Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB761D94912111EFB247FF44762E951A.roa
File: BB761D94912111EFB247FF44762E951A.roa (raw, json)
Hash identifier: iDKLWacHeAPXRT+09reUUV8isP6GQqkBNrSWUPkDw30=
Subject key identifier: 10:5D:BA:D7:69:BC:B6:ED:3B:24:33:DA:E0:C2:DE:8B:BE:F0:27:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C7C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB761D94912111EFB247FF44762E951A.roa
Signing time: Wed 23 Oct 2024 09:32:34 +0000
ROA not before: Wed 23 Oct 2024 09:32:30 +0000
ROA not after: Fri 29 Nov 2024 09:32:30 +0000
asID: 203020
IP address blocks: 156.232.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51143 (0xc7c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 09:32:30 2024 GMT
Not After : Nov 29 09:32:30 2024 GMT
Subject: CN=6718c2b2-d138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:b5:df:f2:ab:e2:b5:0d:26:9c:e1:56:f3:
a6:dc:12:70:f2:60:95:c3:7f:9a:71:e5:77:c5:1a:
c1:3d:7c:e9:15:51:5a:b3:09:22:be:ac:8d:3c:3e:
e5:3f:2b:c1:70:6a:d1:ff:60:0f:06:ac:6c:f4:87:
32:9c:1c:d7:f9:40:8f:1e:64:3b:cd:7d:db:c9:53:
3b:31:cf:7c:30:2a:76:06:d1:ba:9c:72:67:cd:11:
69:30:4b:d0:0d:66:e8:12:2d:e4:32:5b:23:4c:a0:
2a:e1:d0:8a:78:ce:cd:e0:1d:0b:86:e2:c5:75:ab:
c8:81:1d:35:08:57:5a:51:5a:36:bf:32:33:f8:90:
84:fb:fb:d7:86:4c:ce:37:c7:51:75:ec:87:bb:c8:
79:11:1f:cd:98:56:10:02:fd:7e:2a:29:f5:aa:ee:
f6:fb:29:de:2d:e0:c7:b4:5f:5e:d9:5b:f9:65:27:
e8:9c:fb:49:b8:e9:f9:39:05:0a:bb:36:1d:cf:79:
e5:19:31:f4:f3:b8:23:35:2c:80:72:60:da:4e:c1:
cc:34:c4:e9:82:f9:01:90:d8:d4:0f:d6:25:0f:a2:
48:92:59:68:18:c3:5d:d9:e0:95:2d:1c:9c:d9:a7:
d3:b1:7f:df:16:13:91:0d:bb:1b:dc:78:b9:7a:2d:
58:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5D:BA:D7:69:BC:B6:ED:3B:24:33:DA:E0:C2:DE:8B:BE:F0:27:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB761D94912111EFB247FF44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.5.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1a:f0:c5:bd:7c:4c:0d:bf:4f:0e:1c:23:7e:ff:a4:58:87:
d5:6c:54:77:52:bb:5c:ca:cb:41:73:0c:4e:97:af:29:5b:1b:
f3:48:4e:a5:d3:38:96:00:c0:49:3a:05:b2:25:fb:03:8b:b3:
e0:31:8f:b2:5e:55:fd:65:48:0b:f2:f0:cb:36:ee:2c:e1:e5:
aa:99:af:3b:78:9e:c1:2e:eb:5c:0a:c9:fb:e7:b4:64:46:9a:
73:de:a4:f6:ad:61:fd:92:e1:85:cf:c2:1c:7f:cd:40:c5:40:
a4:f0:fd:7b:9a:af:ca:68:26:44:85:73:f9:94:3e:a9:65:5b:
51:71:2d:4b:cc:0d:0f:90:5e:d3:9e:6a:3d:9b:9e:95:76:5b:
32:99:dc:74:4d:10:57:48:66:ec:55:ff:90:a6:28:ad:91:c4:
62:04:f5:ed:df:fa:cb:82:0a:21:1c:02:ff:9a:45:4e:af:50:
aa:3b:54:25:da:fc:56:4a:8d:f6:03:91:c0:9c:48:05:c7:fc:
d9:01:4a:fc:de:ee:16:8e:44:bd:51:01:58:1b:bd:ba:c5:b0:
68:9e:05:75:64:62:f2:b0:f0:c0:ef:0e:d0:35:d8:a8:bb:11:
46:a8:0a:1c:90:c3:ee:6a:7e:e6:28:51:72:c6:5f:8d:28:6a:
34:a8:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:45 2024 by rpki-client on console-fra.rpki-client.org