Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBB773CCA64F11EFADCA365C762E951A.roa
File: CBB773CCA64F11EFADCA365C762E951A.roa (raw, json)
Hash identifier: RdnI867iqkZaWXwN1gPYH8+TzF7XRlYxNqCyt6PYA8A=
Subject key identifier: B5:00:B1:6C:7E:C0:BB:61:84:D4:0E:02:47:70:2D:4A:57:3F:1D:2B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D578
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBB773CCA64F11EFADCA365C762E951A.roa
Signing time: Tue 19 Nov 2024 08:25:12 +0000
ROA not before: Tue 19 Nov 2024 08:25:09 +0000
ROA not after: Sat 23 Nov 2024 08:25:09 +0000
asID: 149014
IP address blocks: 156.236.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54648 (0xd578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 08:25:09 2024 GMT
Not After : Nov 23 08:25:09 2024 GMT
Subject: CN=673c4b68-b556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:24:8d:cc:1d:34:33:c9:d5:31:4a:9a:9a:
0a:4e:3d:80:2c:37:f9:3b:5b:7b:4b:f7:10:ca:a3:
eb:17:ba:c2:85:73:59:41:c0:2b:f4:e4:b2:1c:b1:
32:23:8b:49:d8:04:24:dd:30:fe:19:e2:7d:81:d0:
0c:e6:92:24:01:e0:f4:88:06:f7:d4:c9:8c:50:4f:
27:ff:16:c1:54:ef:b1:3d:7c:83:e3:d6:6b:3d:90:
29:da:aa:93:d0:5c:67:42:0e:e7:aa:99:47:4f:ca:
62:9d:04:61:79:b3:1e:6b:b0:94:60:1c:bf:41:8b:
75:f2:cc:e6:b6:69:b2:fa:af:22:c0:92:6d:07:3c:
67:7b:4d:16:b6:fa:05:d0:9f:00:67:9a:5b:88:23:
a8:33:6b:34:39:ff:71:2b:6d:34:5d:c9:54:74:05:
05:e8:52:3b:4b:71:89:dd:a3:4c:e7:22:62:62:bc:
2d:6b:d9:de:c0:26:a5:48:79:3e:31:d5:42:d0:4c:
6e:31:6a:1f:84:ff:b5:5d:ff:59:bf:16:b5:2c:0b:
b6:83:93:9e:1a:6d:ff:94:b9:42:bc:ab:c5:af:dd:
6c:91:b4:71:24:d4:14:7a:61:68:e1:da:97:91:42:
61:c1:fd:6a:e4:7a:e9:74:6a:ab:bf:de:22:ef:54:
77:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:00:B1:6C:7E:C0:BB:61:84:D4:0E:02:47:70:2D:4A:57:3F:1D:2B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBB773CCA64F11EFADCA365C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.116.0/22
Signature Algorithm: sha256WithRSAEncryption
06:a9:a6:bb:61:62:4d:02:67:f3:c3:33:52:0a:6e:be:9d:ca:
4f:09:e3:50:af:54:e5:aa:36:6a:eb:cd:8f:fb:6e:6a:25:e4:
2a:4c:24:28:7e:54:b6:20:28:3a:e8:6b:cd:5d:35:4c:4c:4d:
22:88:7d:92:9e:77:b8:df:81:e7:ed:ed:9e:40:cd:eb:08:97:
de:eb:c4:be:39:7c:ac:3e:17:0b:a6:ec:69:26:05:df:1e:54:
6f:8a:54:92:a8:f9:3e:a9:5f:d5:3d:d5:aa:9e:96:1c:7b:67:
98:fc:e1:f7:7a:c2:a5:df:02:6e:79:52:aa:a5:67:ec:07:da:
ca:24:9b:ba:5e:45:9e:d0:d2:78:04:6f:d8:08:e2:2e:86:e7:
33:0b:2c:0c:ff:e0:d0:ac:ac:25:d1:c0:4e:90:bc:15:e4:d8:
d7:20:c6:05:cf:b1:25:28:1b:dd:1f:f0:01:31:48:d0:59:0c:
0c:7f:bf:90:41:cb:8f:93:24:58:3c:d4:71:88:3f:fc:20:5f:
4c:5d:13:d9:0f:21:15:b4:51:25:0d:d1:ec:49:f4:81:59:93:
86:91:8c:86:23:22:9a:b8:f8:1c:6b:65:ae:32:39:22:67:d9:
42:f7:2e:2f:5d:1b:b6:14:04:e1:e0:63:6e:e5:91:a5:b7:f1:
87:ad:44:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:50 2024 by rpki-client on console-ams.rpki-client.org