Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFEABB2CA26D11EFB253F367762E951A.roa
File: EFEABB2CA26D11EFB253F367762E951A.roa (raw, json)
Hash identifier: BxIZt1w/f4yh3XN7T4m8UIjkIx41IGjaJ3LkA0Ir1/Q=
Subject key identifier: E7:98:24:13:25:78:A0:E8:08:B3:41:D8:B2:E0:2B:41:BA:C3:51:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D2BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFEABB2CA26D11EFB253F367762E951A.roa
Signing time: Thu 14 Nov 2024 09:50:53 +0000
ROA not before: Thu 14 Nov 2024 09:50:50 +0000
ROA not after: Sat 23 Nov 2024 09:50:50 +0000
asID: 137443
IP address blocks: 156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53947 (0xd2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 09:50:50 2024 GMT
Not After : Nov 23 09:50:50 2024 GMT
Subject: CN=6735c7fd-c074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:e0:34:45:f4:e7:1e:67:41:e4:d9:49:b8:
3a:8e:e9:9a:04:2e:af:76:b0:2a:f8:a8:ef:8e:34:
ac:d5:0d:40:49:90:69:49:06:fc:8e:90:62:4a:24:
70:06:14:de:8f:52:9d:46:dd:36:43:83:0b:3e:5e:
1a:88:cd:0e:e9:74:2a:9e:3f:24:d3:c8:81:cf:7e:
a4:27:67:71:ae:91:83:67:ec:30:34:98:b5:8c:8f:
7e:09:e4:c0:c6:63:13:18:fb:11:07:a5:33:e2:1e:
0a:7b:f9:9c:77:83:5f:5c:1c:a3:31:b3:c3:73:52:
1f:dd:36:2d:32:27:fa:25:d8:88:96:cb:26:9b:9c:
d3:43:7c:46:d3:7e:11:55:2b:cf:18:c0:3a:b3:03:
4f:ac:e0:7e:4a:4f:61:53:9f:85:c0:f7:f0:a0:8a:
b1:99:c0:49:78:8a:61:55:e5:b5:f3:fc:3e:50:11:
e6:47:d4:d2:f1:80:5b:4a:8d:a8:28:d5:bb:79:77:
13:87:47:84:e2:b7:ad:d9:d1:86:31:09:39:ee:19:
80:09:46:8e:25:3c:ff:2b:cb:97:f0:26:e1:00:8f:
03:0f:1e:46:f6:7f:dd:4e:24:18:9a:f1:9d:71:53:
dc:24:54:99:4f:a0:aa:64:a0:6d:d2:86:5e:3e:1b:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:98:24:13:25:78:A0:E8:08:B3:41:D8:B2:E0:2B:41:BA:C3:51:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFEABB2CA26D11EFB253F367762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:cc:a7:c8:a6:0f:98:5d:50:ec:52:39:b6:d7:d4:29:4e:e8:
84:ed:43:47:c9:3d:73:d8:08:dd:e0:20:3f:be:82:01:6e:bd:
6e:a9:94:56:e6:3e:7f:cc:70:26:f0:96:78:8a:b1:44:4b:cd:
a6:60:f0:0f:1c:49:41:ce:56:22:18:47:c7:e6:78:dc:dd:12:
92:1f:7c:a0:b9:82:0c:e1:75:76:46:ac:63:9a:63:1e:70:2a:
e2:7b:65:58:b6:8e:51:81:e1:9e:41:2f:ee:02:07:c9:bc:54:
b4:a7:73:cc:ae:76:a3:d4:f7:0d:fd:ca:db:df:5d:a1:11:1a:
e3:18:94:0c:22:c9:7b:c4:e2:1e:e1:85:d7:60:42:ab:ff:7b:
ea:28:4a:28:3b:77:45:21:90:a0:6b:25:a9:e5:78:ee:fe:8a:
b0:68:ea:50:cb:4d:2a:cc:66:ab:3f:d7:d3:72:3a:82:1a:03:
58:58:53:a6:5a:c3:08:f3:e1:af:5a:76:18:52:47:9b:5b:57:
7b:8b:19:82:dd:0d:27:6c:04:1d:8b:62:bb:72:70:ee:43:2d:
a5:f0:5e:81:63:f6:8a:d9:2b:17:d1:0b:f0:71:d8:02:ae:33:
d4:c0:1c:26:57:c1:f4:96:20:e0:0c:54:b7:d8:06:81:03:3c:
d3:57:da:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:56 2024 by rpki-client on console-ams.rpki-client.org