Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4380A46A64F11EF9311F559762E951A.roa
File: A4380A46A64F11EF9311F559762E951A.roa (raw, json)
Hash identifier: yzNYV1aob7qFMLM5rjmi2QtXSwsH6MeGS0HKvs2i5LY=
Subject key identifier: 6B:EC:A1:58:6A:02:CD:92:E1:44:0C:E5:E6:1F:4F:56:AE:40:12:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D576
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4380A46A64F11EF9311F559762E951A.roa
Signing time: Tue 19 Nov 2024 08:24:06 +0000
ROA not before: Tue 19 Nov 2024 08:24:02 +0000
ROA not after: Sat 23 Nov 2024 08:24:02 +0000
asID: 149014
IP address blocks: 156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54646 (0xd576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 08:24:02 2024 GMT
Not After : Nov 23 08:24:02 2024 GMT
Subject: CN=673c4b26-6a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:78:f9:ec:bd:e2:00:4b:a1:6e:d3:b3:6c:
ce:d1:47:00:52:4b:4b:eb:46:1d:5a:84:4b:7a:8a:
07:5f:a5:45:14:07:42:b0:47:18:dd:a2:76:64:69:
72:9a:5f:81:72:0a:be:35:e1:9c:69:30:53:68:92:
c3:ba:c7:da:93:f2:29:12:5d:0c:9e:29:2c:1d:02:
25:85:80:80:25:c0:71:4d:a6:46:dc:87:76:f8:e7:
7a:f4:90:d4:af:72:4e:13:05:51:f5:e9:39:f7:dd:
91:32:37:14:78:d4:03:c1:8d:c4:d1:36:90:88:ac:
d0:cc:e6:e4:75:e4:04:bd:e5:25:db:d4:c8:f0:76:
7e:4f:ff:57:d8:6b:b9:c6:d8:30:c5:86:87:f3:19:
8b:8b:c7:b4:60:61:1c:9d:b7:ef:ec:41:9e:ea:f6:
0b:3b:e3:3a:6a:56:cd:1c:5a:03:b3:bc:92:4b:36:
f7:72:ba:6b:26:07:69:fa:18:c6:ae:a3:43:a4:b4:
f6:5d:31:69:1d:b2:0e:df:1f:51:39:33:0a:58:c7:
25:33:e1:af:bc:cd:bc:a4:74:03:9a:13:fd:25:88:
f2:a3:ac:0b:b5:85:cc:df:8e:11:f1:52:ac:9b:8f:
d2:b5:3d:09:33:cb:f9:6b:a5:53:1f:79:0a:36:b9:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EC:A1:58:6A:02:CD:92:E1:44:0C:E5:E6:1F:4F:56:AE:40:12:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4380A46A64F11EF9311F559762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
75:f6:58:83:95:3e:1d:62:08:2a:6d:33:3f:78:b2:59:89:bb:
c5:34:8a:44:eb:95:de:3e:9f:9e:20:9b:45:70:e1:84:0c:b7:
fd:00:50:9d:e3:11:9e:f6:94:0e:f2:7e:70:7e:2e:e0:ee:65:
27:da:58:7d:ea:f7:a9:e4:ae:5e:d5:1c:a7:22:d9:ea:fe:5a:
d1:2e:ce:cb:96:1a:ea:0f:64:65:84:aa:f4:2d:d9:39:9b:a5:
41:2a:83:ce:a9:98:76:3c:d1:df:e2:43:9e:a7:52:8d:3c:d7:
75:6c:82:d4:8f:0a:dd:61:6a:2b:3e:51:95:75:99:e8:9e:3d:
23:a8:dd:5a:8c:b1:9e:e7:5e:95:3c:7d:5b:da:0f:ab:a8:f8:
0e:ab:9f:7c:45:e8:cc:58:7b:18:6a:5a:8a:88:4b:5a:54:fa:
3e:d7:3c:10:e8:0c:e4:c5:ca:a9:35:33:38:76:a4:d1:28:92:
2b:59:34:e4:90:9c:24:16:9c:54:78:8a:05:93:c1:32:33:5b:
f5:df:d0:92:15:4e:b5:8f:e9:ba:80:06:a0:77:fc:10:63:2f:
9f:bd:84:e3:a0:e3:41:f6:43:d1:b7:e5:32:cb:44:0c:a5:14:
b7:c6:a3:a9:19:07:e2:94:55:2b:d3:9a:ea:e5:e9:86:57:7e:
07:92:46:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:41 2024 by rpki-client on console-fra.rpki-client.org