Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FE6D32EA75211EF862C0EAE762E951A.roa
File: 4FE6D32EA75211EF862C0EAE762E951A.roa (raw, json)
Hash identifier: 9MWosystiAygcl7INRQ+YIjot9X3tijj4FEzzSd+W3s=
Subject key identifier: FE:0A:59:12:65:F7:9C:05:F8:BA:2B:D8:F3:91:28:ED:8E:1E:DA:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FE6D32EA75211EF862C0EAE762E951A.roa
Signing time: Wed 20 Nov 2024 15:15:44 +0000
ROA not before: Wed 20 Nov 2024 15:15:40 +0000
ROA not after: Sat 30 Nov 2024 15:15:40 +0000
asID: 54467
IP address blocks: 156.247.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55036 (0xd6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 15:15:40 2024 GMT
Not After : Nov 30 15:15:40 2024 GMT
Subject: CN=673dfd20-5370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:40:80:26:70:a1:17:91:98:72:11:c7:85:
12:f5:c6:59:d5:b3:b3:78:41:1f:86:a1:f7:a0:19:
df:b0:d2:95:f7:51:b1:ac:a1:bf:17:8a:34:a5:69:
94:36:b1:36:8a:df:2c:03:42:e7:b2:44:88:5a:6f:
69:fa:02:63:9d:6b:aa:57:9f:ff:7c:63:0d:78:c0:
64:b5:bf:03:05:63:96:3d:3f:58:97:a2:b0:38:69:
ea:52:7b:dd:bb:9a:c7:75:8c:66:76:e9:d1:91:17:
86:39:cb:ec:a5:aa:18:1f:70:fb:10:6d:43:7c:e3:
16:75:11:7d:7e:c7:d3:ec:39:d0:60:6d:21:97:a3:
15:76:75:46:54:42:e6:35:d7:b9:9d:17:8a:8a:25:
f3:81:1f:05:1c:e9:11:ef:f6:98:c7:3d:94:03:02:
5d:be:a6:aa:4d:2d:32:76:e6:36:21:b2:01:cf:4d:
0f:00:81:31:66:bf:c9:9b:83:a6:c5:43:dd:79:0a:
9a:2f:2f:12:5b:9b:e1:67:24:dc:fb:b9:54:45:05:
c0:21:95:03:7f:f9:80:a1:11:c0:46:10:e7:28:a8:
2f:8d:06:e4:d9:ec:97:f7:f5:80:87:e3:bb:1e:88:
6a:97:a8:11:31:94:70:8e:70:f1:be:0e:36:e5:6b:
88:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0A:59:12:65:F7:9C:05:F8:BA:2B:D8:F3:91:28:ED:8E:1E:DA:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FE6D32EA75211EF862C0EAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.48.0/20
Signature Algorithm: sha256WithRSAEncryption
35:5f:d4:45:43:09:e4:81:13:36:30:6a:02:56:b8:72:76:c2:
87:2d:b1:3f:2d:70:30:55:ef:d6:6c:38:f5:7a:b1:20:26:86:
58:d1:1d:27:80:31:6b:94:ad:c2:d7:f5:33:4e:1c:46:36:c9:
40:db:5d:32:e7:ae:49:2d:e1:51:b2:ce:f7:c6:d0:84:40:dc:
84:05:30:7b:55:75:2f:ae:a7:1c:b0:a0:2e:34:c5:e1:a9:7a:
a3:52:dd:9b:b4:f8:42:ee:1c:81:82:85:76:a0:e2:1a:38:21:
ac:82:c5:fa:e8:9f:16:4a:45:6a:41:14:12:b8:80:58:53:89:
1c:20:52:66:68:ff:55:98:19:e2:47:43:4b:24:95:ce:07:8f:
91:55:71:3c:5b:91:38:d3:15:37:fb:d6:bf:d1:58:4b:eb:20:
e1:78:7e:fb:d0:76:8d:aa:53:13:16:8b:8e:5a:d0:68:cb:b3:
1a:6c:5f:35:9b:3f:35:23:a6:d7:08:6e:3d:de:24:c4:f0:38:
2f:23:bf:8d:73:11:3c:3f:3f:c3:13:8d:8a:2c:9d:c8:31:00:
ff:15:b0:db:fb:c9:44:e6:f2:59:eb:e1:55:77:12:00:4b:1b:
00:e8:f4:10:4c:e9:4c:d2:f6:b8:1a:fb:d2:25:f6:a4:27:75:
1e:93:37:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:28 2024 by rpki-client on console-fra.rpki-client.org