Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E732A7C49DA411EFB6F4A9AB762E951A.roa
File: E732A7C49DA411EFB6F4A9AB762E951A.roa (raw, json)
Hash identifier: 9Uu77U2JEicJH39nA1KSPx6wn5X5pB7/Y9F2yE5rLHQ=
Subject key identifier: 2C:7A:9B:61:4B:0F:0D:B4:55:5A:E5:9D:81:30:21:1A:45:C2:F8:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D024
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E732A7C49DA411EFB6F4A9AB762E951A.roa
Signing time: Fri 08 Nov 2024 07:41:45 +0000
ROA not before: Fri 08 Nov 2024 07:41:41 +0000
ROA not after: Sun 01 Dec 2024 07:41:41 +0000
asID: 64126
IP address blocks: 156.248.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53284 (0xd024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 8 07:41:41 2024 GMT
Not After : Dec 1 07:41:41 2024 GMT
Subject: CN=672dc0b9-1e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:f3:a7:7f:4f:19:c9:19:1e:ed:a6:ff:f8:
b8:e4:f7:07:bd:9b:0e:3b:42:38:57:8f:b4:b1:05:
50:27:93:fc:37:e8:90:9d:30:ab:d5:6f:88:3b:d1:
3e:45:98:d7:ed:ff:54:36:3e:3e:b0:be:5f:90:53:
a5:fa:40:13:e4:5a:06:2e:4a:75:8e:15:6b:c5:2f:
3e:93:93:84:93:6e:b8:f6:b2:d7:c1:0f:1c:3c:24:
09:61:d3:9f:ed:46:69:0c:2d:bf:c1:28:22:84:c5:
26:31:36:16:6f:10:b1:47:16:92:1b:9b:74:8b:ff:
58:3e:c7:0a:18:fd:c1:ee:29:55:d3:56:88:49:03:
58:e4:36:b0:5c:37:67:1f:49:c1:bc:a5:32:79:0a:
4a:fe:1c:3d:5c:57:f2:4a:f5:9f:53:6b:53:73:e2:
31:d8:4e:3d:86:88:b7:ef:d4:f4:83:d7:64:b3:63:
a1:c6:ff:71:8d:60:9d:a4:81:6b:5c:a4:72:8f:fd:
66:fb:10:d6:b1:a3:13:aa:f1:b2:07:c0:d3:07:4f:
cd:0a:b7:53:1e:9e:5c:4a:3d:d8:03:d7:a9:5c:1f:
83:8c:82:10:32:ac:d4:e2:3a:38:7b:70:5a:82:89:
5e:ed:ee:c0:d1:bf:77:5f:44:f7:77:06:f1:9f:6e:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7A:9B:61:4B:0F:0D:B4:55:5A:E5:9D:81:30:21:1A:45:C2:F8:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E732A7C49DA411EFB6F4A9AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7d:8a:05:40:c1:85:b8:7f:9f:58:e2:eb:9d:1d:d6:02:a3:f6:
63:08:6e:ff:59:7b:b6:09:09:ef:3f:e8:fa:49:ec:e9:f1:9e:
3d:7f:24:08:4a:af:7b:b3:85:a8:59:ff:83:51:b0:f4:30:90:
dc:d6:cc:0a:d1:c3:7b:0d:d1:83:d1:54:95:8a:9d:5c:55:96:
b2:15:ea:7b:d5:cd:cb:c3:c8:d0:81:4d:c6:86:90:81:bf:8e:
01:a5:26:c9:5b:53:ae:9b:c2:0b:90:18:41:96:6c:c7:25:99:
ce:aa:ee:da:b2:4e:14:be:3a:32:d4:96:c4:30:fb:bf:2c:d5:
f7:a5:80:d5:43:4f:1e:cd:25:a1:fb:88:a0:4a:53:15:49:54:
60:b0:f3:54:23:f1:2d:3e:00:62:9d:f9:ad:7e:a9:23:df:8c:
b0:40:ed:7e:9c:a4:b9:b7:57:3d:b6:b9:cc:f6:4b:c2:c8:86:
d6:98:22:90:79:b8:8a:e0:94:c0:37:86:ee:22:8d:2d:48:e3:
4b:cf:32:7b:45:74:fc:e5:99:f4:4a:dd:af:5c:8a:cc:e9:5c:
31:cf:ea:13:cb:49:c1:53:55:c5:5c:a2:93:9e:0a:a2:2d:8e:
ec:8c:ce:b6:f7:54:57:ae:d2:14:ca:be:74:9f:52:dd:5f:41:
56:ce:c1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:52 2024 by rpki-client on console-fra.rpki-client.org