Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB8F2908A0E311EFA71DE190762E951A.roa
File: FB8F2908A0E311EFA71DE190762E951A.roa (raw, json)
Hash identifier: y4rmue1YcnY9C6fXJzAVo0s28OvS3Oby+CUI5+R3GW0=
Subject key identifier: 16:C8:1C:BF:7D:DB:18:25:34:DD:9D:8E:E7:A6:C5:D5:68:6B:BA:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D1AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB8F2908A0E311EFA71DE190762E951A.roa
Signing time: Tue 12 Nov 2024 10:50:51 +0000
ROA not before: Tue 12 Nov 2024 10:50:47 +0000
ROA not after: Fri 22 Nov 2024 10:50:47 +0000
asID: 39600
IP address blocks: 156.255.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53675 (0xd1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 10:50:47 2024 GMT
Not After : Nov 22 10:50:47 2024 GMT
Subject: CN=6733330b-65b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:be:8b:d5:55:8b:40:ff:48:cd:68:3a:e0:
16:24:80:5c:7b:55:a8:b4:24:c4:0d:6f:4b:2b:39:
18:a5:06:17:bc:37:14:a0:d2:bd:39:88:00:c9:fc:
c8:11:30:89:91:70:5f:76:cc:53:a3:46:18:a8:a8:
66:69:05:1d:c1:b0:9e:74:e1:30:64:99:32:79:ef:
82:2d:09:9b:b1:20:23:40:48:59:6a:e9:68:a4:55:
ad:00:81:e1:fe:59:f1:b3:88:28:9d:c6:4a:cc:a8:
61:f0:61:ad:e0:10:f6:c2:44:11:1f:37:3e:33:c6:
6f:da:9f:84:1b:d1:bf:6f:aa:3d:82:f7:27:24:76:
65:a5:a8:59:ba:c5:cc:94:b7:d6:57:6d:fc:ff:d5:
50:b0:db:4e:11:54:ff:73:ab:ec:1f:65:32:ec:61:
31:85:ba:f8:29:bb:c2:2b:27:6a:bf:16:9f:cf:aa:
f9:fe:f1:b1:b3:1f:79:bd:61:c9:e1:fb:96:29:e1:
73:32:39:46:79:13:e3:94:02:0a:59:3c:26:92:47:
8f:b0:29:fc:74:22:ee:7c:17:1c:0f:aa:40:f8:50:
19:06:a1:f7:6c:ad:39:da:9c:23:5e:c3:34:6d:23:
6b:ef:4c:cf:d9:05:4f:b4:7a:b6:ba:45:2a:f5:e5:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C8:1C:BF:7D:DB:18:25:34:DD:9D:8E:E7:A6:C5:D5:68:6B:BA:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB8F2908A0E311EFA71DE190762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.80.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:59:67:22:a8:c3:dc:02:f8:4c:f5:91:aa:15:78:6e:34:23:
51:20:47:ca:23:bd:f9:43:27:e4:3b:70:76:fe:34:0e:ca:7f:
40:c1:72:a9:e9:2b:5a:36:ef:58:96:03:6f:4f:57:2a:60:f1:
02:31:a1:24:2f:58:cd:38:c6:ee:7a:40:6d:ce:3d:39:1c:f0:
6f:90:30:e6:bf:88:03:aa:cd:5b:28:2c:b0:a1:43:a3:3c:fc:
71:bd:59:3b:77:3d:d8:bc:f0:31:43:ac:d7:3c:bd:d5:32:30:
d0:f6:0e:63:c1:bd:e6:24:f8:d8:08:59:97:5d:19:af:c7:9b:
ee:ca:26:3b:07:d6:73:43:c9:c6:c7:71:bb:b1:13:d1:ed:da:
34:cd:c5:28:fc:47:7f:f2:e7:3b:67:c0:ae:fc:18:5c:ba:b2:
a7:10:8b:7e:b2:84:7a:26:02:0c:af:47:e8:05:4a:f1:2a:02:
f7:27:ca:c7:79:d7:37:d2:b4:65:35:80:1b:91:8e:2c:0b:bd:
11:b7:49:88:db:34:d1:72:17:16:63:57:eb:cf:1c:d1:96:b7:
53:42:5c:5f:24:dd:0b:66:29:96:8e:0b:7a:59:94:48:a5:2d:
d3:ac:5f:a3:93:3a:62:6b:71:a2:50:ef:2d:4e:07:7a:c8:c7:
a2:9b:c0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:58 2024 by rpki-client on console-ams.rpki-client.org