Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70D3979EA74211EF8582874A762E951A.roa
File: 70D3979EA74211EF8582874A762E951A.roa (raw, json)
Hash identifier: 011YkeX9ubBy/zgW67ghGsvoGsog8gq8D/1H4gQQFHc=
Subject key identifier: D6:53:37:F8:B7:50:D7:77:4B:89:F8:60:FB:FF:6C:BE:70:C6:5F:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D649
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70D3979EA74211EF8582874A762E951A.roa
Signing time: Wed 20 Nov 2024 13:22:07 +0000
ROA not before: Wed 20 Nov 2024 13:22:04 +0000
ROA not after: Sat 30 Nov 2024 13:22:04 +0000
asID: 44559
IP address blocks: 156.246.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54857 (0xd649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:22:04 2024 GMT
Not After : Nov 30 13:22:04 2024 GMT
Subject: CN=673de27f-45d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:ee:19:9f:cb:a0:99:fa:10:48:75:56:29:
2d:03:17:11:00:dc:f3:76:c1:f9:c1:7e:20:20:43:
df:de:6d:33:4e:e3:f7:8a:fe:5b:db:73:cb:a3:e5:
44:5c:cb:05:09:d9:81:e1:79:59:2d:e8:d7:5c:f3:
bc:fa:8b:3b:8c:2c:7d:e8:8e:22:e2:c7:1d:c0:fc:
17:43:ba:58:36:96:c7:bb:f1:cd:41:54:98:61:1b:
66:b9:d7:76:d4:95:70:7d:2e:9d:6d:c9:60:ec:5f:
96:67:ed:b5:d3:8e:f8:e2:5e:6c:75:ed:4a:2c:5e:
7e:af:6e:df:ca:53:82:16:2f:22:59:56:aa:c0:3b:
62:60:4d:a9:aa:e0:4f:0b:c8:d8:22:7e:3c:6e:16:
23:7a:c1:e8:a2:d5:6f:a5:c8:c4:5f:20:13:03:bb:
0f:82:b9:66:5d:6e:2d:87:53:01:9d:61:ad:09:f1:
53:07:40:3e:8c:36:ea:a1:62:40:f7:52:ca:fb:fa:
f5:3a:b3:40:b5:6b:79:e5:be:82:c8:35:8e:e5:f2:
d8:50:39:e4:4c:41:9a:06:04:f6:db:25:6e:f9:6c:
ff:42:82:c0:2d:44:3e:27:2a:28:1e:37:ee:65:3a:
14:cb:53:e7:f3:81:cd:f3:82:a9:5b:9c:0e:a8:bc:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:53:37:F8:B7:50:D7:77:4B:89:F8:60:FB:FF:6C:BE:70:C6:5F:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/70D3979EA74211EF8582874A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.192.0/18
Signature Algorithm: sha256WithRSAEncryption
07:8a:ef:17:7e:1e:88:d5:0a:a0:c0:a4:a4:1f:7b:7b:1e:b6:
a1:6a:c5:be:61:b6:b0:ce:d2:3e:93:c2:51:2a:67:b7:66:73:
ee:b1:4b:bd:4c:5b:c4:d2:5d:76:0e:75:12:f1:60:05:9d:9d:
5a:6b:2c:66:5b:90:58:7d:29:78:ef:ac:e6:cd:8a:97:44:f0:
3e:5d:21:d8:50:ca:31:e8:75:1b:77:e5:99:7b:f8:6f:bb:d2:
d5:96:54:d2:f8:63:b8:02:16:98:86:89:93:9f:93:6f:65:de:
34:79:0c:5c:33:73:2a:69:b6:2b:b2:9a:45:0e:e8:a7:24:ab:
f7:a9:da:ee:d7:07:08:16:80:7f:96:93:08:20:f8:3a:1d:8b:
49:aa:88:51:d8:c0:e5:a4:7a:8c:01:70:29:0a:50:be:35:8b:
06:73:67:17:51:1c:e3:22:26:d2:79:cf:cb:ac:d5:b7:89:fa:
eb:ff:6c:7b:20:c0:ab:94:f5:bb:dc:fe:cf:e3:c6:f9:50:dd:
25:e5:29:e8:86:56:d9:b4:c1:3c:01:3d:f8:e3:10:03:41:7b:
5c:f8:c3:3e:56:88:ec:0c:b6:d8:ac:5c:db:c2:9d:69:ce:0e:
e4:c2:94:82:cc:d3:87:01:ce:25:ff:40:4d:8e:3c:3c:b6:8c:
44:b8:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:34 2024 by rpki-client on console-fra.rpki-client.org