Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6965AF8AA31211EFB0576588762E951A.roa
File: 6965AF8AA31211EFB0576588762E951A.roa (raw, json)
Hash identifier: UIGQNDxgYKPcqreYWEtF720bT3AIizCUbQis0mX4KUM=
Subject key identifier: A8:32:10:1F:B8:CC:22:0C:57:9B:F7:97:7F:D6:85:C0:BB:D0:4C:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D2D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6965AF8AA31211EFB0576588762E951A.roa
Signing time: Fri 15 Nov 2024 05:28:14 +0000
ROA not before: Fri 15 Nov 2024 05:28:11 +0000
ROA not after: Tue 17 Dec 2024 05:28:11 +0000
asID: 25160
IP address blocks: 156.253.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53969 (0xd2d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 15 05:28:11 2024 GMT
Not After : Dec 17 05:28:11 2024 GMT
Subject: CN=6736dbee-4ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:63:4f:9e:4c:23:e3:e9:1a:bf:06:85:68:
a4:f9:1d:d5:72:27:1a:53:41:0e:5d:a3:bb:4f:4f:
13:f9:d1:2f:7c:28:86:99:7d:16:63:11:43:fe:6e:
a0:0e:36:5c:60:27:15:b8:c4:fa:21:c5:ed:f4:88:
a2:6a:bc:9c:91:60:68:72:06:0f:59:0d:77:39:b3:
e4:57:e9:6a:15:62:0a:e3:56:f5:8e:30:03:13:39:
10:ab:1e:af:80:53:80:c5:0d:f4:42:4b:66:b0:c9:
53:2a:ec:8b:a3:17:63:06:36:f2:4f:e6:c9:36:af:
7d:5c:d9:bc:10:5e:f6:06:c1:31:23:c7:48:b9:3e:
92:31:89:df:f7:42:0b:0f:e1:e8:81:f9:61:b8:fd:
fb:2a:9c:e0:ab:7e:4e:9a:16:77:36:50:46:2b:32:
56:a2:30:ef:36:ea:67:a2:5c:c4:a2:a1:f5:3d:82:
0d:fe:15:22:90:35:e9:f2:cc:78:41:92:35:53:a3:
58:77:82:9f:41:c3:1d:f7:77:a0:3a:4c:cf:80:d3:
05:d3:2f:99:ec:7f:5d:91:cc:43:77:33:1f:32:22:
8b:05:00:ea:f8:79:00:c0:d4:71:74:fc:66:42:d8:
e5:bf:b2:db:79:66:c7:51:d8:bb:dd:c4:cb:0e:07:
91:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:32:10:1F:B8:CC:22:0C:57:9B:F7:97:7F:D6:85:C0:BB:D0:4C:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6965AF8AA31211EFB0576588762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.130.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:27:f0:5e:54:4e:ff:37:89:bc:a2:dd:7a:4e:8a:cc:d4:2d:
30:67:c7:54:4f:40:91:76:ae:0e:15:be:63:eb:06:4f:1d:e8:
db:83:51:2d:19:94:db:ef:1f:41:d2:8f:94:5a:68:f2:77:aa:
d8:dc:63:1e:2f:af:8f:77:06:46:a7:36:e0:16:28:f5:45:79:
c4:a0:f8:c1:5f:5e:96:96:fb:6f:d8:d7:99:a0:65:4f:94:44:
86:b1:1d:9a:ca:3e:4f:a4:02:37:f5:fa:21:5b:0a:ca:15:cb:
98:10:45:6a:d3:d0:08:af:b7:0a:e2:ba:bc:0e:c9:14:f1:cc:
f8:e6:cc:6d:5b:27:b2:af:da:91:2f:87:d9:65:1e:46:8f:1a:
8c:ac:73:dc:36:26:15:fb:90:1c:e1:09:0f:0b:9e:3d:da:6f:
d5:2a:32:ef:3f:11:15:b8:b5:1d:1f:15:b6:76:55:5c:b3:ec:
92:15:43:6e:2d:96:4c:ef:75:74:95:29:12:c9:eb:63:38:72:
84:3a:c7:08:75:1d:75:89:ae:b7:83:5d:1f:fc:51:ac:f2:fa:
a0:4a:83:a1:3f:71:af:3a:3c:a5:56:86:f2:48:ce:5d:ef:41:
fd:bb:ab:ce:92:40:eb:72:20:1e:97:d9:ea:f7:d5:8d:8d:d3:
b3:93:d0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:34 2024 by rpki-client on console-ams.rpki-client.org