Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97F4E0C0A72011EF8FB4CC76762E951A.roa
File: 97F4E0C0A72011EF8FB4CC76762E951A.roa (raw, json)
Hash identifier: tSdm3jvRxJFHNuFPVzl9eUBqmOF/Rb/6PRAF1l/DD9Q=
Subject key identifier: 77:8F:B2:00:74:70:27:BB:F4:BA:0F:D8:67:1C:4B:55:F0:33:4A:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97F4E0C0A72011EF8FB4CC76762E951A.roa
Signing time: Wed 20 Nov 2024 09:19:50 +0000
ROA not before: Wed 20 Nov 2024 09:19:45 +0000
ROA not after: Mon 02 Dec 2024 09:19:45 +0000
asID: 39600
IP address blocks: 156.255.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54713 (0xd5b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 09:19:45 2024 GMT
Not After : Dec 2 09:19:45 2024 GMT
Subject: CN=673da9b6-db57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:52:7b:4b:8f:b6:ef:fb:69:e3:b9:6c:3a:
9a:fd:5d:99:6d:a2:80:47:16:29:08:d8:69:cb:c1:
b6:d8:ce:ef:b7:3f:4d:a4:8b:4d:da:7b:ba:ec:ca:
1e:0d:b4:11:84:38:5a:98:0a:5c:a4:df:36:6d:71:
0f:d1:58:c7:d8:fb:2b:f1:4e:04:6f:70:49:67:14:
2d:05:29:7b:5f:49:ca:68:3d:a4:c9:e6:b6:f0:19:
77:ca:50:57:8d:dd:e7:5c:32:c6:8b:ea:20:75:c0:
2d:4c:52:9a:01:32:c9:48:2c:d4:c8:2f:75:1c:82:
9b:b3:11:76:66:05:a8:c2:c8:47:0e:06:df:b4:83:
5a:89:cf:a4:2b:88:e9:c8:44:d0:31:63:96:87:f3:
29:95:fa:c3:ca:82:f6:e8:ac:be:76:f5:4f:76:06:
06:6b:56:2d:49:14:3b:a9:da:d8:75:14:07:5d:91:
d1:8b:2b:16:ca:c0:ab:79:3b:0d:9e:f8:85:c5:5d:
88:d9:06:7c:5a:05:12:13:84:e1:48:8a:a1:22:34:
04:d1:bf:e8:b9:41:fa:96:35:8b:5c:ad:10:6e:30:
da:d6:ba:4b:5f:16:87:c6:b5:4f:9e:76:44:82:16:
cb:86:60:eb:ea:ac:e4:c5:ae:f6:2e:5f:e6:aa:60:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8F:B2:00:74:70:27:BB:F4:BA:0F:D8:67:1C:4B:55:F0:33:4A:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97F4E0C0A72011EF8FB4CC76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.86.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:11:34:4b:95:8c:59:73:15:c1:d5:fb:00:3d:23:65:a4:a8:
f6:59:93:b9:25:94:ea:23:71:55:24:db:1c:e9:79:c7:bb:c1:
a8:12:78:96:4e:65:92:ca:4a:50:55:05:56:cb:af:dd:0b:20:
17:8f:71:73:92:9f:d9:96:5a:0d:be:c4:16:5f:22:63:8a:99:
86:65:2f:48:9a:4a:ae:23:ec:ba:f4:64:3e:a4:81:56:aa:35:
f4:a5:82:01:da:1b:39:f5:f9:da:75:f2:65:61:e6:f8:d9:05:
61:87:6b:92:a2:bd:6d:a0:b7:1f:0a:e6:c5:b6:04:01:64:b7:
a5:5b:b7:49:b1:1c:1a:ba:52:dc:3f:47:dd:64:3b:ce:8e:8c:
15:ef:74:b9:65:01:89:b0:97:82:9d:0f:24:11:77:4f:34:a7:
08:d0:53:ce:50:a1:e9:91:77:af:20:bf:74:3e:c4:e9:4e:7d:
5a:db:4b:9d:15:79:c6:34:49:39:4d:01:79:cf:32:cb:4f:ae:
fa:e1:35:d7:43:63:84:91:00:d3:37:75:b2:11:85:9f:51:8e:
8f:73:1b:3b:b8:7c:95:fd:df:ac:64:93:6b:23:ad:81:0e:79:
15:44:e3:14:3c:c1:7f:9a:ca:59:93:eb:cb:a7:1d:f0:35:6e:
34:c8:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:41 2024 by rpki-client on console-ams.rpki-client.org