Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C90D6F0886F811EF94B21EA3762E951A.roa
File: C90D6F0886F811EF94B21EA3762E951A.roa (raw, json)
Hash identifier: SXT3BLRZrJ2o/bcRbULBo/Qo/0Uc6CxtgErpUzmURuQ=
Subject key identifier: 55:B9:71:E9:58:2F:00:39:77:03:34:AE:58:1E:C2:4B:F3:2C:73:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C2E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C90D6F0886F811EF94B21EA3762E951A.roa
Signing time: Thu 10 Oct 2024 11:14:16 +0000
ROA not before: Thu 10 Oct 2024 11:14:12 +0000
ROA not after: Fri 20 Dec 2024 11:14:12 +0000
asID: 135097
IP address blocks: 156.250.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49897 (0xc2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 11:14:12 2024 GMT
Not After : Dec 20 11:14:12 2024 GMT
Subject: CN=6707b707-94ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a8:c9:b9:8f:cf:b4:bd:42:4e:0e:7a:c2:4f:
70:ff:20:32:e0:a3:03:17:02:8a:17:c1:bd:72:f9:
6f:ed:1c:67:ef:66:ee:26:5a:88:02:86:21:d7:dc:
49:8c:d1:3e:96:8c:d3:03:7e:bd:18:11:d1:99:2e:
18:63:e5:f9:51:c6:d2:cb:89:c8:38:e6:9f:0e:ed:
d6:27:d1:18:27:5c:43:9f:78:9a:1f:14:25:69:7c:
f5:91:5d:1f:8f:8a:4f:25:52:11:33:0f:77:17:56:
71:df:58:90:63:46:e0:76:0f:c6:29:1a:71:96:e2:
19:e8:81:36:f9:64:76:63:e3:1d:10:cd:25:61:4c:
d8:a0:8b:c8:39:c3:e0:97:d0:70:53:ff:aa:36:33:
65:15:22:73:2e:c2:1b:96:df:7a:f6:b1:69:c9:b6:
e3:87:d2:97:bc:64:33:8a:1b:b1:b8:79:6f:de:ea:
dd:18:2a:ef:3f:78:11:2d:16:f3:fc:b9:8b:0f:f4:
2a:97:8d:8b:fd:76:ad:b7:bd:ca:67:76:ba:b2:1d:
90:fd:c5:be:b2:6b:f2:dd:a5:77:97:9a:2a:45:89:
ed:20:24:8b:1c:82:ce:0e:10:b6:25:65:ad:80:2f:
87:c0:bc:f2:b1:be:12:1c:0c:f3:75:85:45:65:af:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B9:71:E9:58:2F:00:39:77:03:34:AE:58:1E:C2:4B:F3:2C:73:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C90D6F0886F811EF94B21EA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.4.0/22
Signature Algorithm: sha256WithRSAEncryption
86:e8:08:0e:4a:16:87:b4:0e:da:a0:dc:7f:6c:c5:49:87:e5:
9c:b3:18:13:ab:af:d7:0d:da:88:04:25:a4:c8:b5:78:4e:58:
23:0d:11:f5:56:9e:d6:1f:cd:37:ee:d3:89:f5:d7:9d:3d:73:
46:db:12:cb:be:f9:b2:29:40:f9:c4:2c:87:04:52:89:3c:37:
64:ef:7b:1c:6b:73:35:64:6c:c9:83:47:67:49:02:cd:27:64:
82:08:2a:1e:b7:7e:f2:ac:05:60:d2:05:68:1f:96:24:1f:05:
52:b7:97:a7:38:09:87:c5:9d:26:07:49:ca:8c:1c:c2:2a:f8:
1a:27:86:5d:85:f6:8e:ea:08:a7:03:db:0f:44:bf:da:ff:ff:
40:1a:a2:32:11:f3:dd:93:03:b7:a4:a6:2a:9d:3b:5b:e4:34:
3b:a8:a9:0c:e1:98:8d:14:32:d5:71:bc:35:9b:a2:16:4c:6e:
fc:9b:7d:f8:d9:fb:08:b7:3e:30:b3:a5:4c:fe:d5:4c:21:ee:
12:13:c5:35:78:3a:3b:72:b0:3d:fc:f5:48:d9:2f:7e:35:02:
51:c6:e0:a2:31:d7:6f:5f:d1:84:66:a5:2e:0b:73:f5:9b:7c:
4d:fb:54:f7:c4:9f:fe:60:52:da:ad:6f:2d:e6:50:fe:cb:b8:
a5:2c:7b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:49 2024 by rpki-client on console-ams.rpki-client.org