Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEDB5FBA9B8011EFB6DD3AA5762E951A.roa
File: DEDB5FBA9B8011EFB6DD3AA5762E951A.roa (raw, json)
Hash identifier: i9jMIyFY/ncqO3lg/cmKAbudr++cQCHoLOTBvc+Dyc0=
Subject key identifier: 5C:D6:F6:F6:83:63:DA:BE:7C:6C:10:EF:3F:14:A9:65:D9:CA:12:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CEAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEDB5FBA9B8011EFB6DD3AA5762E951A.roa
Signing time: Tue 05 Nov 2024 14:18:47 +0000
ROA not before: Tue 05 Nov 2024 14:18:43 +0000
ROA not after: Mon 13 Jan 2025 14:18:43 +0000
asID: 7018
IP address blocks: 156.248.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52907 (0xceab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 14:18:43 2024 GMT
Not After : Jan 13 14:18:43 2025 GMT
Subject: CN=672a2947-1db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:43:ea:f9:c1:7c:f9:02:54:c3:cb:10:8b:
6d:ad:20:20:f3:ed:f0:d3:fb:75:cd:7f:8a:0d:46:
5e:b6:d4:8c:24:95:48:ca:bc:9a:8a:d7:7e:f1:e0:
df:89:3f:9c:57:e5:8d:3d:c9:f1:ee:35:1f:f2:7d:
b6:36:70:73:31:f5:8f:81:39:23:aa:7c:bb:11:2a:
77:33:ec:8a:47:aa:56:b6:9f:59:78:e6:4b:5a:e7:
4d:a8:b7:66:60:76:36:1b:39:08:fa:c7:64:29:a7:
57:2d:e1:a1:46:13:41:7a:c0:26:03:8d:72:1b:a0:
94:e5:4d:a9:9c:3f:85:ec:d9:0f:85:29:8a:69:d9:
44:74:01:3c:fe:4d:e0:6b:bd:d3:89:ec:b5:cb:de:
38:50:d9:6c:74:64:7c:c2:f3:4d:43:1a:e0:e6:22:
59:0f:c0:f9:ab:6a:5a:00:df:6a:fa:cd:8f:0d:d6:
53:84:60:99:ef:07:28:b4:d0:c3:4d:0c:9a:73:2f:
16:3d:b1:db:df:b8:2b:a5:0b:e7:1c:b2:b2:0e:73:
31:1f:6f:d2:66:85:2e:73:6d:4b:3e:12:22:fa:dd:
73:ca:3f:20:3e:1f:46:b6:68:d7:66:74:f5:f3:be:
b9:d5:5b:a9:12:f1:44:53:51:34:00:3e:22:77:bf:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D6:F6:F6:83:63:DA:BE:7C:6C:10:EF:3F:14:A9:65:D9:CA:12:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DEDB5FBA9B8011EFB6DD3AA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.108.0/22
Signature Algorithm: sha256WithRSAEncryption
36:f1:6b:90:aa:88:32:7f:7b:73:54:39:52:2e:4a:c4:40:49:
27:19:72:93:9b:07:8e:48:81:f5:c5:66:8d:b2:dc:aa:b8:f6:
b0:63:50:a4:20:15:cd:f1:16:7a:7d:c3:d0:ba:09:5d:dd:17:
a1:64:b0:aa:0c:f5:3d:af:78:5d:8a:9d:c7:62:74:6b:1a:9d:
f9:7a:db:80:d2:a9:57:e7:ce:5c:ae:86:44:65:fe:29:6b:0f:
c9:c4:30:30:69:1b:38:37:27:14:14:1b:65:7e:d7:7f:8a:a0:
2c:92:14:7c:90:8f:c8:76:97:70:52:21:88:24:7e:85:e6:03:
39:35:9a:77:8c:a3:fd:11:66:78:41:d2:85:de:4e:4a:86:8c:
55:45:18:ea:36:7c:cc:28:f3:0e:ea:ea:ba:91:e2:d1:1c:84:
3e:54:e2:ae:da:c4:51:60:80:76:f4:2c:f7:c9:b1:41:49:65:
8a:a5:89:8b:8c:49:a1:24:30:97:65:6a:a9:9d:ca:3d:e1:cf:
d1:96:fc:17:68:65:75:5e:76:02:cd:9e:0d:32:91:b9:d3:43:
49:6c:ac:6e:65:e7:e9:92:da:22:10:bd:e0:01:cc:59:ff:84:
ef:82:df:16:b4:e1:08:a3:4b:ff:94:ca:8d:f4:09:a6:4e:bc:
69:33:d7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:53 2024 by rpki-client on console-ams.rpki-client.org