Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4738C48A44E11EF89460DBA762E951A.roa
File: C4738C48A44E11EF89460DBA762E951A.roa (raw, json)
Hash identifier: XR/KdTgXhesqgaOzR7IlQbCWfLt5zFGlWLpzP6g0ykk=
Subject key identifier: C0:14:00:B7:4B:43:CB:59:2C:FF:75:5B:5C:17:92:7F:D2:BA:4C:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D3C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4738C48A44E11EF89460DBA762E951A.roa
Signing time: Sat 16 Nov 2024 19:12:48 +0000
ROA not before: Sat 16 Nov 2024 19:12:44 +0000
ROA not after: Mon 25 Nov 2024 19:12:44 +0000
asID: 9009
IP address blocks: 156.238.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54208 (0xd3c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 19:12:44 2024 GMT
Not After : Nov 25 19:12:44 2024 GMT
Subject: CN=6738eeb0-7c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:41:4d:28:36:55:40:37:4d:d0:49:d6:dd:
32:3e:de:a3:d8:88:87:35:05:f7:2f:60:ad:f4:5d:
6d:c9:e6:bd:dd:95:34:3d:e1:b3:c9:f1:09:73:50:
f2:01:92:9d:7f:36:02:60:0b:70:ef:b1:70:d2:5f:
d3:30:77:ad:ec:74:b3:24:6d:2c:97:da:d7:d9:34:
7a:a5:67:ad:de:8d:41:e1:ef:b0:e5:ed:4e:1b:79:
24:5b:ca:dd:e4:a6:00:79:25:d8:d9:ca:8a:d9:b7:
3c:38:50:44:34:af:99:7a:c3:b8:5f:da:7d:ae:00:
f8:b7:e1:34:d5:2f:95:5c:10:d4:5c:9e:4f:7c:9e:
7b:04:ea:5e:97:30:59:4d:50:65:c5:87:ea:1d:17:
2a:70:1c:a7:78:80:c7:e9:20:6e:3c:e4:73:03:65:
35:4c:b0:46:78:bb:b2:ce:c5:2d:3c:45:58:c3:0c:
59:c1:a0:a9:dc:32:90:89:07:9a:28:bc:47:8a:7d:
6b:13:aa:b1:77:c6:46:03:2e:fa:13:c4:20:16:14:
cd:e6:8f:d0:32:c9:1b:cf:58:3c:67:eb:5b:6f:b8:
f2:b8:9e:fe:d1:99:47:fa:f0:c4:0a:69:c0:bc:d0:
ea:00:97:9f:7e:4c:7f:58:13:96:22:c3:d6:a4:7b:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:14:00:B7:4B:43:CB:59:2C:FF:75:5B:5C:17:92:7F:D2:BA:4C:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C4738C48A44E11EF89460DBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.8.0/23
Signature Algorithm: sha256WithRSAEncryption
82:67:9a:1d:86:de:49:04:ac:37:4b:44:02:95:01:8a:bc:3e:
03:9b:e5:c6:38:0f:ab:cb:93:be:7f:56:12:bc:6e:e8:7e:f1:
b4:f1:f3:f9:db:8a:28:9f:c9:1b:ee:e7:e7:06:db:83:b5:f8:
fd:d1:92:b9:d3:7f:99:f6:48:9a:e7:53:2f:08:28:9d:4c:bb:
b2:33:5e:27:33:eb:ab:81:00:13:08:3c:50:5d:f1:ac:98:45:
ff:f7:f5:8b:e8:0c:21:d4:75:91:f3:11:e0:b1:de:ce:df:74:
1a:e0:ea:e0:85:f0:66:6c:55:28:1e:28:37:45:57:c4:57:1e:
6c:5c:f3:ce:b8:1a:42:3a:f6:1f:2c:24:6b:66:71:2b:eb:7c:
cf:20:19:55:7b:75:74:6c:ce:2f:3b:88:d6:9b:2d:f0:8f:a8:
88:81:79:90:3b:b8:79:60:80:63:6e:c9:7e:28:7e:07:6d:45:
96:81:73:d8:7c:8b:e6:c5:12:0d:89:f7:9d:05:50:af:fc:95:
bc:f8:19:c3:9c:6a:2c:21:ec:ac:7f:e4:9c:f6:4d:ac:4a:c1:
83:0e:f2:6c:76:79:1c:ac:74:50:30:4f:ae:1f:54:7f:dd:32:
de:cb:69:1f:7f:c5:4e:e0:82:bd:8b:02:02:b5:0a:cf:73:46:
d8:57:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:48 2024 by rpki-client on console-ams.rpki-client.org