Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E981C7DC7E3F11EFACF0ABBB762E951A.roa
File: E981C7DC7E3F11EFACF0ABBB762E951A.roa (raw, json)
Hash identifier: Qaym3AnkJNoaXHmdH/MOnEjxv40eQj3aKxt8pEZERJM=
Subject key identifier: A3:9F:D2:81:55:83:CA:63:11:B4:73:D0:2A:81:7E:34:5C:59:FC:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BC9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E981C7DC7E3F11EFACF0ABBB762E951A.roa
Signing time: Sun 29 Sep 2024 08:50:44 +0000
ROA not before: Sun 29 Sep 2024 08:50:40 +0000
ROA not after: Mon 30 Dec 2024 08:50:40 +0000
asID: 17561
IP address blocks: 156.237.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48285 (0xbc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:50:40 2024 GMT
Not After : Dec 30 08:50:40 2024 GMT
Subject: CN=66f914e4-096c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:40:05:f6:3f:de:cd:3a:71:e2:bb:76:fa:7f:
96:9d:db:32:48:f2:1b:e2:62:62:f9:9d:c1:8f:c8:
a7:99:f5:bd:65:e4:55:f1:ae:93:69:9a:bf:b2:90:
86:74:ae:78:91:69:b1:0d:9c:16:85:01:a2:ef:7c:
b0:79:58:27:1b:96:8e:0d:12:13:f8:19:82:5f:e0:
a6:39:1a:7b:b8:38:25:df:06:58:65:52:31:64:b1:
86:3d:78:00:e4:53:21:25:82:8f:6b:5a:79:73:cf:
d4:56:b7:61:d7:e7:0c:37:96:59:1b:ea:24:1e:e3:
f8:49:61:02:b3:fe:88:5c:25:4c:6e:50:c7:22:17:
c6:ec:34:59:f9:c9:53:bd:84:8e:cd:bf:8d:03:31:
ee:e9:e6:7c:c5:5e:9f:50:de:2b:a6:7e:81:ac:ad:
db:cb:09:f5:e5:c5:d0:22:4c:1d:95:5c:f7:8c:8f:
e1:20:13:b8:b4:24:ea:fb:9a:d8:76:b4:23:aa:8d:
f5:72:0f:57:1a:57:80:65:70:0a:cb:ff:43:69:48:
51:fd:83:91:e5:3d:7d:30:f5:05:4c:35:d2:17:81:
78:40:39:30:dd:ee:17:64:42:c4:7d:7b:98:85:cb:
51:56:c3:22:e8:af:73:5d:91:d0:49:09:81:eb:a8:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9F:D2:81:55:83:CA:63:11:B4:73:D0:2A:81:7E:34:5C:59:FC:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E981C7DC7E3F11EFACF0ABBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.64.0/19
Signature Algorithm: sha256WithRSAEncryption
44:03:e3:a3:5f:cf:c9:f6:7d:10:b8:8c:e3:51:c3:0a:aa:7e:
3c:e4:5e:ad:11:3b:be:3f:fa:fc:92:40:82:3f:62:c1:9d:8d:
67:c0:3b:da:d7:ae:a8:8b:19:53:6c:41:9f:51:2b:98:e2:c2:
3d:21:8e:01:76:4c:c8:02:56:f0:55:b7:0d:c4:4d:54:db:d5:
1e:62:80:9f:4b:b3:dc:a4:bc:0e:44:db:19:10:d8:24:64:3e:
cd:1f:3a:33:ee:2a:35:11:a9:3d:0c:6a:53:d2:58:e8:69:7a:
04:8a:13:cc:71:c2:02:19:e2:e1:17:5e:47:60:3e:bb:c3:ed:
0d:11:32:59:0f:a6:e3:bb:68:4f:d3:dd:4a:c0:da:a5:ea:83:
90:dc:05:03:60:94:06:0e:d9:4a:88:25:10:e7:34:91:dc:b5:
67:c5:37:8b:db:5d:e4:9f:84:9a:3a:47:37:6f:36:27:5f:4f:
0e:a6:0a:da:8c:81:b3:76:54:7e:92:bf:c8:f9:91:c7:cc:67:
e9:98:64:43:fb:2b:ac:71:d8:c7:9f:de:71:23:6b:a8:d2:ce:
d4:ce:c4:ff:9b:16:95:9c:26:fd:c3:a6:05:32:b1:e2:11:c6:
04:d7:6c:92:39:4f:7f:89:7c:be:aa:8c:11:35:b4:f1:f8:4c:
5d:18:13:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:52 2024 by rpki-client on console-fra.rpki-client.org