Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D7CE6289B7D11EFB2B3D091762E951A.roa
File: 8D7CE6289B7D11EFB2B3D091762E951A.roa (raw, json)
Hash identifier: HZsuaOWe/3iwIM6T9zRkrFI9TfVavEoEDbtUR8eCoLk=
Subject key identifier: 5F:A7:E6:C4:02:E3:8B:8F:71:88:50:4F:97:B8:28:90:90:56:AC:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D7CE6289B7D11EFB2B3D091762E951A.roa
Signing time: Tue 05 Nov 2024 13:55:02 +0000
ROA not before: Tue 05 Nov 2024 13:54:58 +0000
ROA not after: Mon 13 Jan 2025 13:54:58 +0000
asID: 5065
IP address blocks: 156.239.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52867 (0xce83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 13:54:58 2024 GMT
Not After : Jan 13 13:54:58 2025 GMT
Subject: CN=672a23b6-9c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:c8:36:c8:41:4b:88:01:a6:19:76:b2:1e:
8f:eb:e3:2d:ef:37:46:a4:07:69:92:c9:51:9f:ba:
1a:61:62:55:64:ad:37:be:27:9f:bb:ad:c1:16:d2:
50:19:45:ca:65:34:c4:f0:2c:ae:32:be:97:ed:31:
2f:b4:9f:64:cc:8c:a4:62:40:90:56:78:f8:8f:5e:
8d:61:56:66:36:01:96:f0:ed:6b:2e:c5:c9:b1:62:
3d:b6:05:e8:b1:b6:7b:44:74:55:90:2d:9f:b4:a1:
94:15:aa:0d:d6:71:02:22:c3:8d:99:cf:28:76:3a:
3f:5e:23:d5:55:09:44:2e:d0:7b:32:76:90:74:48:
68:de:2f:58:29:41:f9:27:09:27:e1:3d:8e:60:32:
2c:d8:45:ca:95:a5:3f:f8:3e:83:b9:35:f1:f7:05:
81:95:aa:d9:7d:77:4b:84:75:e0:c6:dd:5c:72:c7:
d3:56:96:49:92:de:3e:6d:2a:a5:8a:5a:31:da:f9:
84:59:47:b9:6c:71:50:8e:12:15:c6:d5:b7:c4:23:
10:d3:1a:0d:3c:d1:be:40:57:33:41:ef:73:8f:48:
be:41:96:80:80:e3:a9:63:e9:b0:fd:4c:e0:9d:16:
26:31:4b:34:16:c1:95:77:85:00:27:cf:01:0f:a6:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A7:E6:C4:02:E3:8B:8F:71:88:50:4F:97:B8:28:90:90:56:AC:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D7CE6289B7D11EFB2B3D091762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.17.0/24
Signature Algorithm: sha256WithRSAEncryption
12:fb:53:43:88:80:08:79:6d:d3:5e:54:77:1b:a4:35:ac:89:
aa:e5:e9:e9:bb:3f:37:5d:f7:14:f2:c7:1e:92:9f:54:9b:b8:
4a:ea:b2:8c:b3:61:db:d2:0a:04:26:9e:c3:a2:68:5e:8e:f8:
6b:38:bc:01:c6:66:4f:7c:be:41:f1:c9:94:00:20:a2:27:7b:
32:8b:7a:ed:3b:06:b1:55:4d:67:56:d9:48:ba:2b:7a:ca:44:
94:8c:c5:69:68:c7:09:60:55:7e:d5:bd:27:d9:66:81:d2:f9:
09:7a:c6:8e:ed:ff:85:00:0d:e5:4c:b7:b6:3e:41:15:61:d2:
6f:eb:e9:69:6c:1f:c8:af:d5:d3:44:31:8d:32:5a:71:ad:09:
5a:69:71:61:31:da:42:b6:55:e7:49:36:43:a6:6a:d7:a8:89:
38:41:19:cb:73:d2:ca:d1:51:0e:69:32:7b:ec:2c:00:75:9a:
c9:c1:c8:9b:04:35:b5:be:aa:4d:74:56:07:aa:31:37:94:8c:
5e:12:8a:46:07:4d:a1:b3:91:00:57:f4:2d:bd:78:52:a4:2b:
51:d9:1d:71:e4:25:40:a4:0d:ef:78:da:63:ad:22:67:15:b3:
7c:d9:30:dc:fd:a5:83:b0:ac:48:09:b6:d0:ee:10:93:73:d2:
2c:24:a1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org