Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/690B2E646A6B11EF881ACF9C762E951A.roa
File: 690B2E646A6B11EF881ACF9C762E951A.roa (raw, json)
Hash identifier: bpFgJ2/DNX7wcgKxXSLb5eAJUA915yGKYFTiZFtCO1I=
Subject key identifier: D2:FD:07:18:70:D5:7C:BD:E8:0F:82:70:D5:0F:88:C7:79:AD:FB:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B197
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/690B2E646A6B11EF881ACF9C762E951A.roa
Signing time: Wed 04 Sep 2024 03:11:43 +0000
ROA not before: Wed 04 Sep 2024 03:11:40 +0000
ROA not after: Mon 30 Dec 2024 03:11:40 +0000
asID: 17561
IP address blocks: 156.240.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45463 (0xb197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 4 03:11:40 2024 GMT
Not After : Dec 30 03:11:40 2024 GMT
Subject: CN=66d7cfef-44c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:12:c9:48:e9:3e:a0:c6:65:ca:ab:ba:94:
c8:22:3f:27:e5:16:4d:2d:08:7b:2a:a6:fa:79:ea:
20:3c:e8:bc:e4:d2:cf:a8:4c:8e:16:49:80:e5:89:
ff:29:7f:26:4a:3c:94:9f:ac:7f:ea:77:14:05:92:
db:b2:69:d2:35:db:2c:a9:1e:dd:45:a3:df:bc:e8:
8b:a7:3d:f5:1d:2c:b8:39:5d:ec:a4:87:5c:c6:ee:
26:bc:8c:33:55:2c:a9:ca:e0:17:2c:dd:01:f4:94:
a5:b6:37:3c:26:02:04:29:d3:5f:05:35:a7:e4:cd:
4f:5f:cf:82:f5:bf:a4:88:a5:50:f5:90:f9:4c:e2:
3b:b1:01:84:76:eb:6a:67:50:3b:62:85:73:aa:2a:
30:0b:1b:71:bb:e9:0b:27:d4:78:bd:c8:a8:f2:29:
2e:ff:53:18:f3:80:86:bb:98:29:94:c2:39:84:18:
52:36:4e:9d:4e:ce:f9:02:7e:3a:7c:9d:ef:4b:94:
c5:5f:fa:21:69:39:44:0a:88:43:cc:16:36:95:e1:
1d:20:7f:25:7d:df:d0:32:ca:9e:83:48:a7:5c:ff:
74:e3:bd:f8:28:66:b6:86:08:75:99:55:11:8a:50:
f3:cb:db:8a:40:b2:e3:91:46:18:ce:b3:30:ea:83:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FD:07:18:70:D5:7C:BD:E8:0F:82:70:D5:0F:88:C7:79:AD:FB:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/690B2E646A6B11EF881ACF9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.112.0/20
Signature Algorithm: sha256WithRSAEncryption
54:f4:85:9d:46:94:a7:4d:67:e0:d5:02:0e:a2:7c:7f:55:c6:
41:d2:9c:e5:8c:b7:d5:2f:b4:54:7a:e1:0e:f3:6e:ef:d4:74:
fe:fe:5c:fd:15:22:50:bd:50:16:11:99:2e:b3:c1:6b:06:c8:
bf:14:28:26:41:5f:c4:01:fb:a5:50:3f:fe:55:0c:9b:d1:47:
4b:1c:f5:19:76:48:12:96:ea:54:fa:cf:f3:78:df:20:57:17:
d7:41:99:ed:ba:32:2f:fc:b6:d3:c9:16:31:45:b1:ca:5f:18:
e5:91:74:dd:db:3b:30:e7:94:58:07:4e:02:7f:7b:3b:e0:fc:
42:ee:7f:7b:50:04:3e:76:2d:66:53:ce:ab:d4:6b:1e:b3:8d:
b9:5d:b8:ab:82:38:6c:4c:91:c8:c1:f8:a1:d9:63:21:a6:35:
e6:71:3e:b5:78:6f:9c:c5:2a:2b:18:31:d5:a5:a5:35:af:7c:
df:4c:fb:8b:f7:39:eb:36:ae:e0:83:4e:7b:9f:24:d5:a4:09:
ec:11:67:df:12:a2:96:90:7d:7c:f1:a2:04:0c:3a:52:c9:5c:
b0:22:6a:c0:75:43:79:51:37:17:6f:bb:18:27:dc:c1:24:d2:
5f:d0:40:57:db:f0:5e:a7:ce:0f:14:39:c9:76:91:d2:c8:f4:
8e:f5:0c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:33 2024 by rpki-client on console-fra.rpki-client.org