Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9344167CA19911EFA22311B3762E951A.roa
File: 9344167CA19911EFA22311B3762E951A.roa (raw, json)
Hash identifier: hbrWijrbVTmKBVOZa11DPj6A2IG6vbSMkZboU6QhHDA=
Subject key identifier: 22:6F:E9:98:26:21:A7:09:E6:5B:21:51:06:02:2C:61:81:7F:4F:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D24A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9344167CA19911EFA22311B3762E951A.roa
Signing time: Wed 13 Nov 2024 08:30:45 +0000
ROA not before: Wed 13 Nov 2024 08:30:41 +0000
ROA not after: Sat 23 Nov 2024 08:30:41 +0000
asID: 54467
IP address blocks: 156.247.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53834 (0xd24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 13 08:30:41 2024 GMT
Not After : Nov 23 08:30:41 2024 GMT
Subject: CN=673463b4-3cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:30:39:84:97:cf:fb:17:e0:ff:68:40:fd:
3c:f4:b1:e0:59:14:98:23:e4:0e:9b:ba:45:26:b4:
c1:15:d5:5f:c7:aa:22:28:b9:53:45:b2:2a:01:bd:
1f:60:5b:85:d1:d9:60:b9:fc:33:0f:c7:ad:0b:74:
03:f5:57:5e:f3:7f:fd:c4:9b:15:cc:dd:fa:06:8c:
9d:b9:eb:97:5c:3e:d5:50:ab:32:7c:e7:d2:f1:09:
45:e6:3c:59:3c:fc:4d:2a:6a:c2:93:f2:98:bf:5a:
ee:66:ba:87:25:e5:57:df:a3:ba:81:7c:12:8e:a1:
3f:30:4b:95:af:3f:d5:bd:d1:f2:28:74:4f:43:c1:
da:85:03:d4:f1:a8:c6:4e:ce:13:b6:e4:69:03:2d:
37:99:74:63:08:76:54:e7:5c:96:21:57:e3:12:69:
13:1e:91:d1:25:95:66:2b:89:4c:1d:ed:cd:24:90:
66:b4:79:fd:05:69:47:1c:d3:7c:51:6a:77:b6:43:
31:f1:88:8c:71:53:af:e2:14:b0:44:30:81:ba:15:
cc:32:6e:ae:a3:4f:d5:c2:7f:f0:a5:9a:90:3c:bd:
af:25:8b:9e:2e:27:74:ab:58:85:b8:fe:9f:1c:bd:
3e:99:52:be:f5:e9:85:df:6b:81:7c:ad:01:bb:85:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6F:E9:98:26:21:A7:09:E6:5B:21:51:06:02:2C:61:81:7F:4F:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9344167CA19911EFA22311B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.46.0/23
Signature Algorithm: sha256WithRSAEncryption
32:16:8f:57:e1:d0:b2:4f:60:15:b0:f9:0a:94:79:8e:58:ac:
7a:9f:73:49:93:dc:5b:fc:ee:2b:0a:0d:60:39:dd:69:c4:2e:
f0:60:2c:64:69:73:f9:2f:6a:c4:bc:e0:bf:41:a2:a5:74:8e:
2f:54:19:16:3b:07:c1:4f:f6:3c:04:4c:23:f0:65:36:30:d9:
c0:6d:e5:3e:10:67:2a:b1:69:a1:51:7f:1d:c4:57:a9:7e:37:
8a:8f:6b:f1:6a:24:00:a3:06:9b:a6:8e:a2:fb:86:55:0a:a6:
62:e4:fd:a7:12:db:76:71:0a:ad:3b:81:c9:8e:05:11:a6:fa:
14:71:84:6d:ad:cb:2c:67:b1:e2:e0:41:e2:d5:96:eb:eb:a2:
6e:5c:4d:13:68:ae:95:84:61:b9:44:e4:81:a9:46:73:07:37:
e1:40:7b:28:3a:69:1e:02:ec:c7:06:09:59:cd:db:5b:ae:d5:
b1:eb:92:f5:b5:ae:c1:81:64:39:d6:d9:9f:b3:82:21:5b:6b:
90:f6:67:94:b5:dc:28:ab:43:27:9c:a1:16:35:58:30:6a:e4:
e9:c3:fa:dc:a6:80:52:6d:37:4a:6d:64:03:56:64:db:cd:8a:
33:ec:46:e9:13:4d:4c:0b:e2:cf:d0:9b:bb:69:95:da:70:2b:
bf:f0:c4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:40 2024 by rpki-client on console-ams.rpki-client.org