Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97C949946A6011EFBB010D53762E951A.roa
File: 97C949946A6011EFBB010D53762E951A.roa (raw, json)
Hash identifier: lVorHeOtSSrRnHWwTQAzOEI6dTA7Is6677HPt3seNug=
Subject key identifier: B6:DC:97:D6:0C:F4:88:3B:30:8A:FA:0F:95:34:84:23:9A:8D:43:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B183
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97C949946A6011EFBB010D53762E951A.roa
Signing time: Wed 04 Sep 2024 01:54:17 +0000
ROA not before: Wed 04 Sep 2024 01:54:13 +0000
ROA not after: Mon 30 Dec 2024 01:54:13 +0000
asID: 17561
IP address blocks: 156.255.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45443 (0xb183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 4 01:54:13 2024 GMT
Not After : Dec 30 01:54:13 2024 GMT
Subject: CN=66d7bdc9-bc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:96:56:c4:e3:c2:98:4c:a8:c9:52:35:58:
72:9c:1d:29:bb:01:2f:53:25:d6:ac:99:ad:22:4d:
2c:0d:e1:f3:15:ba:b3:3d:a7:f5:5f:ff:cc:17:0c:
4b:b4:3b:56:15:f0:3f:01:86:43:a6:b0:b0:06:b2:
78:7a:3d:66:d7:39:ba:6d:12:59:3e:17:4a:c5:1b:
22:85:b7:5a:d5:14:c0:87:6c:bb:c7:25:fd:2a:88:
d4:c5:9a:ba:44:ca:00:de:ec:0c:06:cb:e1:11:da:
50:f4:c7:f3:50:6f:e9:d8:5e:86:d4:b2:eb:18:29:
30:ca:f4:64:26:a2:22:c6:f4:4b:2f:d3:d1:86:54:
a6:d8:2a:f3:6d:2d:3e:4b:a9:9e:29:50:e5:54:b1:
05:15:33:a5:8b:78:50:c5:81:e6:83:c8:52:69:98:
c7:c0:8f:31:ed:6f:d7:5f:5e:14:bb:b3:b3:09:d5:
16:8c:58:d7:ff:e6:ef:3f:4d:41:ec:dc:6e:b7:e9:
f2:bd:12:15:1b:a1:b9:53:98:f6:9b:93:46:80:f6:
b1:7a:54:88:aa:91:11:39:6b:20:ae:e8:49:48:65:
4c:d0:0d:cc:12:5e:a1:f0:32:0e:62:4a:de:cb:65:
70:32:a5:a0:0c:e6:13:43:18:1d:5c:aa:2a:d5:92:
50:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DC:97:D6:0C:F4:88:3B:30:8A:FA:0F:95:34:84:23:9A:8D:43:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97C949946A6011EFBB010D53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.104.0/21
Signature Algorithm: sha256WithRSAEncryption
94:f0:3e:e2:d9:d8:d4:c5:bb:f5:59:27:8c:ed:bc:d8:6e:83:
43:09:91:59:93:40:42:ae:3f:5b:e0:e1:37:25:3c:07:8d:f1:
ae:37:a8:2a:4e:32:b8:e8:70:3e:b3:82:52:22:a4:a6:7a:50:
9b:77:5e:06:6f:bf:5f:0e:53:d0:71:b6:43:10:be:7d:39:ac:
48:7e:2b:18:4b:bf:1e:81:52:fb:84:7a:42:ae:d6:ca:f4:27:
30:be:a6:1f:06:8e:d2:21:50:e8:d7:0d:e0:77:25:43:e6:74:
67:a1:00:4d:94:ea:33:49:66:d9:a6:e0:d2:a9:02:74:5f:ba:
13:7c:f5:ee:ce:76:cf:4a:05:14:fe:3e:fb:74:30:a5:51:4d:
be:e6:0b:d8:fc:a1:d5:11:2e:37:f3:dc:95:16:e9:47:b7:61:
23:e1:fe:a0:dd:5c:4c:de:58:ad:23:c1:1c:e3:ae:10:f8:7a:
56:57:25:29:b4:0e:6d:ae:62:c2:bb:c3:c9:95:a7:9d:31:37:
77:d7:11:d8:35:10:c5:5c:2f:28:8d:7f:bd:c2:fe:ab:1a:56:
d4:25:5f:ef:d9:d3:1d:b3:cc:27:e6:46:31:75:45:bc:86:f9:
7a:b1:dd:7a:8d:ae:3e:2a:02:c3:34:3e:5f:d6:e0:0c:f6:7a:
80:a5:b8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org