Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0B020E008FD11EF9C862C32017001B1.roa
File: C0B020E008FD11EF9C862C32017001B1.roa (raw, json)
Hash identifier: 6AglpRRbWJ6CxqSMHlIQ+sFBuZ80VGvplOEoafCKfN8=
Subject key identifier: 40:97:19:5C:56:C6:D2:96:A2:18:33:0B:39:14:58:87:DD:61:53:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8771
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0B020E008FD11EF9C862C32017001B1.roa
Signing time: Fri 03 May 2024 03:32:23 +0000
ROA not before: Fri 03 May 2024 03:32:19 +0000
ROA not after: Fri 02 May 2025 03:32:19 +0000
asID: 21859
IP address blocks: 156.231.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34673 (0x8771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 03:32:19 2024 GMT
Not After : May 2 03:32:19 2025 GMT
Subject: CN=66345ac6-faaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:28:a8:30:9d:ca:09:b0:fe:68:f9:53:6a:
37:cf:31:f3:4e:60:82:45:ba:89:e3:1a:26:cf:43:
41:53:df:4c:e2:dd:03:77:eb:05:78:54:64:7b:e8:
4f:55:5d:bf:ac:1c:21:3f:a8:6f:10:0d:6a:0f:7c:
f7:7a:40:48:d2:ed:97:be:c5:d8:98:5a:85:81:8c:
ad:fb:a7:c5:c6:f9:22:b4:51:9d:69:99:67:54:14:
9f:58:4e:a8:e2:fa:b7:31:1c:98:3b:06:2a:09:da:
80:73:ba:9e:47:f5:8d:27:91:4f:ff:f4:e8:3d:86:
ac:20:b7:11:38:77:f5:71:5c:a7:4f:54:cc:ca:37:
80:f8:d2:bb:2e:17:23:88:e8:7a:71:20:ec:84:e0:
c8:ce:0a:18:78:1d:a8:b6:13:68:cd:9b:37:f2:22:
d3:4c:52:3a:96:87:24:0b:54:de:60:42:e0:04:cd:
6f:07:5c:47:57:29:32:a1:f8:0b:a0:95:89:9c:fa:
16:8e:c5:8e:30:2b:2a:5a:63:4b:ba:0a:77:36:8a:
cb:25:a9:2e:11:59:3d:a4:5b:5f:61:cf:46:15:b5:
52:79:30:45:ca:97:a7:44:c1:c6:ce:51:1f:6f:2c:
34:40:f0:6d:a2:a4:0c:54:33:bc:d4:1b:6b:8f:21:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:97:19:5C:56:C6:D2:96:A2:18:33:0B:39:14:58:87:DD:61:53:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0B020E008FD11EF9C862C32017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.84.0/22
Signature Algorithm: sha256WithRSAEncryption
42:69:fe:cc:39:18:9d:76:b5:95:7f:3d:e3:e3:5f:f2:68:60:
25:5e:bf:b8:64:ec:33:20:1e:f4:42:04:be:a3:1c:1e:a2:34:
bb:ad:7b:8c:50:a7:ea:ba:35:aa:83:98:37:1c:96:11:16:fd:
4b:a3:96:ef:60:36:65:97:24:96:d6:7c:96:7d:ea:f9:6b:a1:
13:a1:77:97:cf:b7:dd:44:79:da:1b:08:92:68:36:91:85:09:
58:bb:ba:01:b9:7b:37:52:4b:75:a9:66:6b:e7:c5:c2:b3:e9:
2a:dc:69:e1:1f:e5:cc:94:14:4d:ed:f4:e6:c7:04:a8:b6:1e:
30:64:2b:f8:a0:74:4a:4f:b0:44:0b:04:65:85:2b:22:fa:2b:
6c:93:d8:40:d4:35:6f:b3:5a:21:86:7f:53:7b:5f:fa:38:18:
c6:9e:8e:78:47:6f:06:ea:87:1e:a7:20:23:a7:7f:ea:8c:87:
2e:74:1b:79:d2:96:bb:2b:3f:c8:49:f4:23:7f:4d:cc:dc:6c:
f1:5e:35:fa:8b:a7:1f:14:a2:d8:d4:64:8e:d7:e8:a3:71:98:
b5:03:bc:3a:44:69:71:7a:91:8e:3f:11:42:60:0e:74:26:12:
82:0e:90:71:4e:cb:7f:aa:5f:e4:74:a7:ef:0a:a1:a4:3f:b1:
6c:44:6d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:46 2024 by rpki-client on console-fra.rpki-client.org