Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65E7830AA0E311EF9F3C9C8C762E951A.roa
File: 65E7830AA0E311EF9F3C9C8C762E951A.roa (raw, json)
Hash identifier: 08qxaZOYVOTqczE1hVyXJgwO71xGWsl4PidG8XuFGUM=
Subject key identifier: F0:31:9E:F7:9B:1E:9C:A2:AF:66:47:08:03:57:59:56:8A:AA:3C:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D1A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65E7830AA0E311EF9F3C9C8C762E951A.roa
Signing time: Tue 12 Nov 2024 10:46:40 +0000
ROA not before: Tue 12 Nov 2024 10:46:36 +0000
ROA not after: Fri 22 Nov 2024 10:46:36 +0000
asID: 7018
IP address blocks: 156.238.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53667 (0xd1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 10:46:36 2024 GMT
Not After : Nov 22 10:46:36 2024 GMT
Subject: CN=67333210-8c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:e0:1e:c4:95:4e:19:70:97:c6:a3:1f:21:
1b:e9:68:a6:af:e9:91:94:86:93:f4:55:19:f7:9a:
6b:29:92:7a:1c:73:1a:7c:f1:77:24:24:8f:9c:de:
44:03:73:34:1f:47:37:4f:64:7d:07:a0:06:bb:f2:
15:2c:63:7e:fa:c0:3d:9e:84:82:70:40:9a:03:ac:
27:66:be:9a:d8:bc:d2:13:e7:ec:d9:35:bc:37:d7:
87:93:18:ed:f8:a9:3f:fc:af:7c:a1:2a:7f:7e:8b:
cf:fc:a3:42:72:14:d5:d3:76:7e:42:2a:d3:ef:b4:
24:6e:a4:fa:db:2f:6a:87:e8:27:ff:0d:85:c5:5c:
3c:28:5b:0e:6d:4f:b3:c7:b2:a1:23:56:01:99:48:
62:d1:2e:6a:cc:a9:16:1c:10:86:ac:eb:29:d3:e1:
46:1e:ef:f6:fe:68:43:9d:54:31:75:02:a1:6d:12:
23:05:35:b0:9a:8e:4f:64:63:49:f2:62:d5:ee:45:
98:54:8a:a8:94:bc:1b:01:f0:96:70:3f:d7:fa:f5:
01:da:ee:41:ce:22:5d:85:39:78:ec:46:b0:71:d4:
ba:a3:3b:fb:c8:0f:61:07:92:1a:e1:3a:a0:b6:f0:
04:7b:a5:5a:76:bf:c9:89:ea:a1:d4:ed:3c:d0:93:
0e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:31:9E:F7:9B:1E:9C:A2:AF:66:47:08:03:57:59:56:8A:AA:3C:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65E7830AA0E311EF9F3C9C8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.120.0/21
Signature Algorithm: sha256WithRSAEncryption
76:84:8e:a2:44:83:82:98:f6:c0:95:63:22:75:d1:7c:fe:39:
85:eb:ff:8f:99:50:d7:2c:47:d7:48:56:14:ed:45:43:1f:01:
59:36:e1:eb:d2:8c:47:93:e3:c9:c3:7c:3f:28:55:b8:d3:c4:
da:90:74:78:60:00:81:b1:cc:db:4d:d8:9a:27:26:10:be:70:
0b:6f:38:c7:95:f1:a0:c6:3d:5a:86:91:c9:15:3e:e5:77:c5:
44:17:7e:08:0e:00:ef:a6:3c:3c:17:6e:18:f7:be:84:fe:b5:
ad:6c:4b:ab:09:11:92:7a:ee:ee:4a:f5:b6:e4:5c:a3:24:f7:
9e:bd:d0:38:03:73:e3:86:f0:26:7c:7d:00:8d:f5:f7:85:05:
51:51:cd:e8:9f:28:7f:cd:4b:7b:53:dd:3b:57:dd:f1:65:6c:
83:5d:87:f2:cc:8c:ad:4a:53:91:a6:69:dd:14:23:b2:77:ce:
f3:aa:50:8b:5d:64:71:94:70:ab:e8:74:e9:3b:ba:1c:84:7f:
d6:f9:13:f9:52:d3:a7:6a:cf:a0:33:a5:e6:54:17:45:d0:ff:
7d:f0:1f:16:4c:a3:c9:6c:81:83:46:d8:c8:ba:27:0e:fe:2d:
90:2f:2a:75:4d:7a:5e:d9:b3:cd:24:66:40:6b:05:55:52:78:
46:ef:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:33 2024 by rpki-client on console-ams.rpki-client.org