Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A4A01D2A4C311EF980515A1762E951A.roa
File: 6A4A01D2A4C311EF980515A1762E951A.roa (raw, json)
Hash identifier: NTtWOhio5FL3zBRhHNw47TLoKYeAYR5bnayDMNUUzt4=
Subject key identifier: 7F:BF:D1:F3:EB:91:E0:C3:0F:E5:6D:9C:FB:89:76:B3:D6:43:C7:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D479
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A4A01D2A4C311EF980515A1762E951A.roa
Signing time: Sun 17 Nov 2024 09:07:48 +0000
ROA not before: Sun 17 Nov 2024 09:07:44 +0000
ROA not after: Sat 23 Nov 2024 09:07:44 +0000
asID: 54467
IP address blocks: 156.239.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54393 (0xd479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:07:44 2024 GMT
Not After : Nov 23 09:07:44 2024 GMT
Subject: CN=6739b264-f591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b4:67:62:c9:a3:3e:2d:0d:81:3b:6b:2b:32:
d7:be:e6:f6:e8:ac:fe:12:d9:d0:db:77:5d:5e:ab:
0f:70:95:2c:4b:53:b0:1c:29:87:26:57:3f:d6:2d:
01:63:7d:7e:40:a0:05:55:08:65:89:b9:53:86:5a:
5f:87:e4:9a:92:8b:4e:da:33:d4:1b:8a:81:3a:96:
fd:fd:6d:21:aa:3c:14:fa:eb:2f:64:ca:fa:1a:b5:
ff:d5:51:86:b2:a0:d9:48:7b:da:e0:0d:c6:57:b7:
96:9d:28:80:db:f0:37:a7:ec:fc:ae:8f:95:4c:2d:
00:0c:ee:82:c6:b8:04:98:f8:a0:df:00:d6:c8:06:
1b:74:24:f6:49:7c:1c:9c:ab:35:21:07:fe:60:61:
bd:07:5c:89:02:26:5f:51:49:52:9f:2d:8b:12:28:
1a:9b:57:c9:37:2c:fc:27:60:8d:88:25:21:a5:28:
f4:e6:6d:6a:51:dd:cd:a2:f3:e2:aa:e1:9a:39:cb:
81:5b:ba:dc:8c:ad:19:8e:ad:87:49:fb:16:1d:d6:
e8:8a:ae:fe:53:1f:37:31:d0:87:74:b8:cf:1b:1f:
cd:d8:c0:9e:e4:7c:3a:ec:0b:0d:f7:dc:3a:a7:1f:
c6:8d:6e:a8:27:23:95:94:61:a7:02:e1:ac:d2:79:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BF:D1:F3:EB:91:E0:C3:0F:E5:6D:9C:FB:89:76:B3:D6:43:C7:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A4A01D2A4C311EF980515A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.0.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:81:6c:d3:b5:53:0a:5c:13:69:62:c2:11:42:fa:f0:91:65:
50:72:e0:2e:14:31:82:e1:24:ac:37:81:dd:ec:03:88:ad:49:
69:f2:b7:7c:bc:c3:cd:be:6c:5f:8b:d5:ea:49:08:c7:16:f8:
1c:55:57:00:6b:9c:2c:6e:55:f9:f9:42:18:75:37:33:6f:14:
8b:8c:f8:3b:54:bd:d2:d3:3f:4c:30:4a:87:ba:76:f8:2d:3c:
4f:e9:7a:c3:19:1f:4d:67:91:fb:45:0c:ad:04:35:a3:76:6d:
5c:af:fe:01:0f:f4:73:6c:a0:ae:6c:c9:8d:be:16:28:d1:8c:
a7:f2:1a:65:90:2f:20:3a:e1:54:26:c4:f7:77:df:f5:77:87:
f3:f5:0b:1d:3f:21:29:55:9b:21:67:58:fc:0f:5d:53:13:2e:
d1:13:06:1b:de:e1:3b:f8:87:b1:6c:7f:fd:f4:57:7c:e7:f8:
42:77:d8:2f:b9:87:e4:38:12:77:d0:4b:3d:51:50:b9:c5:0a:
da:a4:1d:64:fb:70:76:f5:9d:b0:bc:f5:a7:b5:2e:87:9b:6d:
eb:77:b9:c9:10:18:7d:25:f5:94:d6:5b:81:fc:32:23:c8:a7:
da:46:19:40:c1:fa:85:46:78:50:3d:76:7e:16:19:03:32:59:
be:5d:2d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:34 2024 by rpki-client on console-ams.rpki-client.org