Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A456BB476AA11EFAE292A74762E951A.roa
File: 6A456BB476AA11EFAE292A74762E951A.roa (raw, json)
Hash identifier: 5uk4QszCyBAYi7XR1rZtL2LUbnUgj5CDjcDgulR7tLs=
Subject key identifier: 7C:87:4E:1A:3C:4A:2B:33:8E:D2:8D:1F:01:96:EC:AA:D1:AE:05:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B8D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A456BB476AA11EFAE292A74762E951A.roa
Signing time: Thu 19 Sep 2024 17:12:57 +0000
ROA not before: Thu 19 Sep 2024 17:12:53 +0000
ROA not after: Sat 28 Dec 2024 17:12:53 +0000
asID: 132839
IP address blocks: 156.242.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47320 (0xb8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 17:12:53 2024 GMT
Not After : Dec 28 17:12:53 2024 GMT
Subject: CN=66ec5b99-72a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:59:96:73:a0:66:eb:c7:b3:f8:42:63:d3:
00:2e:c1:57:00:7c:dc:66:2b:cd:ff:3e:ca:0a:a9:
6a:e9:ae:0d:f7:b0:3e:1d:65:ff:f6:69:70:e6:a1:
e4:b3:8a:cb:60:a1:96:c3:56:c1:b5:2d:70:01:02:
99:68:ab:22:e4:3e:54:4f:5c:1c:68:6e:6f:d8:49:
1d:e6:7a:5a:34:82:ea:56:aa:55:7f:df:49:ab:0e:
1e:85:bc:b2:a2:85:05:34:29:c1:64:81:2b:7f:40:
ee:f2:49:48:ee:84:25:b0:06:7d:cb:38:07:74:2c:
50:18:2d:fa:6e:54:0d:26:de:5f:5d:d2:10:3d:88:
b3:5b:6c:1a:63:a6:48:18:a5:be:12:60:6d:a0:b2:
f2:3e:00:4a:b1:81:d4:e8:00:39:62:d3:f7:3a:9c:
de:dc:42:d4:8e:be:83:14:05:7d:d1:78:24:a4:80:
4a:aa:ce:98:fb:7b:76:0c:de:a9:42:75:10:59:c7:
84:db:99:e8:0f:95:ad:d2:0b:03:81:86:da:62:1b:
8e:cf:c7:91:79:fa:c1:08:9d:9a:39:42:a5:a7:bc:
d9:87:73:df:f4:c3:c1:ed:95:ea:3e:55:57:e1:69:
ef:dd:af:c8:e0:37:79:fe:aa:7e:e0:5d:a5:fb:11:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:87:4E:1A:3C:4A:2B:33:8E:D2:8D:1F:01:96:EC:AA:D1:AE:05:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A456BB476AA11EFAE292A74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.160.0/19
Signature Algorithm: sha256WithRSAEncryption
69:db:45:1a:a9:17:7e:41:78:8a:4a:13:f8:8d:53:fa:dd:e5:
17:e1:44:0c:ac:5c:88:6a:9e:da:3a:6a:ec:ad:eb:57:80:51:
a4:fd:c4:08:e5:cb:ee:d7:f5:23:62:9f:83:24:ab:77:19:3c:
69:55:1d:30:45:4a:98:00:ee:85:2b:36:b5:6f:6b:a8:06:be:
c0:c4:27:53:03:5b:11:8c:fa:ea:94:91:d1:ea:4e:d6:45:71:
1f:1b:e7:ac:eb:8e:e9:4e:8f:ca:0f:9a:8f:6a:7c:d4:dc:80:
fd:15:b9:69:85:c7:1b:36:ec:d1:68:0b:ca:11:48:21:ee:1f:
b2:97:72:bc:78:b3:46:6d:8e:ea:8b:6d:35:ae:00:e0:85:51:
78:9b:91:a7:ec:b0:e8:60:f7:c0:5b:09:12:33:87:50:92:62:
25:df:f3:f8:91:b0:d0:94:47:fc:e3:42:f0:33:2b:c9:38:6a:
85:a4:32:18:e6:fd:11:8b:08:62:89:be:55:13:d0:94:84:df:
3d:51:58:0c:db:94:3b:4b:bb:78:2b:c7:41:f4:8f:97:81:a8:
7b:8d:17:e1:ba:d8:d5:c2:0b:7f:46:12:93:2a:dd:1d:04:27:
fb:aa:29:b5:0d:6f:7b:85:a8:27:f8:f6:d4:7f:61:22:3d:0d:
d0:c3:5a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:33 2024 by rpki-client on console-fra.rpki-client.org