Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63AC75FC5DF711EFA06EF6A8762E951A.roa
File: 63AC75FC5DF711EFA06EF6A8762E951A.roa (raw, json)
Hash identifier: aHPt0KhwiGsNnMEV9D4/o0mnTeIFEeWMZZWVufL88t0=
Subject key identifier: 03:FE:1A:3D:DA:7F:9D:82:28:DC:95:70:81:BB:75:E2:C0:69:79:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A879
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63AC75FC5DF711EFA06EF6A8762E951A.roa
Signing time: Mon 19 Aug 2024 06:50:58 +0000
ROA not before: Mon 19 Aug 2024 06:50:55 +0000
ROA not after: Fri 08 Aug 2025 06:50:55 +0000
asID: 9318
IP address blocks: 156.235.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43129 (0xa879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 06:50:55 2024 GMT
Not After : Aug 8 06:50:55 2025 GMT
Subject: CN=66c2eb52-3954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:17:74:ba:5a:92:23:62:4d:43:ce:9d:4a:
04:f6:70:0c:96:66:50:01:c3:82:2a:64:ce:c6:ce:
72:9e:49:52:7c:6f:41:33:7c:b8:71:51:fc:e3:5f:
50:8f:a1:68:65:63:ca:2f:bc:73:d6:e5:c2:ae:20:
b7:e6:be:02:2a:6e:32:f0:4b:69:98:e9:f7:21:f9:
23:9f:ea:7e:86:4e:bc:ca:fc:d4:1b:d1:12:7b:db:
d5:58:47:ff:b1:28:e7:f1:77:03:26:dd:77:4b:49:
dc:e2:41:ce:42:3a:47:9f:83:54:13:d1:ee:6a:fb:
16:2c:9a:c3:87:99:b4:45:20:6a:ad:90:0f:29:ae:
62:bf:f4:c0:53:79:12:bf:bb:ed:9a:83:49:fd:71:
13:1f:56:76:83:d5:9b:42:d5:a7:d3:a5:62:77:b5:
b7:19:dc:bf:41:a6:6c:5e:b3:da:0b:9a:a7:b1:8e:
a4:98:b9:aa:d0:73:fc:19:c7:e7:32:20:a2:1e:59:
2d:32:9e:dd:8c:6a:dc:c8:c7:34:77:14:1a:b2:42:
ec:86:a1:f9:ba:51:ba:fd:58:ba:51:df:25:e5:82:
12:2c:f2:12:47:b4:8e:3d:10:2b:81:b4:88:9a:62:
e2:c3:e6:39:c9:dd:ea:00:b0:81:da:bb:c1:c4:d1:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FE:1A:3D:DA:7F:9D:82:28:DC:95:70:81:BB:75:E2:C0:69:79:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63AC75FC5DF711EFA06EF6A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.120.0/23
Signature Algorithm: sha256WithRSAEncryption
03:a6:d2:81:fa:03:ee:d6:b2:08:b0:77:23:ec:91:b8:5a:73:
5b:1e:c9:63:8f:79:68:0e:f0:0f:7a:4e:c5:27:36:9f:f7:b2:
15:70:bb:8f:88:d7:df:7b:a7:1e:84:23:84:25:56:78:8c:d9:
4d:3a:1d:89:da:b1:7b:86:ac:57:b2:fe:cc:b3:c1:2b:c4:c7:
9b:1d:c0:de:cb:ee:ff:5d:30:2b:57:46:77:e3:31:fb:32:43:
0e:97:a3:89:63:6a:7f:5f:5d:b4:98:df:48:cf:05:39:9d:7c:
76:f3:c9:87:de:59:e8:17:70:3d:f5:d0:90:96:e1:2e:04:f1:
e7:e4:e6:09:fe:55:02:cb:af:65:d6:e3:d5:d9:ae:54:5a:1b:
08:53:9d:79:5c:59:b4:46:6a:d0:d3:79:d0:23:ec:ca:b0:66:
23:1c:e8:cc:c8:fd:06:37:3f:75:22:07:31:9d:0a:1c:eb:8c:
e0:a9:82:76:55:1b:99:0d:f7:e7:88:82:b8:d9:2e:f0:ed:36:
3e:cc:9b:e8:b0:a0:87:22:78:02:1d:c4:4e:10:2d:ff:6c:df:
0c:ed:b7:44:2f:9e:bc:28:55:02:51:2b:9d:a5:12:0c:7f:d7:
97:f0:8a:8d:65:c1:56:11:83:10:c4:e2:43:d0:54:2c:9a:6a:
d4:2a:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:33 2024 by rpki-client on console-ams.rpki-client.org