Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CFFB76A7A4711EFA59A1143762E951A.roa
File: 6CFFB76A7A4711EFA59A1143762E951A.roa (raw, json)
Hash identifier: 1prm6vySrT9Aycydj8t+LAFLVUSVXw5AUekQC+gV3Vs=
Subject key identifier: B9:34:06:61:CA:94:02:FE:C0:BA:64:39:0B:30:9E:07:7A:2D:8F:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BA8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CFFB76A7A4711EFA59A1143762E951A.roa
Signing time: Tue 24 Sep 2024 07:34:26 +0000
ROA not before: Tue 24 Sep 2024 07:34:23 +0000
ROA not after: Sat 21 Dec 2024 07:34:23 +0000
asID: 328608
IP address blocks: 156.229.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47754 (0xba8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 24 07:34:23 2024 GMT
Not After : Dec 21 07:34:23 2024 GMT
Subject: CN=66f26b82-7428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:07:b6:94:b2:46:50:0b:49:30:15:d3:3c:
62:5b:fb:50:b7:52:0e:57:ee:c8:19:46:ea:00:02:
9e:22:c9:d1:b5:80:dd:92:6b:32:1c:58:5f:a4:aa:
01:99:75:16:73:19:3d:9b:c0:1e:c8:eb:3c:64:9c:
29:b9:24:0b:25:20:14:e3:c6:d5:9d:a5:16:32:2d:
52:58:dd:b4:b4:69:ff:89:ee:c6:8e:ab:27:5f:34:
6d:82:62:a1:93:4d:3b:f6:bc:82:d3:39:1b:8b:75:
c4:bb:35:f3:7f:73:d1:24:b3:81:2d:95:a7:9e:2a:
e3:30:55:1a:ba:90:de:84:44:a3:3d:63:3a:2d:53:
dd:33:f5:04:d8:98:d9:ba:fd:61:60:30:ff:e3:7d:
51:ad:92:de:e3:eb:68:6a:4c:e4:66:95:0b:b4:cd:
8e:27:63:74:27:0f:0b:26:40:4c:a4:86:b6:0f:b9:
8a:dc:e6:cd:50:cd:ac:31:88:ce:cd:8e:36:82:ce:
47:14:cc:95:28:57:eb:a7:8f:25:75:b5:b8:b9:ad:
fe:a6:f7:6d:de:33:47:1a:dd:ae:bf:dc:22:af:d3:
0d:9c:b5:6f:59:8a:82:63:9d:e1:42:a9:81:17:fd:
39:6a:d9:37:c3:99:ef:55:44:4d:d0:72:dc:30:70:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:34:06:61:CA:94:02:FE:C0:BA:64:39:0B:30:9E:07:7A:2D:8F:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CFFB76A7A4711EFA59A1143762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.96.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:d9:c2:63:2b:4a:d7:97:e2:52:b0:38:62:a6:9d:9b:a9:66:
90:42:bf:c4:6b:3f:18:16:c1:c0:60:e0:ed:d8:3e:e1:d6:f2:
23:4d:4f:ca:c8:f0:40:0c:f6:c4:b8:c7:1e:ca:e6:41:b5:69:
92:05:e6:77:60:f3:05:b0:23:92:2d:05:3e:d6:d4:42:d6:d3:
89:2f:92:6c:a7:a8:77:48:bb:32:2d:83:6b:59:1a:19:07:d8:
ea:49:0d:30:e4:5d:5d:5e:f9:d6:ae:d7:26:b3:43:26:a0:6f:
58:c5:7f:3d:24:ce:f2:05:99:02:f0:85:03:d9:e6:d4:da:7f:
e1:43:5a:56:3a:f0:3c:1d:01:f7:e9:7b:88:dd:af:52:96:ff:
cb:71:09:e8:f3:35:2a:01:1c:0a:6d:76:f6:bb:70:46:52:e3:
22:9a:59:48:aa:5c:e0:80:e9:eb:f0:df:e7:bd:cb:f9:5b:ed:
b7:ef:99:ed:ce:f8:26:14:ce:dc:c3:ed:83:ed:6d:09:70:2a:
f7:cc:c7:ac:44:be:9e:86:bb:df:bb:b9:70:34:6a:0f:71:20:
cf:7f:ef:5f:8c:f3:54:07:4f:24:51:1b:92:fd:11:c9:44:e7:
b1:97:57:3c:58:b3:04:fe:a9:fc:c1:2d:e1:23:0d:3c:59:3b:
3f:93:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:34 2024 by rpki-client on console-fra.rpki-client.org