Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9CADFF06AA411EF90D82382762E951A.roa
File: B9CADFF06AA411EF90D82382762E951A.roa (raw, json)
Hash identifier: Y3PnfJto6f32Mt7WW+00z9kErxI79MFhFwYahA8f/n4=
Subject key identifier: AE:A4:A3:EE:CE:F5:8F:57:AB:67:56:C3:FA:0B:89:0C:DB:86:77:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B1CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9CADFF06AA411EF90D82382762E951A.roa
Signing time: Wed 04 Sep 2024 10:02:00 +0000
ROA not before: Wed 04 Sep 2024 10:01:56 +0000
ROA not after: Thu 24 Apr 2025 10:01:56 +0000
asID: 63888
IP address blocks: 156.255.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45519 (0xb1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 4 10:01:56 2024 GMT
Not After : Apr 24 10:01:56 2025 GMT
Subject: CN=66d83018-d86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:c8:69:7a:dd:be:72:f9:67:10:19:c5:da:
a0:c3:0a:91:33:3f:e6:d5:12:97:21:f7:af:89:9c:
17:2a:96:6b:f6:07:09:f6:eb:0b:81:45:b9:5a:d1:
32:f7:61:09:ff:27:dc:42:14:ad:a4:73:2a:39:03:
77:b9:3b:7c:e5:52:df:d3:68:8d:d1:de:ac:3e:78:
08:bd:72:c1:da:2b:05:be:83:1f:e4:06:2b:94:db:
ae:0c:53:23:b5:6c:4c:22:6a:59:b7:59:a3:a5:e9:
40:1d:d7:6d:38:fb:94:a5:af:c0:2a:97:76:37:d6:
b3:4a:61:6d:9b:8c:43:6d:2d:88:10:cf:2c:71:a6:
52:fa:ed:b5:a2:55:13:03:f4:05:bb:e1:5c:31:58:
f2:e5:a4:e8:c9:89:e7:e3:cb:e5:68:74:85:5f:f3:
80:b4:07:80:7a:47:3b:2e:f2:13:6b:1f:bc:2f:8c:
a8:de:19:35:98:65:b9:c9:03:54:42:60:c2:bb:20:
76:63:c4:6d:14:79:95:55:99:da:f6:e4:93:ed:9c:
81:8e:93:7e:cf:f1:12:20:33:f9:5c:66:b5:88:21:
a1:51:04:7a:0e:8e:67:ce:87:12:6e:cf:29:af:d5:
a0:97:61:39:3a:41:47:b5:d9:b9:2f:2e:8b:cf:ec:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A4:A3:EE:CE:F5:8F:57:AB:67:56:C3:FA:0B:89:0C:DB:86:77:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9CADFF06AA411EF90D82382762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.112.0/22
Signature Algorithm: sha256WithRSAEncryption
53:b9:bb:97:bf:5d:0e:8f:84:7f:7b:a6:2c:5c:2d:c4:19:00:
86:41:47:81:64:44:58:c9:41:eb:58:f0:f7:d1:77:bb:b7:f2:
40:e3:59:08:a5:54:d7:a7:3c:eb:49:49:54:19:c1:11:29:53:
4d:2c:f9:f3:9c:e2:60:a8:58:ce:2f:42:24:bc:7e:f6:5a:01:
88:f7:4b:9f:a4:bb:c8:7b:6f:6f:7f:c2:e9:8d:7a:ba:5f:79:
98:32:ff:a9:d6:6b:69:f9:f6:ab:5a:d0:62:97:50:db:ef:ac:
ca:ed:fe:4d:00:fd:4f:67:de:38:ca:26:c9:d0:a0:47:60:ac:
d7:50:09:88:86:eb:a1:8e:47:57:f0:19:6e:8f:ed:d2:fd:3e:
df:ae:53:45:7d:96:f1:29:23:0e:4b:ed:95:2a:56:0a:7a:f6:
7e:e1:90:80:48:b5:b6:1e:54:ee:62:49:c6:94:98:cc:c0:6c:
2c:74:6c:81:cd:56:24:da:d1:60:a8:3b:9f:80:63:58:1e:85:
26:9e:77:5e:f0:be:3b:28:c6:93:2e:8f:9e:51:a9:58:17:c3:
08:ae:7b:0f:7e:03:88:4f:da:4e:9c:9d:f2:95:32:a5:10:53:
4a:1a:98:07:1f:9d:6c:4f:fc:fa:78:80:6c:23:60:fc:1c:01:
97:70:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:46 2024 by rpki-client on console-ams.rpki-client.org