Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA0E8B89D1311EFB9460893762E951A.roa
File: 9EA0E8B89D1311EFB9460893762E951A.roa (raw, json)
Hash identifier: w8UBWpVMPfFD9nF9yxuiV1f3PoYhXd/PUX5v22nODfM=
Subject key identifier: 38:4F:89:B4:C0:1D:52:D4:34:A9:84:09:AC:DB:35:35:37:E4:7A:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CFE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA0E8B89D1311EFB9460893762E951A.roa
Signing time: Thu 07 Nov 2024 14:21:46 +0000
ROA not before: Thu 07 Nov 2024 14:21:43 +0000
ROA not after: Sat 30 Nov 2024 14:21:43 +0000
asID: 138152
IP address blocks: 156.236.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53216 (0xcfe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 7 14:21:43 2024 GMT
Not After : Nov 30 14:21:43 2024 GMT
Subject: CN=672cccfa-274a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:c9:7e:98:fb:e1:4c:6e:52:c5:cd:86:78:
c0:cd:46:ff:c7:e1:7d:80:02:10:24:7a:e8:fd:13:
10:f8:f4:48:e6:d0:05:1b:ec:d3:a8:52:63:86:fc:
6e:b7:b5:e1:79:c8:93:ff:be:b2:1b:d6:94:13:0a:
6b:d2:7c:d1:85:7d:df:3c:4f:48:2d:45:f1:a2:cb:
b6:56:f6:7a:14:20:5e:72:bc:b3:e0:b2:14:d4:f6:
b4:b9:50:77:9a:37:63:d9:28:0c:a1:41:d8:ad:21:
d6:69:eb:8c:a7:a8:48:39:da:11:17:f1:ef:63:36:
3d:57:1c:fa:f6:6c:76:ae:4f:5e:4e:cd:a7:2a:c2:
59:d5:53:90:ca:30:a0:2d:08:eb:64:76:18:05:18:
dc:a0:20:0b:48:04:f3:e8:33:3b:93:34:c2:83:e4:
d8:43:61:14:46:92:e7:1b:df:f1:5a:9c:17:60:e9:
81:d7:b9:2e:0c:82:9e:b3:27:86:80:22:2b:64:dd:
61:0b:8c:d5:9d:9c:a0:51:23:55:b6:48:d7:b1:47:
50:73:85:bd:cd:2a:98:17:aa:55:63:bc:ad:98:20:
14:28:a7:19:bf:3a:b3:0b:c9:03:31:c2:d6:02:08:
6d:b1:a2:85:ed:d3:c5:f5:9e:b5:55:e6:8b:82:f3:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4F:89:B4:C0:1D:52:D4:34:A9:84:09:AC:DB:35:35:37:E4:7A:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA0E8B89D1311EFB9460893762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:26:98:d7:4d:a0:e8:41:90:49:4d:46:cb:76:65:40:52:49:
7f:64:f0:03:f0:a5:9e:e0:3b:2e:a1:65:a5:6d:78:31:41:ac:
79:de:7a:b2:d9:51:ec:00:af:17:bf:a8:20:3a:33:42:7d:48:
a0:45:fa:29:fd:10:24:15:fd:fc:4b:21:f8:b7:ba:57:ec:d3:
16:87:02:ca:3d:95:f2:c3:eb:2a:f4:50:6e:97:cb:58:cd:f0:
fb:61:cf:62:f6:84:b4:1e:8a:6c:c4:b7:b0:91:29:f9:94:54:
e4:45:55:93:dd:25:02:8a:29:77:29:0f:db:c3:70:56:24:ec:
c9:b1:ec:fe:c1:df:8e:30:9c:39:18:b5:a6:00:a1:68:94:8e:
9f:e0:82:15:87:06:c0:41:95:c6:4d:52:fb:fa:c6:95:a8:3e:
79:1c:84:99:35:e5:fb:ad:78:ec:71:0f:c0:3f:48:48:6d:8b:
78:9b:98:d5:ce:7d:34:3c:0e:ad:c4:a1:95:88:d9:90:70:dc:
5f:3a:75:c0:e0:c7:33:4d:b4:fb:92:60:01:62:49:84:55:9e:
06:34:df:0e:ab:cd:6f:a8:ee:9f:c4:98:84:27:a6:a5:cf:48:
ef:6f:0f:58:e4:9f:9a:7d:0d:34:a3:86:ae:c4:de:9f:d4:34:
83:10:bd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org