Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6749B26A4D411EFADBAD290762E951A.roa
File: E6749B26A4D411EFADBAD290762E951A.roa (raw, json)
Hash identifier: sqn4f/bG6WXW0Rd4vfGTAHBKUgO43Ac2l8BT4MioINY=
Subject key identifier: 9F:A0:73:24:85:00:31:41:24:85:B4:F5:1F:66:BF:1E:C1:03:B5:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6749B26A4D411EFADBAD290762E951A.roa
Signing time: Sun 17 Nov 2024 11:12:58 +0000
ROA not before: Sun 17 Nov 2024 11:12:54 +0000
ROA not after: Wed 27 Nov 2024 11:12:54 +0000
asID: 39600
IP address blocks: 156.238.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54513 (0xd4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 11:12:54 2024 GMT
Not After : Nov 27 11:12:54 2024 GMT
Subject: CN=6739cfba-7849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:ea:75:e0:6f:9d:a0:24:6e:15:e7:42:85:
0e:a8:66:93:a0:81:45:0d:da:c0:df:24:10:b4:5f:
ca:4e:0f:d6:29:96:14:3f:cb:1b:d3:b2:99:1c:d9:
14:d7:bf:1a:ab:88:ff:b3:3b:fb:1a:5c:1b:ee:22:
88:01:16:c4:f1:10:b5:dd:ee:73:bd:5e:70:5a:00:
ae:0b:37:ae:bf:0c:a2:e4:03:ab:b1:8c:c1:91:57:
c4:d6:c2:52:d7:da:fc:53:5d:b6:ab:a0:36:61:5d:
b8:f4:f9:09:dc:99:13:87:cb:62:f2:ac:4c:3f:8a:
cd:a8:16:45:41:27:c7:fc:16:30:ea:00:cd:e6:76:
4e:b3:43:b6:32:0f:ca:e2:47:d9:0c:90:d2:f2:9d:
b6:5f:1d:0d:87:25:a7:51:dd:06:4c:99:8b:67:36:
3e:37:bb:6d:b4:70:80:d4:db:38:83:a6:26:33:95:
78:85:fe:4e:d7:0d:e0:bb:7b:83:3c:57:f6:ab:d9:
12:94:b8:44:80:ab:3e:3d:91:c5:f5:2c:cb:a8:31:
15:3a:dd:6c:10:07:a4:3d:4e:b7:97:2b:2c:d2:dd:
b1:dc:e2:2b:75:4e:3b:4c:86:b5:e8:26:a4:7f:6b:
13:32:6b:16:21:7d:95:34:3c:1f:af:3e:26:e8:9f:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A0:73:24:85:00:31:41:24:85:B4:F5:1F:66:BF:1E:C1:03:B5:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6749B26A4D411EFADBAD290762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.166.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7e:a5:5f:d5:d3:4e:19:19:de:84:16:09:78:4d:87:cf:f6:
7d:88:d1:2c:50:d9:76:b4:0e:51:df:50:88:2b:37:eb:db:6d:
fb:5d:15:da:07:66:62:3c:0b:79:14:57:ce:2b:87:e3:54:b5:
93:24:02:d2:56:7d:37:1d:ff:f8:49:0a:d0:31:f3:ff:29:67:
20:9e:66:0d:01:52:21:45:bb:61:d7:41:cb:88:b4:a8:98:48:
8b:d5:93:ce:e5:53:2c:a3:fc:22:ad:e3:18:18:70:1a:d6:9d:
bd:d8:f5:f3:51:28:d2:18:2e:1c:72:7e:72:7b:27:1f:58:0a:
3c:0d:7e:b4:4b:12:ff:0f:ff:46:59:14:8f:6f:04:80:fe:d9:
04:69:d7:66:6c:73:5a:3a:4f:c2:39:bd:d1:da:8e:b2:67:7b:
a4:2b:45:9b:93:c7:74:b6:5a:d8:b9:18:9d:3f:36:1b:0c:2d:
25:aa:30:a2:77:a8:c3:8f:d7:17:66:b8:7a:0c:d1:cc:f5:09:
31:5a:f2:47:d8:19:57:0b:56:f2:5e:4d:89:d1:09:a3:4b:b5:
90:df:2d:f2:61:d3:75:9d:77:08:86:80:f9:35:11:c7:9f:bb:
69:8a:75:42:41:7f:ec:fe:90:f4:78:8a:77:a2:8c:d2:12:c6:
32:52:f3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:52 2024 by rpki-client on console-fra.rpki-client.org