Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EE6D4E4A7DD11EFA6B0D79E762E951A.roa
File: 8EE6D4E4A7DD11EFA6B0D79E762E951A.roa (raw, json)
Hash identifier: /OZbJS4K4F2Eqxlv/N9SgZfZCv72eBaetMRYVbN+TlA=
Subject key identifier: 12:E5:C8:7A:93:6D:4D:D9:CD:18:D8:89:01:AC:1B:5B:0A:1D:75:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D705
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EE6D4E4A7DD11EFA6B0D79E762E951A.roa
Signing time: Thu 21 Nov 2024 07:52:30 +0000
ROA not before: Thu 21 Nov 2024 07:52:26 +0000
ROA not after: Sat 21 Dec 2024 07:52:26 +0000
asID: 203020
IP address blocks: 156.243.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55045 (0xd705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 21 07:52:26 2024 GMT
Not After : Dec 21 07:52:26 2024 GMT
Subject: CN=673ee6be-ca5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:53:80:4b:6f:30:ef:9d:74:cc:24:8b:30:
a3:39:e2:aa:0f:7f:97:13:d5:c0:ae:e2:30:81:6f:
57:84:1a:cb:c7:52:9d:8e:e3:d2:d7:bf:38:11:b7:
60:4e:6a:a3:a7:85:c0:43:c6:fc:5d:11:76:06:c6:
53:01:97:16:5e:b9:8e:59:95:26:8b:20:c6:2d:f0:
17:bb:07:1f:f8:d7:06:e3:27:5d:bb:17:cf:d8:79:
ce:47:d5:d4:14:fe:95:b7:56:7b:c7:3e:3c:96:d8:
6a:fa:4a:6a:af:b4:37:04:6a:0b:ea:46:2b:f0:ee:
2a:af:10:1d:c5:5b:74:c7:c3:f1:bf:18:2b:43:8f:
4b:97:14:12:86:27:9c:d3:c2:14:35:9d:ec:4e:91:
d0:d8:61:3a:8b:6c:34:00:57:2b:e5:e5:23:74:e4:
df:91:5f:64:60:94:ef:1e:c7:22:c4:0e:37:40:9a:
c5:2f:c0:a3:32:04:02:f5:1d:87:29:6f:6c:8e:6d:
07:86:6e:d7:54:82:56:a4:d9:92:4f:0a:ff:74:1f:
8e:ce:c8:99:81:09:33:0e:9c:71:6a:d4:90:d8:30:
c1:06:8e:4b:ef:f1:d1:a7:b8:8e:cf:14:c9:fb:bf:
6c:30:55:b6:a0:c8:eb:dd:4e:20:f9:87:d4:7f:d7:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E5:C8:7A:93:6D:4D:D9:CD:18:D8:89:01:AC:1B:5B:0A:1D:75:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EE6D4E4A7DD11EFA6B0D79E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.176.0/21
Signature Algorithm: sha256WithRSAEncryption
78:74:49:c1:4a:aa:5e:49:7a:36:ff:82:18:dd:ca:a0:e1:da:
a0:2f:f1:8f:48:00:19:b7:9c:5b:03:ac:d5:ff:cc:8c:fb:ae:
8e:7a:a8:47:f0:71:2c:71:5c:79:37:3f:56:79:b4:13:70:ed:
2c:ba:1f:99:24:c0:21:a4:87:ea:d5:e0:74:23:31:56:e0:24:
c8:16:9c:d9:38:c4:41:ab:74:a1:eb:be:76:0b:d5:ee:92:4c:
e7:d8:5f:e5:4a:d1:33:45:fd:ca:96:90:55:c2:d9:a1:83:5f:
d2:38:ee:d4:36:5b:dc:e9:19:8d:9e:3a:23:05:e1:89:9f:f6:
79:c5:be:32:14:a7:15:c1:cc:dd:eb:cf:f6:bc:1c:fc:e9:43:
66:e1:ed:c4:e8:ae:44:43:68:75:4b:83:d8:f2:0e:15:c4:01:
cc:c3:f4:02:4e:b3:62:09:3e:86:5d:15:04:57:cc:4f:aa:27:
d2:c2:2b:48:f5:80:00:0a:d6:8e:21:46:d3:7b:ee:5c:91:1c:
7d:ef:b3:55:84:4e:7c:9f:70:96:f9:95:02:92:91:0c:25:03:
ec:68:fa:a0:36:8b:05:75:b4:aa:af:1c:4a:dc:cb:91:08:af:
5a:75:cb:a9:e4:00:70:d8:2f:0b:3b:91:e3:02:f4:fe:96:0b:
46:5c:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:40 2024 by rpki-client on console-ams.rpki-client.org