Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C64F5B2892B011EF90A7B094762E951A.roa
File: C64F5B2892B011EF90A7B094762E951A.roa (raw, json)
Hash identifier: 59CUwbro/MWm5Q6ICZLryAK2HtqSeuchRIWDfDXVtYM=
Subject key identifier: 52:43:6D:D3:15:14:CE:4B:B3:F3:51:25:66:09:8A:53:54:8A:D1:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C8CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C64F5B2892B011EF90A7B094762E951A.roa
Signing time: Fri 25 Oct 2024 09:09:01 +0000
ROA not before: Fri 25 Oct 2024 09:08:57 +0000
ROA not after: Mon 25 Nov 2024 09:08:57 +0000
asID: 5068
IP address blocks: 156.224.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51405 (0xc8cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 25 09:08:57 2024 GMT
Not After : Nov 25 09:08:57 2024 GMT
Subject: CN=671b602d-ea8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:a0:47:63:9c:9a:80:39:98:ba:7a:60:b5:
92:36:63:0d:82:12:00:2c:f2:67:64:b9:5f:e0:78:
3c:8a:c4:48:ef:06:c4:74:e2:66:ad:71:f4:25:06:
db:46:1c:1d:e8:47:4b:0e:53:ac:62:1d:d0:64:78:
29:ba:a6:1f:79:10:22:69:59:ec:cc:2e:e6:40:c0:
55:8b:55:d2:c8:f1:00:1a:ef:c9:3a:e9:7c:2e:42:
6a:f6:e4:06:75:86:3c:3a:dd:b7:38:2b:7a:a3:be:
03:16:f8:cb:66:e4:77:5a:9c:34:1e:fe:5c:9b:0f:
d1:fb:8c:da:17:0d:dc:f3:9c:de:1b:6b:d7:93:20:
ee:fc:98:39:1e:03:9c:56:14:bb:1d:bf:e4:11:38:
95:5c:71:ac:f2:ea:07:be:df:57:b2:b7:84:68:d0:
c6:45:d4:de:d0:0c:ff:8c:cd:9c:54:05:1d:04:72:
77:8b:23:36:f3:a7:e3:3f:36:03:94:4e:77:93:7f:
16:a7:f4:ac:94:fa:81:b7:39:55:7c:a8:8e:93:aa:
d2:48:fd:35:7e:27:3b:5f:95:aa:a3:24:57:77:59:
6b:ec:53:1d:6d:cf:60:b6:ea:26:dd:11:ac:4f:26:
83:e8:b0:50:3f:c5:88:f7:0e:a5:8d:63:70:b9:89:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:43:6D:D3:15:14:CE:4B:B3:F3:51:25:66:09:8A:53:54:8A:D1:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C64F5B2892B011EF90A7B094762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.96.0/19
Signature Algorithm: sha256WithRSAEncryption
70:ca:9c:f9:8e:18:19:c6:40:c6:25:f7:12:53:e0:88:50:88:
0f:81:1b:9d:27:f6:13:82:b8:3a:8d:d2:ef:8d:3f:6d:0f:a2:
5a:7a:65:81:cb:be:c3:fb:4d:d9:a1:b4:65:52:8e:64:b8:f2:
37:4b:4a:c8:13:30:f4:c3:10:9d:fd:cc:0e:b7:c5:13:5d:e5:
a3:60:2c:cb:8f:af:d2:5d:e3:dc:0a:e8:12:ce:89:78:88:da:
f9:08:95:0f:c0:a9:db:39:45:c5:f5:c5:23:b8:ad:9f:10:b2:
2b:7b:62:35:36:9c:ae:3f:1a:61:89:ca:c3:b3:ef:18:3f:4f:
19:bc:cb:d6:05:52:2e:a1:89:c8:f6:83:70:93:5c:8f:5b:51:
e7:d5:5c:c7:46:42:1a:e2:a4:51:f1:51:81:03:fa:c2:63:f7:
97:69:6a:77:c5:a6:65:7c:3d:01:18:28:1d:16:20:1f:2a:81:
18:6f:50:51:0d:ca:8a:75:b8:e9:59:66:b6:a2:85:9e:16:d3:
7e:ea:5e:c4:03:62:3c:78:0d:f3:7b:68:94:2e:b1:ed:e0:4f:
0d:4e:2c:95:e5:63:1a:de:27:b1:84:90:7f:d7:b6:1b:9c:06:
c9:fd:a9:90:71:9e:dc:80:d7:f5:bb:d5:31:86:3b:62:56:78:
71:b5:29:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:49 2024 by rpki-client on console-ams.rpki-client.org