Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDB49B00A33811EFB0E2D876762E951A.roa
File: DDB49B00A33811EFB0E2D876762E951A.roa (raw, json)
Hash identifier: lkxdy8QRC7Hho510er7+FmLWjKdKsuKO9+TvJGPNeLA=
Subject key identifier: 02:86:C5:D5:13:D7:97:14:87:73:CD:E7:87:5A:FD:CC:45:9C:4A:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D31F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDB49B00A33811EFB0E2D876762E951A.roa
Signing time: Fri 15 Nov 2024 10:03:30 +0000
ROA not before: Fri 15 Nov 2024 10:03:27 +0000
ROA not after: Sat 23 Nov 2024 10:03:27 +0000
asID: 142062
IP address blocks: 156.238.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54047 (0xd31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 15 10:03:27 2024 GMT
Not After : Nov 23 10:03:27 2024 GMT
Subject: CN=67371c72-94c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:46:a8:cd:d8:4a:7a:6f:b3:5d:9a:f9:68:
0c:45:c0:31:67:63:7f:52:88:56:f0:1a:f6:b7:6b:
da:51:82:5e:29:44:94:8e:e9:5b:6b:26:97:37:b1:
8b:3c:4a:cd:27:0c:49:ac:00:3f:55:09:1f:87:26:
d4:56:89:19:e0:09:ed:12:cf:98:e6:f8:8b:8a:5a:
17:0a:5a:e2:f9:5c:6a:9d:86:13:c4:bf:5a:1a:c4:
35:38:a2:38:45:a8:e2:4d:93:88:d3:d4:62:22:0d:
ef:43:fb:5b:57:2a:35:dc:ab:59:c3:7a:ed:51:d4:
8b:af:2e:66:25:97:45:85:12:08:36:a0:41:a1:67:
50:9f:f0:38:23:c7:24:42:63:96:62:84:cd:dc:30:
2a:fd:9f:f6:dd:97:a7:fc:25:ee:e5:50:3f:6f:d7:
66:3f:46:83:3f:d3:82:7a:65:2b:e8:85:15:c6:ec:
47:1b:49:ed:d8:ec:b3:7e:12:84:25:3a:e0:f9:c0:
71:a2:1f:49:67:c6:ca:39:ba:de:e8:71:c7:ee:74:
58:ff:dc:46:55:31:77:6d:8b:34:1a:8f:0e:94:63:
9a:64:46:70:ba:2f:13:b6:f9:57:1b:fb:44:90:b6:
9e:48:c3:cb:0a:b3:4e:e2:e3:a9:ea:77:2d:3e:18:
0e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:C5:D5:13:D7:97:14:87:73:CD:E7:87:5A:FD:CC:45:9C:4A:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDB49B00A33811EFB0E2D876762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.32.0/19
Signature Algorithm: sha256WithRSAEncryption
52:3c:17:70:71:d5:42:43:3b:e1:5f:3a:cd:bd:eb:3d:46:f8:
6e:a3:80:e4:20:38:2c:70:ff:18:6f:bb:b3:7c:96:73:3f:67:
66:04:e1:14:39:04:37:35:4a:9d:ac:65:6a:65:35:d7:75:bd:
48:03:62:f4:38:a4:d4:5a:1b:3e:bf:a2:cd:62:2a:5a:ee:03:
7d:c3:c8:78:b2:2b:11:1e:e5:1d:bf:e8:49:69:87:68:dd:88:
36:99:6b:88:7d:1b:e5:68:f9:f3:12:8c:0d:94:38:a7:d2:c3:
74:10:3c:eb:db:9b:b5:02:34:cb:89:c8:c4:b2:40:ee:da:15:
3d:ce:3f:3e:4b:f8:9a:d3:67:af:89:dc:e2:da:aa:1c:a8:f6:
e6:19:c7:5b:3c:5f:99:3b:5a:19:cf:d3:cd:a2:34:da:c7:74:
79:bb:85:4b:08:03:30:b1:81:d4:f1:a4:16:ab:3a:0d:c2:56:
2e:40:27:f2:12:fc:cd:cf:bd:91:21:ec:9c:b2:1e:aa:b5:31:
0f:5a:07:6f:77:3b:ca:7d:57:0e:bb:e8:03:47:cf:10:93:da:
67:97:57:48:f1:2d:5e:7b:ae:f6:37:ac:30:c9:be:65:b5:d5:
44:48:e0:1f:3f:ee:2a:87:1b:41:c7:b9:8f:99:27:be:d4:7c:
bd:e2:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:53 2024 by rpki-client on console-ams.rpki-client.org