Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8D78DC29B7A11EF8705DB7F762E951A.roa
File: F8D78DC29B7A11EF8705DB7F762E951A.roa (raw, json)
Hash identifier: 5wGACPLiBQK88yF22VVZBYYyRqD928i4oJXIm1huBOo=
Subject key identifier: C9:16:54:E5:B5:B1:6C:29:41:5A:EC:C5:5A:05:7B:4E:99:1D:0E:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8D78DC29B7A11EF8705DB7F762E951A.roa
Signing time: Tue 05 Nov 2024 13:36:34 +0000
ROA not before: Tue 05 Nov 2024 13:36:30 +0000
ROA not after: Mon 13 Jan 2025 13:36:30 +0000
asID: 5065
IP address blocks: 156.233.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52835 (0xce63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 13:36:30 2024 GMT
Not After : Jan 13 13:36:30 2025 GMT
Subject: CN=672a1f61-c8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:6a:9d:72:32:81:6d:6d:29:1d:c7:60:8e:
8f:60:ee:13:2f:08:db:4c:37:c9:38:ca:bf:e0:97:
b1:eb:4b:a6:c8:5a:f5:c0:15:56:5b:92:b2:83:1d:
53:70:96:af:e8:28:61:23:b5:3d:cd:03:c0:4b:98:
02:db:2c:65:c2:d5:4c:d9:60:76:4c:e1:56:93:ef:
72:47:04:db:db:77:7d:d2:57:01:eb:30:09:81:26:
58:d0:43:2f:43:c8:31:37:48:9d:f3:05:4e:11:05:
12:7d:39:d7:82:12:68:2c:c4:08:b6:36:aa:6c:94:
b0:9d:cd:40:25:90:f9:c5:f4:1d:ec:dc:ac:d3:46:
5b:05:70:a3:98:54:b0:7a:18:da:5f:27:e7:8a:1a:
1b:42:37:75:7b:1f:a1:81:57:d0:91:de:30:69:c5:
94:ee:80:39:cc:71:d5:a7:04:ff:1d:96:36:c3:ba:
a1:20:7b:f9:ed:ad:e7:c7:16:0a:89:48:0a:46:16:
4c:e9:59:d2:ff:32:24:ae:f3:0d:15:1f:e5:a4:2a:
c7:fd:83:ec:64:fd:9b:35:a1:f8:70:4b:a7:06:54:
93:b1:2c:34:71:93:bc:cd:d1:48:ca:f1:88:b4:59:
b5:08:a4:51:ae:b3:ee:c7:b2:d0:59:1b:6b:78:b7:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:16:54:E5:B5:B1:6C:29:41:5A:EC:C5:5A:05:7B:4E:99:1D:0E:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8D78DC29B7A11EF8705DB7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.22.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:13:54:f8:20:f8:23:a6:f8:a5:6d:ed:ce:0f:2c:91:2c:47:
f6:95:6a:f8:89:a6:a0:06:1a:5b:1c:14:40:7f:a0:f4:b5:65:
cd:c3:a6:fb:3f:10:ed:71:6d:83:a7:08:bf:42:f1:ef:cd:3f:
2e:1a:aa:ea:08:e8:80:54:c6:d8:9b:29:17:20:8c:df:2e:2e:
ac:76:22:66:cc:b1:67:83:3c:3f:35:1e:3c:b4:ee:5b:1c:0a:
6b:be:8f:18:82:1d:61:bf:fc:50:3d:b6:03:3b:7d:cb:55:4d:
e0:b5:90:d4:5f:04:9e:c5:1b:1b:f2:d0:c4:f0:1f:3d:fd:ef:
39:a3:14:ea:80:b5:65:19:9b:d1:02:91:19:03:91:7b:99:97:
d0:94:04:6a:a0:a0:23:5c:8e:24:cd:7f:9f:32:9e:c5:a1:a5:
59:4e:b6:52:3e:e3:29:66:11:8b:45:76:e8:36:f2:1b:a8:92:
9f:33:c4:4f:a3:97:80:8c:c8:70:ad:80:4d:52:15:f2:f4:91:
c7:6b:52:9e:39:2c:20:f1:70:cc:49:15:65:fc:b9:0b:9d:7e:
5f:33:16:26:d0:24:d9:0c:e8:33:7f:4d:87:72:c7:7a:95:81:
19:19:a1:41:7c:99:41:f6:12:93:32:6a:6f:a8:1c:f8:81:ae:
e6:22:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:55 2024 by rpki-client on console-fra.rpki-client.org