Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5B6120AA0E311EFAD95C68E762E951A.roa
File: D5B6120AA0E311EFAD95C68E762E951A.roa (raw, json)
Hash identifier: uUT1NiUJ+UW81z+C1HSf/ABKYzmIS9ysKnTu4iw6ycA=
Subject key identifier: 9E:21:34:D7:52:4A:0C:8F:F3:88:23:E5:97:68:8E:E2:25:0F:FE:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D1A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5B6120AA0E311EFAD95C68E762E951A.roa
Signing time: Tue 12 Nov 2024 10:49:47 +0000
ROA not before: Tue 12 Nov 2024 10:49:44 +0000
ROA not after: Fri 22 Nov 2024 10:49:44 +0000
asID: 39600
IP address blocks: 156.255.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53673 (0xd1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 10:49:44 2024 GMT
Not After : Nov 22 10:49:44 2024 GMT
Subject: CN=673332cb-f60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:07:2b:b5:f5:21:29:67:67:6d:15:d6:c5:
6c:58:54:06:fd:d0:3e:bf:d6:32:46:2b:fc:b3:54:
df:0c:d0:a0:00:f3:42:0b:bc:18:9d:bc:18:d8:14:
d5:95:35:fd:c1:d0:21:65:6f:bc:e6:7e:32:e6:cd:
7a:93:99:5a:db:01:3c:c6:e8:85:5b:df:8c:2f:60:
bd:6f:c3:9c:54:ed:cc:38:06:80:68:59:db:b5:e4:
b5:c5:c0:3c:7e:af:82:45:43:99:93:28:8a:83:e9:
31:b8:84:db:75:fa:39:e5:08:d8:55:04:e8:4f:a0:
f0:3d:20:e0:c3:46:3c:66:29:28:34:15:b6:6a:72:
21:de:d0:a5:6c:09:a5:50:4b:4c:fb:53:66:46:fe:
88:75:7c:59:6e:75:3f:15:6d:ad:f7:1b:e3:19:fb:
c1:45:c3:99:27:4a:a7:d6:d2:5e:a4:86:34:e7:62:
4b:6f:b1:0f:65:71:68:bc:c4:30:e3:1b:0f:f8:36:
7d:c9:da:90:02:47:29:b3:fd:7a:6a:b3:e7:ea:9b:
05:f2:35:5d:58:c9:d2:72:fa:05:cc:be:ed:58:60:
03:c4:dd:d3:37:74:18:13:4c:be:56:76:7d:6b:88:
ea:3f:fd:59:46:fd:c9:1a:a4:26:75:0b:27:56:16:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:21:34:D7:52:4A:0C:8F:F3:88:23:E5:97:68:8E:E2:25:0F:FE:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5B6120AA0E311EFAD95C68E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.84.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:23:c1:7b:fa:0d:dd:9f:36:98:a5:a4:1c:e2:95:a6:bc:9b:
16:e9:58:b9:24:4b:50:96:a6:d2:66:db:24:b4:71:34:0b:f7:
ca:7e:42:28:3a:2c:79:5f:93:57:02:03:f7:d6:a6:b2:ea:08:
27:de:ba:a9:dc:40:7a:b8:99:48:cf:7d:61:92:15:4b:ed:c2:
da:b9:25:dd:61:2a:f0:c2:d4:89:82:82:a4:23:ba:b3:9d:b9:
e9:28:47:11:fa:8f:9b:99:c1:99:5a:8d:da:9f:e9:05:4e:c5:
1e:0c:8d:18:a8:53:74:e8:a3:10:a1:6f:6b:51:ec:7b:ef:87:
c8:e0:b7:20:af:4e:b3:a1:da:5b:46:62:10:fd:85:0c:22:76:
5a:c5:74:2e:03:19:f6:dd:16:2b:fa:5c:97:11:e0:10:d5:28:
cd:0a:ae:d7:a1:57:8a:36:cd:1f:2f:13:d3:0f:37:b2:9f:80:
b5:2d:5e:94:eb:47:68:49:fe:30:0b:d5:92:15:62:78:49:4d:
9a:9d:5e:64:c1:77:c9:71:f3:9d:d1:3d:e7:a1:bd:ad:74:92:
a8:a1:93:0b:b7:a9:a2:46:13:b1:03:70:da:cd:13:fa:11:98:
db:a3:74:68:ce:49:0e:63:06:07:d6:dc:b9:fe:2e:89:cb:1b:
2b:28:59:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:51 2024 by rpki-client on console-ams.rpki-client.org