Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3B74848A64F11EF9C404C5C762E951A.roa
File: F3B74848A64F11EF9C404C5C762E951A.roa (raw, json)
Hash identifier: xaEJycdGqzYbW2GIS3lfLTaMfg3PwqhutB2/fdUt490=
Subject key identifier: 3C:1B:87:CE:F4:00:E9:3A:4A:E2:10:5A:DA:EB:37:C0:D9:42:09:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D57A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3B74848A64F11EF9C404C5C762E951A.roa
Signing time: Tue 19 Nov 2024 08:26:19 +0000
ROA not before: Tue 19 Nov 2024 08:26:16 +0000
ROA not after: Sat 23 Nov 2024 08:26:16 +0000
asID: 149014
IP address blocks: 156.236.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54650 (0xd57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 08:26:16 2024 GMT
Not After : Nov 23 08:26:16 2024 GMT
Subject: CN=673c4bab-c024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c6:77:28:66:c7:a2:9e:87:d7:3e:02:d0:c9:
e3:7a:60:96:b0:f8:e7:5b:b5:b6:cc:3b:ed:70:d5:
b7:73:03:49:f3:38:23:a4:ea:78:17:f3:88:21:24:
e2:2d:00:db:dd:da:df:48:b4:cd:66:01:ac:32:bf:
2d:8b:01:86:b8:e6:ab:8f:6e:f5:5f:84:1b:e3:1c:
b6:f1:46:24:cb:40:7f:ec:74:b9:f4:19:81:3f:2b:
3c:7d:00:fc:0e:69:3a:3d:45:09:aa:24:f0:d7:74:
37:de:d5:7a:c4:65:43:14:1e:ae:0a:e1:db:8e:e7:
c7:bb:36:ef:fb:14:e2:de:f7:89:37:85:b6:42:be:
ee:92:a1:ed:56:df:39:37:a1:e8:5a:b1:12:17:66:
e5:d2:a1:f8:79:b0:40:64:a6:61:8c:ae:3b:63:05:
b5:58:ec:cc:37:23:c3:10:2a:b5:83:b3:06:cf:5d:
06:1e:83:87:f4:4a:f2:93:7d:c1:08:5f:16:c1:16:
45:ae:c7:72:c0:ef:82:fb:48:76:a9:69:e6:78:1c:
fb:27:c3:85:0b:bc:0f:1a:f5:0d:d6:db:43:56:bb:
dd:e4:0b:dc:0a:18:45:90:81:e0:2b:5b:e3:60:ab:
9a:25:7c:6d:db:f8:33:bc:0b:e7:53:6c:7d:57:f1:
91:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1B:87:CE:F4:00:E9:3A:4A:E2:10:5A:DA:EB:37:C0:D9:42:09:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3B74848A64F11EF9C404C5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.112.0/22
Signature Algorithm: sha256WithRSAEncryption
99:c4:62:fc:a5:c0:89:c6:b9:80:43:f2:c2:39:62:c5:1d:e4:
08:32:87:f7:32:e7:56:f8:48:04:e1:5a:17:c1:19:c0:03:c2:
f6:57:0c:2f:b3:d5:16:a3:33:20:0a:5c:b8:b3:80:0b:60:a4:
7e:8d:a0:39:be:bf:b8:d6:27:a6:bc:20:06:27:6a:ff:55:87:
30:86:1f:cd:aa:d0:8b:60:b9:c9:98:db:fc:00:de:3e:b6:6a:
2d:84:d5:e5:4a:a4:54:7c:18:a9:2f:28:76:69:e4:3f:d0:bd:
5e:56:14:a5:1c:65:f8:5d:e9:18:ac:cf:59:2d:36:23:d8:6f:
56:d2:58:1d:5b:05:bc:cd:32:d9:65:54:d2:71:63:32:01:cd:
05:85:ab:22:05:c4:da:af:de:b6:be:4a:11:93:34:2a:b5:54:
64:5f:33:ec:ff:5c:7a:03:b8:79:af:cf:64:97:24:48:1a:3f:
70:4c:9d:09:ba:26:12:7d:84:e0:c0:13:75:97:ea:60:10:ec:
88:53:53:f7:65:53:83:1f:2f:ad:ac:8b:bd:06:c6:a9:ce:a6:
dc:9b:52:b6:5c:e3:90:6c:0d:72:92:19:07:7f:04:cc:8e:86:
eb:49:e5:8f:8b:e0:2d:50:fe:2f:3e:c9:16:7e:81:51:1c:be:
72:57:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:56 2024 by rpki-client on console-ams.rpki-client.org