Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6517745CA75111EFB6566DA7762E951A.roa
File: 6517745CA75111EFB6566DA7762E951A.roa (raw, json)
Hash identifier: oCYqEeHeG/4IGb+xFzGrxhKPuR7Hp5OclM2Kjs5cs8k=
Subject key identifier: 22:67:6C:11:1C:0C:60:26:BF:B7:FA:85:7B:43:BC:1A:B8:EE:A6:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6517745CA75111EFB6566DA7762E951A.roa
Signing time: Wed 20 Nov 2024 15:09:10 +0000
ROA not before: Wed 20 Nov 2024 15:09:07 +0000
ROA not after: Sat 30 Nov 2024 15:09:07 +0000
asID: 54467
IP address blocks: 156.239.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55026 (0xd6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 15:09:07 2024 GMT
Not After : Nov 30 15:09:07 2024 GMT
Subject: CN=673dfb96-5a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:34:7e:0b:50:cf:24:fb:81:d7:95:a8:7a:de:
a3:e5:bd:6a:2b:18:cc:c5:d4:01:10:1f:a7:83:51:
d4:a8:79:30:cd:f1:e6:b8:a9:eb:39:f5:50:fc:79:
2f:45:34:04:9c:f7:30:ba:29:7b:fb:dc:01:e1:47:
8d:61:5b:bf:9e:91:df:57:4e:22:c7:32:8f:f6:8f:
bd:32:fb:e0:1d:d4:99:6e:3b:3d:7a:6b:ab:14:fc:
b6:4e:7f:04:4c:7b:9d:7b:10:f2:75:7c:17:c0:00:
98:fc:20:4e:93:e5:e5:04:3c:9b:22:34:71:60:64:
f2:ac:1d:c5:a0:6d:aa:aa:e7:1b:05:e1:cd:4c:52:
62:fe:32:57:56:74:20:9e:d8:0e:b2:e5:06:34:97:
15:9a:40:b5:5d:bf:41:ac:6e:0a:73:19:48:3b:8e:
86:b2:d0:36:39:c1:58:21:d7:b9:d3:5c:5c:e8:f4:
4b:a4:d8:fb:90:d5:8a:9e:ae:97:a0:fd:fb:a7:4e:
24:56:fa:5a:ae:f9:66:aa:2f:05:ad:ea:43:a9:e6:
c4:2a:01:84:ff:29:05:81:e8:3a:e4:cf:97:de:a7:
cf:69:20:91:86:bd:f1:fd:66:5c:06:10:61:27:01:
d0:66:8e:1d:db:24:40:6e:48:2c:75:e6:18:e6:45:
d7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:67:6C:11:1C:0C:60:26:BF:B7:FA:85:7B:43:BC:1A:B8:EE:A6:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6517745CA75111EFB6566DA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.0.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:f1:31:c6:8e:a6:76:41:0f:10:99:23:48:27:9e:06:e3:3a:
d4:5e:f8:55:52:fc:9e:84:2e:0e:86:22:dd:71:1b:b1:56:8c:
45:2d:70:d9:2a:49:3d:36:e6:98:fe:3c:c8:45:3c:7b:66:f4:
10:3b:c4:cd:6e:a0:f6:08:1b:c7:b8:7d:81:0a:21:32:86:83:
fc:5d:83:b5:44:75:11:81:4c:e9:6d:ed:77:5c:ed:e6:7d:d8:
ac:0e:44:39:3e:e5:5e:b9:69:5f:bb:e2:fa:b0:3f:81:ac:99:
5a:74:b6:af:32:9d:00:b5:9a:69:4f:7a:d6:f8:6e:60:a5:6f:
a4:f8:4f:03:f8:6b:2c:61:5b:57:ad:c0:de:c2:66:3a:65:be:
8e:fb:30:72:89:62:13:87:85:1f:5e:74:fc:18:0f:da:57:77:
ce:31:ae:eb:79:53:7c:bd:e8:b6:89:2f:43:4c:70:ac:ef:78:
4f:3a:7f:4e:e0:b6:be:e9:25:e7:6d:d0:12:6f:2e:f8:cf:60:
e3:8f:e3:c2:89:7d:61:ee:59:25:41:11:ba:5e:3d:38:1a:d6:
10:ef:29:5e:65:b6:e6:e0:75:dd:45:75:cc:ec:91:b1:fd:9f:
5a:c1:05:6b:21:69:d4:d5:23:76:3a:83:86:f9:86:b2:ae:e4:
71:23:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:33 2024 by rpki-client on console-ams.rpki-client.org