Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B34D677A9F7D11EF929E2342762E951A.roa
File: B34D677A9F7D11EF929E2342762E951A.roa (raw, json)
Hash identifier: raQYeRNj5BicBhQ64ZaJ4KFb1GOY5T7Sp52c9r58GPw=
Subject key identifier: 49:09:75:A4:3B:F5:EA:86:A6:40:7C:B5:CF:49:6F:40:89:5C:37:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D100
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B34D677A9F7D11EF929E2342762E951A.roa
Signing time: Sun 10 Nov 2024 16:06:10 +0000
ROA not before: Sun 10 Nov 2024 16:06:06 +0000
ROA not after: Fri 17 Oct 2025 16:06:06 +0000
asID: 137443
IP address blocks: 156.226.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53504 (0xd100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 16:06:06 2024 GMT
Not After : Oct 17 16:06:06 2025 GMT
Subject: CN=6730d9f2-4809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:60:37:4d:c4:84:b2:18:4e:cc:81:77:e0:ea:
65:10:88:2b:6d:c1:4b:7e:9e:b5:b6:a5:1d:91:e5:
c1:2c:09:20:31:69:b6:02:72:e9:ec:d4:c6:29:fc:
a2:7a:dc:63:fd:ba:ff:ca:ee:6c:b1:81:d7:3f:a5:
a9:ce:f6:cd:d6:81:51:a1:0d:ae:5e:90:e1:9d:83:
70:1d:95:70:a7:88:ed:93:71:eb:4b:fb:f4:db:19:
03:98:0b:f7:ca:06:20:d0:50:5b:3d:c8:02:39:f1:
18:4c:48:c7:5e:f0:39:12:9a:22:c5:37:30:9f:ce:
e3:0f:46:ec:95:f7:3f:49:64:18:2a:d1:1a:67:b1:
de:e0:c2:6b:ef:8b:45:47:91:2c:9d:91:d2:52:e7:
51:c1:1d:26:60:1b:25:78:3c:78:64:e7:dc:5a:b9:
9f:6e:cc:22:d3:b7:6d:10:0b:9c:01:0d:c2:91:b0:
a3:28:a5:84:c4:9f:07:d6:9b:78:33:58:41:b0:4d:
7d:18:7d:11:08:7e:fc:7a:32:1b:38:7d:6c:d8:4c:
62:2e:6e:24:11:3d:62:20:d5:3d:97:9b:39:7c:7d:
8a:91:6e:c0:af:82:1c:37:f9:1a:30:01:29:c1:ef:
04:f7:a1:49:9a:fa:32:3f:27:4f:3e:fb:6f:2b:fd:
38:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:09:75:A4:3B:F5:EA:86:A6:40:7C:B5:CF:49:6F:40:89:5C:37:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B34D677A9F7D11EF929E2342762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.16.0/21
Signature Algorithm: sha256WithRSAEncryption
14:cb:4d:a8:69:d4:75:c8:41:db:4a:b5:0d:20:1f:69:a3:a8:
22:4f:fb:6f:01:69:f0:5c:12:3c:65:b1:5f:a1:0c:b4:a0:d7:
c1:cc:17:38:fc:26:8a:76:85:e2:13:88:fe:1a:27:f2:61:f7:
d3:ed:4b:85:25:ea:8b:5d:a3:9f:8d:ad:13:6a:d3:4e:10:1f:
3c:b8:20:c4:37:74:ef:13:db:70:d5:6b:2e:3a:40:7a:af:30:
35:b6:f4:51:d8:f7:12:7d:a5:35:a2:66:00:90:b6:07:4e:78:
e4:09:e7:d5:33:fe:d3:5f:d0:22:9d:04:2f:a8:80:87:6c:79:
6a:c7:cb:08:b2:9f:34:91:75:d9:3b:05:5c:eb:79:c9:b2:33:
43:b3:97:42:36:d3:f3:15:62:21:28:5e:a4:78:a1:93:83:d8:
fa:68:d9:ca:56:40:05:8d:3b:d8:26:fb:da:66:f6:70:f0:2e:
35:8b:f7:2e:a4:e1:aa:98:c6:f2:e2:da:db:7a:a2:d4:c9:c8:
f5:95:d8:25:db:07:28:9f:a4:eb:83:6f:3e:a0:dd:a9:8c:9a:
b8:a1:63:2e:e5:f3:17:69:ed:48:46:a0:91:72:04:6b:c8:ac:
99:4d:91:1b:5a:51:74:55:8e:8f:5e:a5:76:8b:f6:d2:ea:ed:
d1:9a:bd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:45 2024 by rpki-client on console-ams.rpki-client.org