Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E5FD2B49AAB11EFA7837163762E951A.roa
File: 6E5FD2B49AAB11EFA7837163762E951A.roa (raw, json)
Hash identifier: 4rvfCL7jpb8GkqVI69w2fdMwLecHS+Cexjb9dUZEplI=
Subject key identifier: 65:C1:8E:83:26:A8:01:0F:D0:2C:35:1A:64:C0:CB:28:FE:54:81:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CD90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E5FD2B49AAB11EFA7837163762E951A.roa
Signing time: Mon 04 Nov 2024 12:50:55 +0000
ROA not before: Mon 04 Nov 2024 12:50:52 +0000
ROA not after: Tue 03 Dec 2024 12:50:52 +0000
asID: 139646
IP address blocks: 156.246.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52624 (0xcd90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 12:50:52 2024 GMT
Not After : Dec 3 12:50:52 2024 GMT
Subject: CN=6728c32f-0284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1d:dc:7b:d5:d0:8d:5b:c5:19:aa:69:13:74:
6c:83:50:4d:e3:59:5b:c4:d0:f7:dd:c6:36:19:5b:
79:7a:e6:10:b8:c6:d7:13:05:9d:df:fa:ce:f6:91:
b0:cf:82:4e:4a:75:00:33:8d:ad:ec:31:d1:e9:ad:
d0:72:79:9b:ec:a8:75:2e:a2:ef:3f:a9:e4:a9:41:
88:9b:45:95:3d:9f:74:1c:43:4d:7e:c0:26:ba:5d:
8c:34:34:85:ee:cd:b7:0f:70:92:29:88:e0:43:b2:
0e:57:a7:06:78:bb:5f:5a:32:b3:8f:53:9b:9e:4d:
5d:d1:b1:4b:67:7e:26:e4:84:71:b6:0c:8d:d6:11:
22:3f:54:cb:a5:8d:67:f0:d4:82:2c:59:b3:aa:a5:
1a:00:93:60:f6:c9:1f:67:6a:a1:52:9a:27:d0:85:
c5:8a:88:5b:f9:1a:97:47:3d:e7:6c:90:ae:1c:00:
4c:f0:47:16:89:0a:1e:66:50:05:10:9a:e9:21:ec:
c4:5a:19:31:8a:3b:5d:f9:a2:1a:d9:6d:16:f2:65:
d6:11:2d:39:b8:3b:f7:18:f0:23:f8:58:66:ca:1a:
34:66:62:71:c6:3e:ea:e3:66:0c:3f:5f:46:7d:27:
62:d9:b6:21:d7:89:ac:90:98:ca:b3:a5:0b:12:d3:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C1:8E:83:26:A8:01:0F:D0:2C:35:1A:64:C0:CB:28:FE:54:81:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E5FD2B49AAB11EFA7837163762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.0.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:b6:87:ba:ab:b1:51:07:9a:32:6b:db:2d:d2:e9:28:46:1c:
b6:4b:0c:3c:14:7b:08:93:b1:7d:72:96:ed:16:4c:46:1b:a6:
cf:5e:ce:16:aa:70:b0:3b:db:5b:8e:77:c5:86:2c:0c:a7:ed:
b3:28:39:92:6b:8a:da:fb:03:02:c7:f8:f0:f1:dd:34:bc:eb:
8d:12:31:11:9b:d6:31:d2:74:f5:88:9c:e2:7b:e5:5d:03:1e:
61:e1:36:4f:52:a9:dd:01:4d:20:5d:1d:a6:d7:4b:de:8c:9d:
63:f8:d6:19:64:4a:bd:b8:dd:7a:09:55:c9:d0:33:9a:c1:fb:
c6:1a:a5:37:f8:5b:36:b8:72:28:f8:74:75:e0:aa:28:1a:15:
ca:b1:7b:18:9b:dd:4f:cb:bc:d4:9a:c7:52:e8:ff:1e:9d:bd:
3b:ff:9b:32:7a:88:d7:df:a5:09:60:9f:82:e9:90:5f:d3:76:
46:5c:51:db:a4:66:9e:3d:47:ef:b8:d0:f5:e8:29:5a:3c:95:
0d:51:ad:93:e1:d0:21:4f:40:5a:ee:21:d4:d1:fe:01:55:d1:
7f:4b:00:55:2d:60:1d:fe:8e:7b:78:16:01:d5:08:c0:33:89:
9c:71:4c:af:35:c0:d4:0c:62:28:71:3c:a9:02:8a:88:32:8d:
38:9c:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:34 2024 by rpki-client on console-fra.rpki-client.org