Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1662BE50766B11EFB5A3506A762E951A.roa
File: 1662BE50766B11EFB5A3506A762E951A.roa (raw, json)
Hash identifier: qebcYlED/nVr7G7Hch5lNkSMUZfc29+LoB3xaZPgaTw=
Subject key identifier: B5:17:17:14:6F:E6:0D:85:D9:B8:61:1A:A6:40:33:4C:40:57:18:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B81B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1662BE50766B11EFB5A3506A762E951A.roa
Signing time: Thu 19 Sep 2024 09:39:38 +0000
ROA not before: Thu 19 Sep 2024 09:39:35 +0000
ROA not after: Fri 08 Aug 2025 09:39:35 +0000
asID: 133199
IP address blocks: 156.245.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47131 (0xb81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 09:39:35 2024 GMT
Not After : Aug 8 09:39:35 2025 GMT
Subject: CN=66ebf15a-3610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:cb:05:8c:a1:5e:d6:7b:04:0d:dc:e9:17:
fb:29:0f:db:29:f6:f1:43:d1:5f:de:29:84:97:40:
d6:51:01:f0:83:42:f8:c9:4c:5c:07:29:9e:b8:9e:
32:78:88:4e:6a:5f:fc:bd:10:15:98:05:85:bf:57:
98:f9:db:2c:b8:f5:27:fa:c0:2d:9c:ef:b6:ad:dd:
44:2e:4f:1c:18:4d:6d:82:32:ea:c9:cb:42:50:37:
2f:23:2c:b3:0d:a6:b9:ca:0f:0a:59:56:64:74:47:
d1:82:02:d6:dc:ae:8e:d2:08:17:76:c3:6d:52:cb:
dd:a5:6d:0c:02:4b:b8:c1:3e:5a:53:29:51:f9:57:
d8:ed:8a:c4:a2:93:37:ff:a6:c1:18:5b:d6:b8:ca:
bd:4e:33:61:41:40:98:2d:72:ad:50:8f:1a:dd:cb:
7c:66:39:ff:57:de:a8:fd:3a:15:94:fa:a8:3c:c3:
ec:c0:13:51:09:16:fc:6b:2d:95:42:78:48:2a:02:
34:b3:da:17:84:6c:ba:c2:5f:6b:c2:f9:24:fa:74:
4a:d5:ea:30:90:f3:02:30:e0:cc:52:56:2f:3c:47:
48:e5:d5:24:6a:e6:92:03:3a:9e:af:d4:2f:d4:fd:
06:db:a0:0e:54:08:03:2a:df:1a:b1:b8:6a:56:e8:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:17:17:14:6F:E6:0D:85:D9:B8:61:1A:A6:40:33:4C:40:57:18:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1662BE50766B11EFB5A3506A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.20.0/22
Signature Algorithm: sha256WithRSAEncryption
47:91:81:55:d1:c9:bd:96:88:e7:8f:46:b4:a5:2a:29:7c:ed:
28:f6:55:10:34:e9:d6:6a:d6:1e:01:63:dd:66:f6:d6:6e:24:
54:3d:56:c1:bc:67:58:2a:e1:d5:45:3d:a1:2c:72:83:22:1b:
75:61:e1:70:32:67:18:bf:59:f5:74:bb:73:91:af:fe:94:fa:
2d:3e:64:a0:df:37:a1:c8:28:db:cc:6c:c3:cb:c0:08:86:7c:
97:56:4c:0c:da:95:35:ca:6e:0a:95:d8:70:f5:da:60:b3:99:
4a:94:09:13:61:f8:ec:55:5c:1e:6c:d7:2b:36:a3:aa:01:be:
63:c5:db:27:a2:ba:8b:20:8b:d4:1d:04:ff:9f:08:22:81:02:
f3:52:00:da:6e:7f:6d:99:c7:8e:4e:d8:f3:d7:cc:f4:fa:77:
ed:11:90:55:6d:29:d0:b8:4f:fd:22:85:4b:39:35:b5:53:45:
b3:fb:17:28:4d:e0:0e:ad:4f:4d:93:78:76:e9:20:05:ac:34:
be:4f:51:85:03:8d:1a:e3:00:1c:a5:d9:9d:81:d6:09:ec:85:
63:00:20:13:c0:63:da:be:08:39:e3:bc:2e:fc:20:4a:94:56:
b7:4a:be:ed:fe:2c:cf:df:9c:88:dd:fb:7e:12:1f:a9:45:ad:
e6:55:c0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:19 2024 by rpki-client on console-fra.rpki-client.org