Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A9A2194A71B11EF8AA6C356762E951A.roa
File: 1A9A2194A71B11EF8AA6C356762E951A.roa (raw, json)
Hash identifier: 0nVddA8fOr5uxVzLU3aBeEIgbK4blG/6g23FCMX2ZOw=
Subject key identifier: D9:DA:89:AF:D9:7B:6F:C6:B3:28:CE:ED:A6:53:8E:DF:E6:87:9A:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A9A2194A71B11EF8AA6C356762E951A.roa
Signing time: Wed 20 Nov 2024 08:40:32 +0000
ROA not before: Wed 20 Nov 2024 08:40:29 +0000
ROA not after: Wed 18 Dec 2024 08:40:29 +0000
asID: 19318
IP address blocks: 156.253.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54699 (0xd5ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 08:40:29 2024 GMT
Not After : Dec 18 08:40:29 2024 GMT
Subject: CN=673da080-d450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:09:f5:74:4d:89:67:66:e2:c5:08:11:5c:
70:ba:45:57:1f:24:85:f2:03:84:59:64:5a:fc:8c:
80:33:0a:68:eb:fa:99:3e:9e:17:6e:18:4a:14:99:
c5:b7:39:4e:e2:53:a7:f9:cc:31:fb:71:ee:40:12:
c2:57:17:bd:49:61:82:e4:ae:72:16:98:d8:da:7c:
ab:26:d4:f6:ed:5d:10:18:79:1e:42:7c:3f:38:44:
40:f5:c0:70:d3:80:ac:19:6d:c7:ad:49:ed:26:57:
79:fc:45:db:7d:4e:2e:e7:f2:52:1f:e1:2f:e1:05:
3e:64:2c:c0:4f:2c:a3:6d:e3:7b:15:7d:49:bf:2f:
bb:41:80:eb:11:ed:5a:fa:b2:12:bc:6e:be:0f:fc:
c5:58:d1:cd:4b:90:a6:9e:c4:97:bb:4b:ad:84:e4:
88:34:e8:81:ab:1f:e9:77:08:e1:7e:b3:c5:2b:99:
79:71:31:1e:96:37:19:2a:9a:ab:91:80:81:04:6c:
7e:2d:03:e1:7c:75:ed:27:44:10:45:ac:d7:76:7b:
60:d8:d6:f5:10:ca:59:b6:e0:5e:f3:a3:c3:e8:23:
6c:20:d3:49:68:dc:b5:28:d3:d9:a2:49:2d:83:b6:
0e:c5:51:9d:14:0e:14:b7:a8:7d:39:e7:0b:a1:7d:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DA:89:AF:D9:7B:6F:C6:B3:28:CE:ED:A6:53:8E:DF:E6:87:9A:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A9A2194A71B11EF8AA6C356762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.240.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:7e:71:7e:fa:6f:d7:82:f9:9e:88:c8:06:0e:9a:8a:d7:f8:
43:99:42:e6:7e:84:67:b7:54:cd:64:ab:54:4b:a1:7e:db:9a:
ee:e3:4d:08:08:c4:b8:d0:53:c4:a0:87:2f:b6:c2:2e:04:44:
fa:dc:57:93:af:65:6d:a3:8a:88:7e:2f:f2:93:5b:e4:ec:bf:
26:f2:a5:a7:9c:1e:06:ae:2a:1c:27:47:f5:9d:be:2d:81:57:
4d:9c:28:ab:ec:5c:59:29:a7:49:26:0e:17:07:a9:16:aa:04:
d2:a2:ba:0e:f9:f5:b7:5c:66:28:eb:fe:a7:50:1d:fe:97:0d:
4d:2e:0b:7b:9d:ad:05:2f:d8:4f:5c:e5:0d:c5:75:54:dd:3f:
b7:a8:ae:fd:f8:e7:50:64:39:10:59:d6:f5:3c:f3:a4:9b:04:
71:c4:32:9e:9e:ea:46:19:2a:a3:4b:0b:19:4c:e4:d2:4c:d1:
1b:2e:40:e3:66:6b:3c:46:52:3b:0c:ec:b6:27:30:81:08:98:
f8:fa:5f:e3:a6:44:80:c7:1c:7c:92:f1:d6:05:44:ab:82:31:
b8:a8:f2:76:ea:2d:ee:29:04:7b:b8:b9:ff:3e:eb:f8:fd:0d:
34:c5:5c:68:9d:63:82:9f:5c:08:ab:1d:80:b7:cc:6a:ae:67:
1f:9c:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:21 2024 by rpki-client on console-ams.rpki-client.org