Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AFEDCFA86F811EF879217A1762E951A.roa
File: 9AFEDCFA86F811EF879217A1762E951A.roa (raw, json)
Hash identifier: J3IdcqQ6Hm85BGJ05F6L47GEX5jr9x6GDjmFbhi9/is=
Subject key identifier: E1:D2:E6:5B:B0:EE:27:23:AC:F6:7E:4E:C0:7D:77:4A:49:B3:5C:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C2E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AFEDCFA86F811EF879217A1762E951A.roa
Signing time: Thu 10 Oct 2024 11:12:58 +0000
ROA not before: Thu 10 Oct 2024 11:12:54 +0000
ROA not after: Fri 20 Dec 2024 11:12:54 +0000
asID: 135097
IP address blocks: 156.250.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49895 (0xc2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 11:12:54 2024 GMT
Not After : Dec 20 11:12:54 2024 GMT
Subject: CN=6707b6ba-f80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:c8:e1:8d:b7:68:3d:db:be:15:1f:a9:83:
aa:4d:10:6d:bb:07:3d:1b:84:91:44:5b:a0:58:60:
a4:da:32:6c:6e:c4:c1:0f:c1:bb:c3:2f:0a:5d:1e:
11:db:57:91:f9:0f:55:f9:d5:f0:4b:cb:66:26:21:
4f:36:39:be:46:65:b1:ee:39:46:5b:6d:27:7b:95:
b0:42:61:d0:cd:68:b8:71:79:2e:41:e4:d9:0e:87:
e0:78:e9:ef:41:c4:eb:01:40:92:35:3c:95:64:73:
f4:88:6d:3e:49:3b:4b:07:6b:bf:f8:7b:37:46:fd:
13:b7:b1:ba:9b:ea:72:c7:88:81:06:71:04:51:f3:
03:00:da:9f:f1:6d:84:d8:d8:f4:c5:ff:15:4f:f2:
8a:0b:0a:7d:b2:fc:92:7b:25:44:8f:a4:79:79:71:
94:ca:5f:90:8a:a0:cb:40:c3:f1:a8:45:f7:d5:f9:
29:6d:64:82:32:c9:b4:12:e7:ff:bc:47:ea:48:6e:
64:5f:e7:a4:43:b8:19:4f:0a:d8:71:ae:e2:f9:e1:
12:22:8f:95:fd:ed:2a:fd:0f:27:89:c3:0b:c9:63:
67:77:79:89:a5:5b:de:dd:4e:b4:f2:e4:d8:ff:32:
e0:23:35:fc:2d:07:cc:e4:e4:73:e9:da:7d:61:f8:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D2:E6:5B:B0:EE:27:23:AC:F6:7E:4E:C0:7D:77:4A:49:B3:5C:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AFEDCFA86F811EF879217A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.16.0/20
Signature Algorithm: sha256WithRSAEncryption
90:b0:6a:f6:32:b3:fb:38:79:c1:96:24:7f:4a:ed:9b:d0:6e:
36:20:aa:af:aa:87:53:bf:e0:3d:8a:ee:8b:1b:d4:37:70:fa:
d9:81:22:fa:05:21:49:40:38:e2:ea:5a:ec:e2:3b:ec:3e:f6:
38:8f:06:50:98:75:d1:2c:ef:79:17:e7:c3:4c:98:12:00:15:
67:2c:da:1f:9d:be:13:2b:ec:4e:8b:71:40:8e:d9:20:1a:8a:
20:7c:d0:e9:93:dd:8b:f2:77:45:78:04:1d:cd:69:09:ac:d6:
9b:fb:37:6c:5d:71:c6:14:33:10:7d:2f:ef:0d:9d:f6:44:59:
51:0d:58:09:35:da:93:22:d2:39:94:b2:85:aa:df:25:2f:6d:
ce:27:82:d9:bf:54:62:1d:a3:84:e7:39:a7:1f:3f:fb:5f:ef:
0d:2e:4c:e9:c1:4e:d5:11:87:f3:a4:d4:2e:11:41:d6:5f:7a:
c8:20:a1:4e:7d:bb:13:a2:ce:72:7e:3b:73:6e:a6:67:06:35:
f6:e4:27:a5:09:dc:97:ef:d6:a9:95:4c:2e:fe:7d:dc:ef:01:
9a:56:c7:ad:05:96:ad:e6:65:73:24:d6:d2:89:b1:c1:bf:6d:
59:5c:48:81:2c:7d:40:53:e7:f1:c6:f4:6a:36:2c:89:dd:79:
75:e2:a7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org