Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39BCDA7A766B11EF8916A36A762E951A.roa
File: 39BCDA7A766B11EF8916A36A762E951A.roa (raw, json)
Hash identifier: mkHrBigoSIn1IxV96jbkGOvJzNesFMwu2tOU5xbZFbc=
Subject key identifier: CD:F5:AC:11:0D:F6:53:2F:81:DA:C9:D7:DA:4F:3C:59:B4:AC:02:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B81D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39BCDA7A766B11EF8916A36A762E951A.roa
Signing time: Thu 19 Sep 2024 09:40:37 +0000
ROA not before: Thu 19 Sep 2024 09:40:34 +0000
ROA not after: Fri 08 Aug 2025 09:40:34 +0000
asID: 133861
IP address blocks: 156.245.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47133 (0xb81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 09:40:34 2024 GMT
Not After : Aug 8 09:40:34 2025 GMT
Subject: CN=66ebf195-71a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:63:2d:c9:fb:55:33:65:78:2f:6b:3e:1f:
b3:01:02:f5:da:2f:fb:a1:50:4c:f5:ec:09:8b:38:
e4:b5:0d:72:77:57:7d:19:7c:cc:95:eb:7c:98:e1:
d9:65:14:7b:48:16:0b:0e:68:86:76:36:c6:26:fe:
7a:b7:b4:90:2b:9d:32:ac:65:f3:4e:26:a2:61:70:
12:25:6a:e1:3c:a3:a6:dc:53:18:42:44:14:56:cf:
31:c6:03:5f:e5:39:18:4c:ab:fd:2f:04:73:a7:34:
b7:38:57:54:b0:44:90:fa:1a:30:76:7c:e4:00:0d:
38:6e:dc:db:f1:c5:41:22:3b:a5:99:ff:9e:79:6d:
55:eb:f9:75:2b:bf:61:53:59:cc:02:24:87:ea:92:
51:3e:b6:33:08:3a:4b:ec:68:35:24:69:4f:99:12:
93:85:07:e3:bf:6b:f4:b0:35:75:fd:86:fc:5c:86:
3c:26:6f:8c:a8:dd:2e:d3:f9:e3:b2:f2:eb:43:fe:
7f:7e:a1:23:01:86:2a:f1:5f:28:72:ff:3e:d2:9d:
35:bd:17:3d:93:12:e9:18:36:39:eb:4f:4f:85:85:
ef:5a:ff:ea:ff:62:18:ad:da:44:f0:11:79:3d:df:
12:a9:72:e2:b6:61:63:c3:2d:40:fa:00:65:a4:e6:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F5:AC:11:0D:F6:53:2F:81:DA:C9:D7:DA:4F:3C:59:B4:AC:02:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39BCDA7A766B11EF8916A36A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:d7:71:c3:c5:5b:c7:25:cc:f9:01:63:65:5d:a9:f9:01:77:
af:fe:e9:f3:46:32:f4:7a:6d:1e:48:bc:67:59:90:8c:da:65:
7a:80:3c:65:02:aa:ec:cd:f9:8b:f6:18:de:cb:da:70:ff:fe:
5c:d1:fb:eb:7e:24:3b:89:9a:4a:73:09:a8:6c:85:cc:cf:1d:
a3:9e:fa:71:67:a7:91:a5:11:0f:29:f1:de:f0:40:b4:16:0f:
44:ee:83:06:d1:87:7a:21:b7:cb:5b:2a:7c:3b:9b:11:cf:6d:
01:6a:a3:d3:fe:a0:2d:1a:52:c1:66:51:20:73:1e:e6:46:d2:
95:01:d2:db:99:25:01:f4:9d:53:a4:18:50:15:2a:aa:58:df:
3e:e7:95:03:22:45:d9:61:13:ed:98:d3:c3:67:22:0c:18:ed:
08:fd:59:be:bf:52:f1:91:76:6c:c3:fb:c9:38:0a:fd:bb:be:
5d:49:49:77:96:4f:95:71:dd:97:d0:49:af:1f:6b:b2:68:01:
6f:a5:a6:27:26:94:e6:72:95:b0:f1:a6:e6:20:9e:64:ca:52:
f6:d3:1f:20:d8:c0:a7:c2:4c:22:7d:49:c6:72:94:04:2a:a9:
0c:f1:d9:ab:7a:d8:3b:d9:1e:38:f1:aa:f9:60:0c:4c:90:93:
bf:d2:b5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:25 2024 by rpki-client on console-fra.rpki-client.org