Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C838AE950E11EF8D57627E762E951A.roa
File: C5C838AE950E11EF8D57627E762E951A.roa (raw, json)
Hash identifier: iYSjloTnr5lRz3EZvOnbpglMgLlebAWD2JOU4m9FiCc=
Subject key identifier: 09:E4:89:C4:AD:AE:E2:73:88:39:F8:55:40:1D:04:E1:21:68:45:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C928
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C838AE950E11EF8D57627E762E951A.roa
Signing time: Mon 28 Oct 2024 09:26:56 +0000
ROA not before: Mon 28 Oct 2024 09:26:52 +0000
ROA not after: Sat 30 Nov 2024 09:26:52 +0000
asID: 14713
IP address blocks: 156.229.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51496 (0xc928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 09:26:52 2024 GMT
Not After : Nov 30 09:26:52 2024 GMT
Subject: CN=671f58e0-4b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:da:f6:43:ab:4c:57:fe:6a:f5:94:24:9b:
3b:e0:31:7e:d7:ab:37:85:9b:ec:13:c0:f7:86:e9:
2b:27:f3:10:23:a9:62:bc:1f:c4:26:ef:89:d2:a6:
2a:82:d8:0c:18:c3:78:cf:61:8f:ba:59:55:be:ed:
19:a3:58:e2:9f:6b:f6:ec:99:ac:db:7f:b0:75:df:
0c:0b:a2:e3:cc:b5:b1:ba:c2:77:bc:28:cd:7e:1c:
33:67:29:1d:17:5a:dc:21:58:a1:05:0d:e6:30:5f:
5f:ad:67:78:ab:e8:96:a9:1f:6e:88:52:83:10:dd:
1c:dc:cf:c3:fa:c4:c1:36:25:e9:ff:31:81:02:67:
44:0b:bd:a2:d3:56:cc:94:d4:e1:5a:8c:c0:c0:2e:
46:5b:7e:62:2e:95:dd:a9:64:34:37:ba:07:c1:d7:
75:58:e7:6e:71:bb:cd:fa:92:15:75:2b:53:8b:22:
55:35:96:c5:43:15:be:95:5a:c0:87:d5:89:7d:ed:
38:ca:55:b0:c9:76:76:e4:c6:f3:4a:d9:49:07:e4:
35:b2:84:82:60:b2:db:73:c2:33:7f:74:b4:94:68:
c9:07:e2:a7:e7:49:53:6b:42:a9:2b:8a:43:27:db:
4f:9c:a4:26:b1:22:1f:e5:99:76:df:05:43:bd:6e:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E4:89:C4:AD:AE:E2:73:88:39:F8:55:40:1D:04:E1:21:68:45:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5C838AE950E11EF8D57627E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.128.0/20
Signature Algorithm: sha256WithRSAEncryption
02:15:29:33:76:e4:3f:8f:bd:d3:d7:1a:61:d9:44:d5:ee:68:
37:a7:2e:e2:d9:0f:08:ad:24:18:76:86:73:08:e1:a4:2f:73:
9c:c8:f0:d0:3a:2c:69:35:7f:94:05:d4:de:e1:a0:2e:57:ef:
b5:4d:5b:b1:aa:bc:83:91:dc:1e:af:12:a4:e5:48:f2:44:c3:
bc:0d:fc:91:b3:7b:f6:ea:3b:bb:39:23:ca:9c:bb:96:07:95:
12:04:c7:6f:41:f3:88:34:10:83:b2:89:7a:ff:e3:75:3c:19:
78:6c:29:63:4e:5d:bc:d9:da:50:ee:f4:f3:5d:09:c5:a4:d7:
11:21:53:ec:bc:b0:7f:81:ec:e5:d1:a7:a3:30:5a:ff:85:6d:
e1:e8:4c:c1:85:74:24:98:b1:22:f8:6e:d7:71:40:5f:5c:47:
80:36:c3:c6:b3:ba:4b:65:d3:92:62:7d:ee:df:3b:40:43:cf:
df:25:47:85:d1:3a:c0:70:cd:5c:36:b7:de:07:a4:a7:43:81:
30:94:47:8d:73:ed:78:89:ce:42:66:26:c0:a8:bf:de:40:5d:
8f:b9:70:f6:b6:23:51:66:f2:8a:87:31:c4:b5:92:11:0e:62:
2f:e6:f9:9c:f9:cc:dd:27:6e:0b:1e:0f:97:b1:5d:8c:d6:ac:
b3:a5:4e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:49 2024 by rpki-client on console-ams.rpki-client.org