Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C83C34B69B8811EF80A29C58762E951A.roa
File: C83C34B69B8811EF80A29C58762E951A.roa (raw, json)
Hash identifier: sYBFUvEAPJnB0b6OMPkQhg8dP/ymVlbEgrfYRzJxPwY=
Subject key identifier: E7:88:EA:1A:C5:34:16:C7:2D:AA:6E:A8:58:A9:56:C5:33:B3:C3:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CECB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C83C34B69B8811EF80A29C58762E951A.roa
Signing time: Tue 05 Nov 2024 15:15:25 +0000
ROA not before: Tue 05 Nov 2024 15:15:21 +0000
ROA not after: Wed 04 Dec 2024 15:15:21 +0000
asID: 200373
IP address blocks: 156.253.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52939 (0xcecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 15:15:21 2024 GMT
Not After : Dec 4 15:15:21 2024 GMT
Subject: CN=672a368d-6a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:b3:de:9b:b1:c5:6b:8a:be:c9:12:96:e5:
34:09:c6:08:b3:bb:d7:df:c0:57:6e:b2:7d:76:0c:
ff:21:9d:46:89:7c:43:f2:c4:a2:ae:d5:17:d0:7d:
8c:52:e5:db:a2:9f:36:86:de:68:82:95:4d:b4:fc:
e9:a5:b0:fc:43:eb:79:6e:17:7f:5e:2a:36:89:62:
c9:5c:ea:b7:a3:aa:53:e4:0e:2c:59:9b:3a:8b:59:
be:fe:1f:d0:3e:4e:11:4c:8d:a4:fa:96:fe:e4:36:
37:b1:80:7e:43:a1:3a:a3:40:24:0c:21:b0:6b:56:
ec:9c:5d:88:da:89:d9:c5:81:a5:cc:81:a7:23:f4:
65:4a:50:60:ec:a2:85:a6:08:03:16:16:dd:8a:69:
37:6c:05:8d:35:5b:1a:46:3f:99:25:01:38:0b:8c:
42:33:4d:32:f3:d3:bb:0a:c9:36:f4:86:b3:3e:85:
75:dc:15:d8:78:5d:b8:c8:70:46:2f:bf:9f:ad:40:
e9:31:1f:ce:35:e8:f8:26:24:ef:d1:21:e9:0c:bf:
82:4d:50:58:4d:4f:f9:7e:04:86:5e:51:ac:66:77:
f6:33:b3:cb:b1:8d:e9:18:fc:eb:da:60:58:40:bc:
01:eb:c0:53:26:45:73:21:05:1d:6a:23:d6:9d:cc:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:88:EA:1A:C5:34:16:C7:2D:AA:6E:A8:58:A9:56:C5:33:B3:C3:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C83C34B69B8811EF80A29C58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.164.0/22
Signature Algorithm: sha256WithRSAEncryption
55:8d:f9:18:09:1c:81:76:69:5f:87:d7:19:3c:9b:67:d6:70:
38:02:da:a5:15:75:c5:be:c8:94:00:46:c8:c6:8e:05:31:c5:
62:be:2e:1d:18:59:1f:34:00:04:c6:66:fc:47:1a:91:2c:13:
5e:1e:48:90:15:e4:32:b3:23:20:99:64:76:db:08:3d:9f:00:
8d:dc:8b:cc:84:43:08:51:5b:fb:96:2b:bb:87:88:c4:c2:c7:
5e:91:fc:ea:f6:c6:fd:c6:3d:ae:01:7b:50:ee:bf:71:ab:37:
89:07:c3:b1:f2:7e:23:4d:5b:62:cc:9c:06:e6:67:ad:13:dc:
d1:4c:cd:37:72:03:7e:b7:58:24:6d:3c:d0:dd:4c:88:9d:84:
05:ea:8e:ff:29:6c:01:d8:08:c1:21:ba:75:3d:44:6e:fd:61:
c6:0b:3f:93:88:47:a9:cd:10:01:6c:12:0f:d2:f6:2f:2a:06:
8c:a8:bd:a4:4e:91:41:c0:20:b4:0f:39:de:c9:17:e5:54:cf:
a4:c4:a7:70:e1:0f:fc:2a:cd:2d:fc:50:4d:3a:99:3c:bc:6f:
3b:6a:5c:86:d6:c1:81:7b:06:02:3a:f4:60:5d:a5:e4:2e:0f:
01:5e:5c:dc:d3:8b:ee:8e:1f:87:cd:d4:1a:d4:69:35:0c:94:
a0:a9:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:49 2024 by rpki-client on console-ams.rpki-client.org