Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/432BD436A4C311EF86FFDCA0762E951A.roa
File: 432BD436A4C311EF86FFDCA0762E951A.roa (raw, json)
Hash identifier: l0pxfpPTyVsyVFbyb8VfRE7T20ExJiJYRP1OyMMSw2I=
Subject key identifier: 7D:19:CA:AD:ED:73:F7:B5:D6:99:AF:78:15:2C:49:1A:E3:BE:BB:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D477
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/432BD436A4C311EF86FFDCA0762E951A.roa
Signing time: Sun 17 Nov 2024 09:06:42 +0000
ROA not before: Sun 17 Nov 2024 09:06:39 +0000
ROA not after: Sat 23 Nov 2024 09:06:39 +0000
asID: 54467
IP address blocks: 156.247.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54391 (0xd477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:06:39 2024 GMT
Not After : Nov 23 09:06:39 2024 GMT
Subject: CN=6739b222-ea9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:5e:1a:ad:9d:a2:52:94:97:20:c2:95:ac:
4d:7f:0e:3b:ac:fd:b3:e0:42:aa:cc:7d:99:61:e3:
57:e5:21:8a:16:1d:c5:fc:99:39:d9:5f:06:83:1a:
6b:3f:78:9d:f5:f0:cb:3b:e4:80:02:7d:93:64:51:
8e:06:46:ef:e7:3f:c2:7e:1a:69:26:01:18:88:05:
86:42:2d:0c:da:3f:c4:10:4d:d4:77:c3:ab:a3:f0:
c0:67:34:60:d4:58:36:be:a8:2a:31:99:b7:86:24:
d5:c6:f9:1e:40:45:f3:b5:2e:b2:66:cf:54:c7:9f:
28:63:90:95:a3:3b:53:4f:df:35:f8:56:7d:99:57:
d0:30:92:a9:fe:c2:2d:70:ed:ec:d5:c5:d2:69:8a:
ec:72:26:20:64:57:1a:c1:d8:d5:f7:c8:5b:8d:2a:
10:96:3a:bc:a2:dd:0c:3d:6c:8a:a3:b0:57:ef:17:
fc:42:bb:12:ec:26:37:7e:38:73:6c:28:5a:57:bd:
22:2d:14:02:cd:b4:9f:64:b5:5b:00:f6:01:7e:a6:
24:8a:cb:ce:8d:a1:8b:ee:aa:a6:28:09:e4:0a:22:
46:ee:d0:5a:08:d7:37:8c:93:67:20:77:b3:4e:02:
bd:3a:44:9b:45:9a:45:44:cd:2b:53:bd:18:0b:c8:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:19:CA:AD:ED:73:F7:B5:D6:99:AF:78:15:2C:49:1A:E3:BE:BB:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/432BD436A4C311EF86FFDCA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.48.0/20
Signature Algorithm: sha256WithRSAEncryption
20:b5:cc:ae:78:ec:6c:9c:44:a0:0a:04:8b:c8:23:19:87:2e:
ef:ec:55:87:ef:c8:b2:22:1c:3c:a3:7c:0c:ce:eb:81:98:3c:
ef:2b:d8:f4:d6:c7:ae:ad:ed:0b:d6:73:14:ce:f4:96:fa:f2:
f8:d9:d6:2a:c4:34:b6:31:5f:c6:3a:44:9d:7f:b7:32:ac:87:
b1:11:be:a7:79:a5:3b:3b:30:4f:5c:5f:12:71:b2:e7:51:46:
f3:dd:42:61:c4:7f:b3:0a:f1:9f:3a:c4:7c:00:01:c6:93:49:
e0:46:52:85:6a:3d:fb:a9:f7:16:fc:1e:8a:56:88:2c:56:ce:
03:46:e5:89:bd:85:c8:34:fb:cd:04:18:02:af:32:74:e2:44:
fd:86:37:cb:ac:84:98:ef:77:82:20:f2:04:e8:a7:9e:59:68:
fc:90:2a:1e:44:38:75:ba:5c:9a:22:0b:eb:e4:53:26:94:48:
d5:ee:19:bc:e3:84:dd:dd:b9:43:15:68:ac:52:06:16:24:09:
4b:8f:be:b4:88:ea:e0:13:0f:30:b2:9d:06:b6:9c:b0:9f:88:
26:35:c1:f0:cc:ce:85:50:15:65:aa:64:7a:5d:4f:a6:0b:b8:
74:23:72:c8:cf:e2:e8:8f:d3:11:59:28:1b:48:01:2c:e2:49:
26:6e:e2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:27 2024 by rpki-client on console-ams.rpki-client.org