Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/966DB50EA4CA11EF8722824F762E951A.roa
File: 966DB50EA4CA11EF8722824F762E951A.roa (raw, json)
Hash identifier: 7acv8AvqjdN9UdeEUqaJIzwSNWHxxZIXWde2+x89zf4=
Subject key identifier: B2:BD:98:D2:EC:BA:E0:DD:0B:F4:1F:D3:B9:E5:60:EE:24:58:30:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/966DB50EA4CA11EF8722824F762E951A.roa
Signing time: Sun 17 Nov 2024 09:59:09 +0000
ROA not before: Sun 17 Nov 2024 09:59:05 +0000
ROA not after: Mon 25 Nov 2024 09:59:05 +0000
asID: 207023
IP address blocks: 156.255.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54463 (0xd4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:59:05 2024 GMT
Not After : Nov 25 09:59:05 2024 GMT
Subject: CN=6739be6c-33a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:86:12:ae:b4:57:20:f9:9d:db:70:17:8b:
52:0d:90:58:c9:b8:69:45:93:b9:e0:8e:b0:df:28:
4b:75:0f:61:74:d6:ec:04:72:42:61:44:6f:3d:e7:
91:52:6e:fc:5c:89:8f:72:4b:a6:6a:5d:5c:86:e9:
c4:89:2d:44:a3:c4:f8:56:56:3f:26:66:17:f3:15:
d6:66:f8:7d:e3:5d:88:8e:98:45:15:ab:ac:3f:51:
fc:90:a7:d7:b2:d0:e6:9b:ee:4b:dd:e2:d1:e9:47:
11:ab:d5:94:5b:79:e9:fb:2d:2b:1a:08:51:89:87:
a1:b6:b2:2e:4d:63:a4:6b:2f:f2:ee:30:f7:88:30:
3e:9b:f0:2a:3f:5c:1b:da:9a:75:ea:6c:54:12:ef:
e4:0d:e8:5a:7f:bd:5d:5f:7a:1d:d7:f2:e9:fb:c0:
99:c8:ce:96:92:ae:4a:e8:3d:59:b9:80:7e:d3:58:
45:37:4a:b4:07:18:d8:7c:04:fb:2e:d2:26:a0:7e:
a3:4c:77:04:df:e2:fc:27:1e:6a:86:2d:9c:d9:a1:
54:ce:dc:86:f2:8b:04:0a:5d:48:0a:5d:64:86:42:
a7:00:e8:7a:3d:08:b6:03:a6:1a:80:1c:43:49:4c:
d5:84:32:47:8f:cd:41:ba:e7:a3:90:fc:51:c4:5a:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BD:98:D2:EC:BA:E0:DD:0B:F4:1F:D3:B9:E5:60:EE:24:58:30:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/966DB50EA4CA11EF8722824F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.24.0/22
Signature Algorithm: sha256WithRSAEncryption
34:e2:99:f4:d3:cb:4c:fc:d3:99:3b:a7:2c:83:e4:84:66:d3:
72:9d:28:37:06:ae:e4:cb:6c:b9:3f:9e:53:a1:12:1a:cf:fb:
96:ad:93:89:45:4c:46:08:23:ba:da:20:d1:9f:0e:ed:37:90:
6d:95:bf:dc:21:65:6c:95:17:86:f5:a8:e5:ca:64:f5:32:db:
f6:e8:ba:ac:87:f0:2e:41:ea:14:8e:ed:18:8c:b0:f5:35:4b:
28:cb:f5:82:3b:b2:a6:65:b6:15:83:aa:b3:2f:65:92:1e:0e:
b0:d2:66:7d:4c:8c:21:ef:3a:87:d0:0c:2f:33:ea:5e:c4:aa:
1d:01:d7:1b:59:a4:12:97:e6:09:6b:f6:c5:cb:fb:24:66:fa:
14:1f:92:d2:9a:3d:77:a4:51:f7:97:b7:df:81:b0:f6:14:b8:
d1:e1:70:cd:e6:84:1f:70:ec:13:b2:29:04:67:f7:16:2c:4c:
e9:48:27:bd:d0:01:a7:da:1d:2a:92:46:f7:3b:20:d5:0f:aa:
2e:90:4c:c2:9a:ae:ad:25:bf:17:09:6e:ed:53:2f:2f:88:79:
08:a4:2d:39:9d:8c:00:a5:43:d6:9b:65:d7:16:58:ba:3d:ec:
ea:c9:a2:f6:96:d4:43:30:d0:88:d3:cf:86:50:09:ce:82:84:
36:24:8d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:41 2024 by rpki-client on console-ams.rpki-client.org