Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2498FC29AA811EFBD5D4052762E951A.roa
File: B2498FC29AA811EFBD5D4052762E951A.roa (raw, json)
Hash identifier: bTREKEh6EmEICV04F6mXbeAo3+1ey6rSkl9BjgA4M5Q=
Subject key identifier: 12:DF:E6:A5:A3:23:CC:6E:CD:9C:49:40:BB:9F:CF:5E:9E:A1:3E:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CD74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2498FC29AA811EFBD5D4052762E951A.roa
Signing time: Mon 04 Nov 2024 12:31:21 +0000
ROA not before: Mon 04 Nov 2024 12:31:17 +0000
ROA not after: Tue 03 Dec 2024 12:31:17 +0000
asID: 54801
IP address blocks: 156.246.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52596 (0xcd74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 12:31:17 2024 GMT
Not After : Dec 3 12:31:17 2024 GMT
Subject: CN=6728be99-8c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:04:16:67:fd:55:fe:79:11:06:82:76:3e:
ca:01:41:dc:e1:d5:33:0a:4d:fa:d3:b8:c8:65:17:
0d:31:73:d0:d6:fd:67:09:5d:3a:c5:b2:bb:bb:59:
0f:3a:0f:43:2e:ea:60:6d:fc:10:8c:f4:bc:98:0e:
3f:4f:77:99:17:d2:9b:cd:0c:b3:ce:11:50:eb:9c:
3b:fe:12:d4:a1:c1:42:07:5b:7a:3d:b1:47:79:62:
4b:60:09:8a:78:da:e7:d0:8a:6e:c9:55:2e:66:20:
b7:06:05:ac:1c:67:47:04:43:a5:48:25:d7:16:d4:
c4:e9:da:03:ff:ff:13:9d:22:ff:54:b0:83:b3:c8:
c9:dd:51:dc:c8:c1:83:97:65:7d:70:b8:df:df:0d:
16:63:92:0c:c1:f0:19:4c:22:ea:fb:3a:42:ce:b7:
01:2a:75:47:47:e1:52:30:cd:d5:7e:03:a4:20:84:
fa:b2:77:fa:66:81:47:1a:be:99:fa:d6:a6:b6:80:
58:6e:a1:88:4d:3e:3b:5d:7d:af:13:28:96:c9:cc:
1f:80:fc:09:8d:77:e5:82:aa:4b:dc:0a:00:69:29:
33:a5:4a:91:db:d3:55:81:68:86:9b:76:24:c8:68:
8c:71:14:45:85:2a:b5:1f:ea:c3:85:84:18:4c:48:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DF:E6:A5:A3:23:CC:6E:CD:9C:49:40:BB:9F:CF:5E:9E:A1:3E:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2498FC29AA811EFBD5D4052762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.16.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:12:b3:f7:d9:e0:6c:b8:af:87:b5:66:6d:96:98:25:b4:71:
df:76:52:54:09:8d:8a:7b:4d:37:63:23:c9:9b:f7:9e:96:3c:
ba:21:66:48:36:2a:08:0b:01:36:db:f6:70:c6:c7:54:6d:bd:
2f:c9:f1:6c:de:70:77:e9:01:5a:48:24:79:f4:b8:c1:4b:8d:
eb:5f:c4:de:30:d5:4f:a5:1d:87:ee:ca:bc:c1:b0:ff:6b:6b:
a9:2a:cc:f8:8b:4e:4e:e6:16:5b:35:16:eb:5c:d5:b0:0a:35:
55:30:f0:a1:ce:f8:05:ec:09:5a:89:08:c6:b1:9d:3d:0a:fd:
f2:95:27:2d:b4:0a:d1:5a:ea:06:67:c5:25:72:fa:9f:fc:af:
8b:d4:7f:59:31:b7:43:b3:fd:2b:3f:cc:6c:99:80:dd:4f:1f:
39:77:b5:e1:ff:5f:85:5e:cf:77:8b:e5:3c:6a:89:96:75:c8:
dd:b5:de:4f:f3:b4:5a:ad:ef:92:a1:ed:ef:96:ed:6d:4f:c1:
66:47:2f:df:64:cc:7a:f8:1c:c2:f5:e2:e6:92:93:7e:2d:c3:
fa:2b:bf:c7:1a:91:3a:24:10:f3:4c:74:3d:98:ee:e0:60:4f:
00:d5:c5:bf:7a:3d:28:84:4b:ba:e3:7c:62:59:1c:79:77:64:
04:25:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org