Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E78F2E8296AF11EFA3EF3944762E951A.roa
File: E78F2E8296AF11EFA3EF3944762E951A.roa (raw, json)
Hash identifier: 607HDF+0FA1fKvQrjluSICbXUtXm+cGCb9uiEIc7Hrk=
Subject key identifier: CB:AD:AB:EA:80:23:7E:04:EA:51:23:6C:F0:AE:AA:66:28:33:A3:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CA21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E78F2E8296AF11EFA3EF3944762E951A.roa
Signing time: Wed 30 Oct 2024 11:12:52 +0000
ROA not before: Wed 30 Oct 2024 11:12:48 +0000
ROA not after: Tue 03 Dec 2024 11:12:48 +0000
asID: 54467
IP address blocks: 156.239.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51745 (0xca21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 11:12:48 2024 GMT
Not After : Dec 3 11:12:48 2024 GMT
Subject: CN=672214b4-e30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1a:4a:bd:57:72:00:31:fe:91:c3:0c:11:04:
67:aa:6e:40:75:98:7d:28:51:ab:dd:70:09:be:6b:
24:bc:5a:a1:35:7f:f3:41:2b:4f:4f:3f:eb:2e:4a:
98:69:76:62:4c:de:97:9f:89:34:ca:ca:01:c1:c4:
06:e2:75:0c:89:bc:21:9b:3e:9f:61:a6:9b:8d:70:
00:17:b3:a5:a0:44:61:4f:5e:fb:ab:fb:79:cb:6f:
8a:73:63:9b:c9:ad:08:06:35:8d:c9:a8:f5:5a:a9:
cb:f1:5f:c5:73:e1:c8:ff:0c:52:d1:c7:72:0e:92:
77:f4:92:f6:9a:7b:ab:13:d4:14:f7:c4:c9:9b:eb:
80:5d:df:80:d3:87:0a:71:9a:6c:ef:1c:2d:2c:be:
d7:04:3e:3f:ac:ea:53:46:94:bb:e2:40:99:85:33:
f6:c8:28:29:84:6a:75:6f:b8:f4:96:a5:08:1d:55:
4f:0d:1a:b7:cb:b7:5d:29:b5:60:02:73:4d:55:48:
26:05:20:c2:44:05:47:f7:c1:ab:52:81:65:70:58:
a7:42:bf:76:ef:46:9f:2a:9a:36:c2:1e:87:0c:47:
ef:40:eb:72:b7:11:ab:2d:31:a0:62:fc:eb:71:64:
d9:e6:e7:7a:a0:5d:ab:ee:dd:02:67:47:24:50:37:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AD:AB:EA:80:23:7E:04:EA:51:23:6C:F0:AE:AA:66:28:33:A3:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E78F2E8296AF11EFA3EF3944762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.64.0/19
Signature Algorithm: sha256WithRSAEncryption
80:c8:c8:6b:e7:30:18:e6:08:c2:8f:05:cf:b3:a0:b6:f8:86:
3e:e8:1e:e8:59:7d:91:f7:d1:cc:b3:57:23:ad:5c:9d:b7:80:
63:c9:d7:06:bd:01:22:cc:f4:4a:e0:7a:58:6d:1c:7e:d3:94:
b3:43:00:11:c3:3c:f3:4b:a3:d7:c8:46:b1:49:1e:56:6a:57:
b7:9f:c5:02:29:2f:0d:65:d4:6a:89:d2:d9:8b:40:32:7b:36:
6a:e6:3a:d4:eb:f0:ae:7b:b5:dd:33:b5:5b:a3:85:94:5c:2e:
5f:ec:ae:9a:29:aa:9b:9a:bc:df:a0:b3:e6:ce:81:4c:c7:ee:
31:63:0c:4d:b0:96:a8:0c:04:de:58:c0:47:71:bc:06:06:f6:
1f:77:9c:9d:ec:5a:04:05:e1:aa:6c:f0:c5:cb:11:52:37:80:
da:8f:9e:89:15:e1:21:92:70:b3:ef:e8:f3:e1:b9:0c:cd:04:
1c:c0:0b:d4:87:70:1d:23:8f:ae:c0:b4:07:ae:74:92:d2:34:
c9:d6:3c:ca:ca:68:69:70:af:b1:33:a6:f2:de:c7:d6:f5:97:
c6:a1:a0:c4:1f:1b:30:1c:df:fb:8e:4a:bf:b2:39:ff:cc:ca:
97:ec:b6:ec:24:1a:24:d5:84:56:80:5c:3a:9a:a2:a5:34:bb:
e3:01:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:52 2024 by rpki-client on console-fra.rpki-client.org