subject key identifier: 09:9D:B7:16:85:38:E1:57:BB:DF:ED:63:F4:E0:3A:5B:85:83:AD:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CA5D3EA983511EF94F7645E762E951A.roa
Signing time: Fri 01 Nov 2024 09:42:03 +0000
ROA not before: Fri 01 Nov 2024 09:42:00 +0000
ROA not after: Sat 01 Nov 2025 09:42:00 +0000
asID: 137443
IP address blocks: 156.254.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52099 (0xcb83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 09:42:00 2024 GMT
Not After : Nov 1 09:42:00 2025 GMT
Subject: CN=6724a26b-a5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:a3:88:9a:dd:4b:9e:b0:b5:ef:76:96:55:
49:91:66:a3:76:68:2f:62:54:a8:ae:58:5d:c0:a2:
09:fb:78:d5:e9:d3:40:e1:fe:f8:c1:83:66:a3:19:
1b:c2:80:50:54:87:0e:b5:14:cb:f7:0c:69:1d:24:
25:8b:56:0f:82:61:0e:95:4a:fd:1c:97:25:85:ca:
26:37:ba:8b:78:f3:e0:df:2d:8a:9a:af:e0:30:0c:
b2:cf:b3:d7:28:57:1c:20:15:4c:ad:30:1f:6a:34:
2f:d2:c5:8a:42:ac:28:d0:11:a2:e0:d8:bd:c3:40:
9d:9e:06:0e:9f:4e:6f:40:f6:3c:b9:d9:1a:28:7c:
6e:3b:f8:9b:72:2f:88:54:9f:bd:13:c6:02:79:7a:
2d:e6:b1:a8:a4:28:ca:55:e0:a2:cc:5a:5a:02:3c:
68:14:f6:53:a9:d1:eb:68:39:4a:6c:3c:81:cf:6e:
12:9d:a7:fc:51:98:9a:59:69:47:99:a8:80:6c:4e:
64:bb:5a:6f:31:e4:68:2e:16:71:12:3b:75:85:41:
44:2d:4c:7c:38:d1:12:77:c3:9e:5e:38:44:6e:c6:
c2:7f:18:43:46:53:05:e8:f9:f9:05:38:9c:86:13:
30:8c:57:64:1a:b5:bb:a5:35:b6:89:de:37:4f:45:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9D:B7:16:85:38:E1:57:BB:DF:ED:63:F4:E0:3A:5B:85:83:AD:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CA5D3EA983511EF94F7645E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.126.0/23
Signature Algorithm: sha256WithRSAEncryption
43:d9:d8:06:ef:93:4e:b4:7e:71:e6:64:98:08:79:46:8b:f3:
79:bb:41:c9:fe:a5:0c:fe:ce:94:d4:a1:ed:da:fc:21:b8:00:
f5:1c:4c:b0:15:9a:08:e9:6c:0c:5b:5e:fe:da:0f:8e:81:49:
02:55:18:03:8b:f7:1d:13:20:30:fb:df:33:20:1b:05:bb:95:
ba:d5:c1:62:44:b2:2c:ce:7f:de:1d:f1:1b:e3:99:cf:91:eb:
5a:37:01:89:b7:f3:77:b7:5e:4d:0f:0a:4a:1f:c2:40:3c:67:
0d:52:d6:a5:92:48:30:d9:a1:4f:00:f3:0e:dc:35:32:af:84:
26:a5:68:89:ca:f1:26:9f:52:f4:12:f8:4e:09:71:d3:c6:fb:
ce:5f:ba:b3:2d:c6:0c:34:fd:2b:98:23:3a:16:f7:f5:be:7a:
44:50:08:ce:59:c4:00:96:c4:a3:1c:68:87:da:2b:bb:82:c8:
58:bd:9d:2c:b4:52:09:32:c2:0b:25:2d:c0:be:0d:8b:26:5c:
f0:b5:16:a1:d5:4f:fa:ec:7d:a4:9e:4f:8c:c8:5f:07:8a:18:
b4:23:e1:4b:53:3e:ec:13:43:45:cc:9d:d8:75:91:a6:5c:9f:
b9:38:c8:57:2e:94:a4:21:8c:7b:80:47:53:a0:eb:53:db:fb:
57:a7:95:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:35:49 2024 by rpki-client on console-fra.rpki-client.org