Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1993FFAA71A11EFBAF27954762E951A.roa
File: F1993FFAA71A11EFBAF27954762E951A.roa (raw, json)
Hash identifier: LiM0fFfyGxD510SRm1QG6KEE/wrdc8XzxkSgjUXsFjg=
Subject key identifier: F0:69:CF:6B:CD:A0:59:F9:8F:45:60:97:23:1A:CC:6F:68:1C:D7:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1993FFAA71A11EFBAF27954762E951A.roa
Signing time: Wed 20 Nov 2024 08:39:24 +0000
ROA not before: Wed 20 Nov 2024 08:39:20 +0000
ROA not after: Sat 21 Dec 2024 08:39:20 +0000
asID: 328608
IP address blocks: 156.229.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54697 (0xd5a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 08:39:20 2024 GMT
Not After : Dec 21 08:39:20 2024 GMT
Subject: CN=673da03c-7099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:ce:7a:94:0e:7e:72:ae:2d:fb:18:30:24:
5e:5c:ab:a9:99:9e:41:2a:d0:93:65:50:db:43:30:
39:9b:7c:b7:87:38:cd:b2:bb:af:c8:a9:23:fd:3f:
b7:e5:cd:d9:c4:14:02:03:f9:47:dc:78:80:ad:cd:
9d:9e:20:9a:f7:e5:6b:e2:d9:9f:db:aa:1c:7f:2a:
0d:5c:b2:69:d5:f0:45:4e:74:59:0a:7c:fa:b5:03:
41:71:51:6f:fa:2e:6d:2e:85:dd:98:52:9b:4a:da:
78:7d:38:7f:3d:b8:97:1e:37:83:ef:63:f3:c1:15:
f3:75:95:9b:30:90:88:f4:9f:61:34:6c:ad:20:9d:
89:81:d1:fe:5d:70:c7:df:4f:82:fb:23:82:bd:9f:
32:d5:99:30:e7:9f:48:a7:6d:ce:51:b3:79:3c:b1:
7b:29:05:cb:4f:c3:55:87:1f:4c:d3:9b:0f:58:5d:
e6:3d:20:ff:08:a0:0e:8b:20:c0:46:14:cf:43:cf:
2f:91:36:b8:83:0b:e7:0b:29:f8:59:0b:52:5c:78:
e3:e6:09:16:49:0b:91:f4:ea:e7:6a:a9:24:0b:ad:
e9:7e:ca:91:d7:9a:26:24:9d:20:7b:cc:54:68:bd:
3c:d3:f3:c3:4b:39:72:31:15:63:09:49:15:64:47:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:69:CF:6B:CD:A0:59:F9:8F:45:60:97:23:1A:CC:6F:68:1C:D7:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1993FFAA71A11EFBAF27954762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.96.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:0c:3b:1c:f4:34:77:9c:fe:1b:e6:c4:c4:24:eb:59:bf:ec:
42:b3:0b:64:1f:b8:37:5e:47:c6:51:6d:3e:58:9f:15:35:a2:
83:75:5c:96:a2:27:65:a0:c2:22:01:07:dc:dc:c2:a1:58:85:
b9:5a:87:31:91:d9:9d:84:f4:cc:18:59:d2:84:55:94:e7:4e:
53:e0:90:72:f3:67:4f:cb:b9:eb:ad:9f:75:01:f1:7f:d7:d4:
5e:49:77:9a:dd:18:66:58:a1:15:f6:c7:7f:01:36:6f:2b:a8:
0d:ad:89:61:42:99:aa:3b:01:47:c1:cb:e0:b0:0f:02:67:74:
46:8c:4f:72:e5:0f:b3:72:f9:f0:61:45:d9:fb:95:92:93:b2:
8e:1c:6b:d4:47:d5:2c:9d:88:9c:09:c6:89:8e:89:cd:a7:5c:
72:a2:3e:42:3a:26:31:d1:f6:f8:34:c3:11:c1:97:09:2f:dc:
27:df:87:e3:f6:49:69:6b:f4:06:9c:93:16:ac:38:3c:0f:51:
99:a3:0c:0e:d9:85:ce:ef:71:66:2a:a7:07:7f:4c:45:69:c0:
57:dc:c4:e5:4f:f3:09:3e:ae:c1:03:38:bb:11:2f:af:e9:aa:
5c:62:69:6b:53:16:54:71:dd:53:fe:52:d2:a7:a1:39:38:25:
de:89:92:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:54 2024 by rpki-client on console-fra.rpki-client.org