Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A006557A9B8911EF919FF85C762E951A.roa
File: A006557A9B8911EF919FF85C762E951A.roa (raw, json)
Hash identifier: QLnXMQeLNRt7UwBWOuNlmXucqTXHObiT0DkCBT8jgvo=
Subject key identifier: CD:53:86:26:C7:4C:D5:65:93:5B:D6:9F:C6:8A:1A:54:1F:80:95:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CED5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A006557A9B8911EF919FF85C762E951A.roa
Signing time: Tue 05 Nov 2024 15:21:27 +0000
ROA not before: Tue 05 Nov 2024 15:21:23 +0000
ROA not after: Wed 04 Dec 2024 15:21:23 +0000
asID: 200373
IP address blocks: 156.233.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52949 (0xced5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 15:21:23 2024 GMT
Not After : Dec 4 15:21:23 2024 GMT
Subject: CN=672a37f7-9231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:9e:21:a5:08:c5:a6:33:f9:8f:83:65:0a:
cf:cf:54:a7:ef:e2:ea:1e:be:17:eb:fc:16:b3:5d:
ca:bb:32:67:09:46:cc:c6:80:99:29:6f:2b:e4:46:
ad:89:0c:8a:ac:9d:7f:8d:5d:57:f4:1e:a6:18:25:
3f:fd:54:27:d9:0f:f8:9d:0d:16:ad:12:60:8a:45:
c5:01:78:11:f9:0d:5b:70:e9:e3:77:50:4b:8a:9c:
cb:21:19:1a:61:04:53:e3:e7:e1:ae:f9:99:b5:7f:
8f:92:e1:4b:0f:13:10:72:3b:fb:3c:66:6f:ec:da:
1a:e0:7d:3e:42:8f:ca:f9:02:93:c4:57:29:1a:36:
d0:57:ec:96:65:4a:a1:dc:9a:68:a1:81:6a:fa:98:
4f:b2:f6:9a:27:70:34:d0:c5:00:05:5b:d7:bb:9c:
dd:43:d2:d7:67:3c:0b:22:c7:b6:12:45:f1:ba:ee:
26:5d:15:77:be:c9:cc:dd:13:fe:eb:ce:b8:3d:8c:
c1:e2:e5:0e:2b:c0:e8:46:d4:b9:f6:14:c8:73:3b:
e0:83:e6:6c:e3:8d:30:9c:a7:7d:f9:9d:cb:a1:ee:
e2:89:8b:fc:be:c7:49:f5:8a:f8:39:f8:94:99:e1:
30:63:ee:b4:46:e0:1c:08:02:ac:9c:c8:b6:c3:15:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:86:26:C7:4C:D5:65:93:5B:D6:9F:C6:8A:1A:54:1F:80:95:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A006557A9B8911EF919FF85C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.84.0/22
Signature Algorithm: sha256WithRSAEncryption
97:c6:8b:6d:ef:06:45:59:d8:a4:46:c7:da:8c:39:e8:44:06:
24:af:64:cd:80:f2:00:c4:75:14:c4:24:66:6a:e0:06:27:80:
42:db:a6:fc:2b:ad:dd:04:34:63:31:d0:5c:85:1e:05:f6:e2:
28:ba:f1:ed:fd:92:5f:ca:bf:ae:ad:a2:2b:a7:5f:14:e5:4d:
5f:93:da:8d:ff:05:0f:ff:35:5b:2c:aa:5c:a2:cb:db:42:f7:
06:24:79:ee:db:63:1d:c7:7d:99:c1:04:57:36:91:31:14:ca:
97:70:fc:06:88:97:1d:20:3d:83:83:fc:b2:69:bb:97:5e:25:
43:2d:ac:fc:39:81:21:ca:3f:fc:17:2b:68:06:af:d3:c0:45:
8e:37:f0:81:9c:ff:18:d6:62:63:64:b4:8e:3e:11:3c:ed:12:
77:97:47:61:cd:cb:2c:7d:80:ba:00:d5:59:31:cb:be:be:b0:
9f:c2:a3:52:23:90:9d:40:8b:4e:d7:a7:2f:9e:e3:5d:45:75:
4c:42:e0:20:31:57:85:31:2c:cd:de:71:97:cf:41:16:d8:3b:
d5:82:be:98:fc:da:4f:ae:25:d8:27:7d:a8:75:43:0f:7a:c8:
fa:88:25:32:4f:94:14:c7:11:09:c6:36:3b:46:e3:d8:68:e5:
69:f1:57:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:41 2024 by rpki-client on console-fra.rpki-client.org