Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B93DC660A19011EF8F10837E762E951A.roa
File: B93DC660A19011EF8F10837E762E951A.roa (raw, json)
Hash identifier: k8Cd8z+nktBpVYBPHtPOmUBrwnZAlwE35lMlR6Vt4M8=
Subject key identifier: DE:D2:42:68:CB:9A:BF:DC:34:D1:22:00:28:8D:7A:8E:C6:DC:62:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D226
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B93DC660A19011EF8F10837E762E951A.roa
Signing time: Wed 13 Nov 2024 07:27:23 +0000
ROA not before: Wed 13 Nov 2024 07:27:19 +0000
ROA not after: Sun 15 Dec 2024 07:27:19 +0000
asID: 273478
IP address blocks: 156.232.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53798 (0xd226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 13 07:27:19 2024 GMT
Not After : Dec 15 07:27:19 2024 GMT
Subject: CN=673454db-1ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:58:63:d2:91:9e:7c:9b:a0:50:85:43:d6:
09:0c:25:da:6c:54:73:25:92:a8:cc:ee:d0:d9:df:
37:dd:fd:ef:fe:59:e0:ef:e4:5d:f2:b1:54:6b:c6:
20:60:d3:b5:50:44:67:0f:ea:a4:7b:03:45:36:af:
60:20:dc:76:6c:10:a8:41:61:44:83:84:e2:a2:f1:
42:9e:0a:88:34:93:77:97:aa:1b:4d:fb:b5:bc:8a:
8c:8c:88:bc:18:57:f8:18:7f:91:cc:c2:79:04:3b:
21:b3:19:da:bf:58:a4:d6:ab:38:65:c5:8b:e0:0d:
54:ed:ff:c0:a1:f6:61:18:2b:9f:d3:f7:ad:cb:bf:
d2:1a:af:d6:a1:3b:32:00:a4:c4:a0:43:7f:f5:45:
e6:51:80:a6:77:4c:d7:95:6f:7d:aa:8f:b6:72:82:
3c:2e:6d:ff:82:97:6a:2f:10:22:2f:a8:b4:8a:37:
0f:ac:75:fc:b9:75:ad:aa:85:4b:6e:06:e1:31:90:
3b:36:68:4a:a2:0a:a9:a7:20:07:32:27:45:38:a1:
0e:87:c4:80:d7:29:5d:51:94:c4:38:ec:9f:b4:26:
f6:14:d1:28:b3:c2:15:2c:7b:97:59:e7:bd:5b:02:
80:cb:2d:0d:b5:a5:48:9c:16:9e:b0:3b:70:9a:3d:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D2:42:68:CB:9A:BF:DC:34:D1:22:00:28:8D:7A:8E:C6:DC:62:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B93DC660A19011EF8F10837E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d3:88:95:e3:41:db:8d:96:fe:60:b3:33:91:ec:bd:07:d5:
a4:b0:d6:15:14:ae:bf:e0:12:ae:aa:2d:49:5d:5f:71:1c:43:
4f:b6:45:9d:e5:ed:8d:4d:02:2d:c2:cc:76:07:75:7a:0e:8a:
c4:bc:af:64:63:00:b1:2d:6a:2d:eb:50:82:52:18:10:75:ec:
d6:95:82:3f:87:2c:7e:aa:b6:d8:8f:2c:02:db:47:2a:0e:cf:
45:91:af:be:69:f3:1e:ca:dc:85:c5:26:4d:64:68:75:4b:57:
09:33:5a:8b:63:71:87:bf:19:f9:4e:e1:44:d7:9f:0c:b0:6a:
01:c4:d4:a1:ec:e8:a1:6a:75:f5:e0:cc:a0:98:f9:4d:53:cc:
c7:d8:0a:4b:41:42:6a:91:e6:be:8b:b8:f5:ae:71:8d:39:e3:
83:0b:d3:ca:56:65:8c:19:ba:75:5c:e2:a0:e2:91:ed:96:0f:
fb:f2:1a:2f:93:10:72:a3:76:60:76:ab:04:59:2a:29:12:d4:
69:54:6e:3d:69:dd:e1:b8:ba:0c:10:33:59:66:8d:ec:08:8b:
04:09:25:49:69:45:61:5c:cd:df:e2:d2:c2:f0:37:ce:4c:c4:
9d:e3:78:6a:b2:9d:6d:79:bf:87:30:4f:9a:78:ef:a4:b1:7e:
3c:cd:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:45 2024 by rpki-client on console-fra.rpki-client.org