Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE9448CEA4CE11EFAD7C3569762E951A.roa
File: AE9448CEA4CE11EFAD7C3569762E951A.roa (raw, json)
Hash identifier: cqhKCa+t4Tq6XEQ9lS9P6Q8z2tXBZTdEk6GlFMrVd1s=
Subject key identifier: 62:06:B8:E0:9D:FC:29:CE:D5:64:88:08:D3:13:DD:54:DA:32:A4:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE9448CEA4CE11EFAD7C3569762E951A.roa
Signing time: Sun 17 Nov 2024 10:28:27 +0000
ROA not before: Sun 17 Nov 2024 10:28:23 +0000
ROA not after: Mon 25 Nov 2024 10:28:23 +0000
asID: 9009
IP address blocks: 156.238.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54487 (0xd4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 10:28:23 2024 GMT
Not After : Nov 25 10:28:23 2024 GMT
Subject: CN=6739c54b-6242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:81:01:62:4a:07:a4:86:e7:97:e4:ef:9c:
40:ba:52:b5:1b:82:4d:a1:cd:71:29:d8:2d:b5:0b:
3d:db:16:12:37:23:e6:c8:1f:60:15:bc:24:cc:98:
87:4f:f8:2d:20:eb:6b:da:26:22:28:6d:5e:5c:31:
15:0d:bf:66:52:dd:6a:f9:5b:57:ea:a1:0d:1f:17:
75:c8:ec:e1:95:28:44:96:a1:d0:d2:5a:8e:d8:ff:
db:39:27:a4:51:b1:79:2a:3c:07:1d:63:9f:14:07:
5a:9d:38:76:24:ae:1b:4d:c1:37:bc:d3:c4:f4:ed:
11:c6:1e:4b:32:74:ce:3b:c1:b4:c4:27:07:2d:ce:
62:48:69:a1:8a:bd:9e:3c:67:6b:1b:ab:31:1f:ca:
31:3f:eb:8e:cf:a9:25:b7:46:ad:c5:ce:1a:b2:d4:
3c:b6:9e:09:af:b9:f6:5e:b1:3a:e2:97:83:2b:f7:
ef:71:e3:08:6f:75:2e:5e:57:6a:5d:87:83:a8:4b:
6e:2a:86:ed:86:c6:77:54:f6:f6:a4:9a:23:24:c0:
04:7f:93:f6:e8:94:c0:98:85:ff:45:42:14:ee:fe:
1b:a3:c2:0c:18:cf:94:cb:31:84:87:da:88:e7:d8:
35:bb:0d:a7:83:98:6e:a8:90:83:49:33:5c:ff:1f:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:06:B8:E0:9D:FC:29:CE:D5:64:88:08:D3:13:DD:54:DA:32:A4:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE9448CEA4CE11EFAD7C3569762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.8.0/23
Signature Algorithm: sha256WithRSAEncryption
10:05:6f:92:af:82:b9:d8:7c:c4:58:e4:d1:bb:e9:54:d5:b7:
40:00:7e:ed:e5:ee:3a:bf:df:0e:a2:ab:c5:5e:3e:0a:f7:5f:
f2:70:c6:b4:05:05:3d:92:31:c3:f9:dd:a1:31:91:ca:b8:9b:
34:7d:ba:6c:08:1b:c8:d8:82:f4:2f:91:16:98:58:f6:aa:42:
b3:5d:91:97:96:50:50:f3:e8:e7:83:40:60:fd:b8:2d:f3:ca:
cf:ac:40:42:fe:f2:f7:c6:6c:33:bc:c0:81:c8:00:e5:c2:12:
eb:5d:ea:f8:dc:0f:3d:19:0a:60:88:80:54:34:e4:91:54:59:
1e:41:cf:1b:03:79:48:12:c2:b2:14:b5:90:3c:00:04:c5:e4:
0c:a8:68:71:de:ee:6a:0d:8d:b4:b8:e5:02:a2:24:c5:cc:a8:
ea:be:45:6a:50:69:fe:1b:fe:56:1e:93:cf:80:dd:90:fc:18:
89:c8:af:a0:e3:9b:a9:fc:bc:46:b7:29:b7:63:c4:c8:c7:01:
e0:13:1c:4b:c0:04:0b:24:05:72:2a:2b:e6:ae:82:a9:e3:98:
7f:03:18:5a:f2:1e:57:09:51:65:d6:1f:a9:17:34:b5:3e:37:
f7:90:53:aa:10:44:95:8f:a9:b0:dd:a8:50:2a:cb:50:e4:5f:
c4:f4:0f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:45 2024 by rpki-client on console-ams.rpki-client.org