Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/765AE4D4A4BC11EF96464C77762E951A.roa
File: 765AE4D4A4BC11EF96464C77762E951A.roa (raw, json)
Hash identifier: 0Z9u47Ylf1JzY6IgHLEG5gsZwa/lc+eVodm97Q9K3Ds=
Subject key identifier: 62:62:AD:E0:86:41:F7:B2:6A:88:CA:B1:62:00:2C:47:3D:20:81:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D45D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/765AE4D4A4BC11EF96464C77762E951A.roa
Signing time: Sun 17 Nov 2024 08:18:02 +0000
ROA not before: Sun 17 Nov 2024 08:17:58 +0000
ROA not after: Wed 18 Dec 2024 08:17:58 +0000
asID: 64457
IP address blocks: 156.253.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54365 (0xd45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 08:17:58 2024 GMT
Not After : Dec 18 08:17:58 2024 GMT
Subject: CN=6739a6ba-48dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:8b:23:95:6b:0d:40:96:a1:d3:84:1c:b7:
34:ed:d8:5c:a6:60:87:76:e5:01:ef:82:52:f4:e2:
20:d1:db:72:3a:6a:ab:ba:76:35:92:36:7c:1c:74:
ca:b8:32:10:4a:7b:ee:af:44:72:b2:4c:e0:15:6e:
e9:0e:da:59:77:c4:ae:0c:11:23:c9:10:28:2f:c1:
4d:c7:d8:6d:54:da:e2:62:68:7f:52:75:56:8f:f6:
19:e9:ba:8f:b9:23:97:0c:d1:9c:1e:ee:44:e9:6b:
02:41:f3:ec:e9:4c:ae:14:e7:1d:23:82:64:8f:ec:
fc:72:90:92:22:a5:0b:7b:bd:fd:97:20:90:c2:1e:
f1:2a:75:88:d4:0c:57:bd:61:93:6b:15:9b:78:3a:
5a:a8:07:16:75:70:03:84:b4:a5:76:4e:8b:5a:93:
b6:c2:44:00:9e:1d:fa:58:aa:34:47:ce:99:29:10:
12:ea:52:f2:68:b5:72:66:f6:f9:80:84:c4:1c:81:
0a:23:28:e8:81:77:ca:69:97:16:72:ee:48:86:07:
58:6d:46:70:d4:7b:b5:e9:3a:20:c0:b1:0f:44:87:
e5:01:26:31:07:0e:37:f3:82:34:da:23:fb:e4:62:
82:be:7f:78:24:be:f3:d6:90:f5:a3:06:83:66:86:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:62:AD:E0:86:41:F7:B2:6A:88:CA:B1:62:00:2C:47:3D:20:81:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/765AE4D4A4BC11EF96464C77762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.248.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a4:e4:ba:8d:d0:b2:e3:5c:dc:8e:c3:55:a8:60:09:dd:92:
cb:93:14:5c:fe:a5:c2:72:96:fc:61:07:00:12:cd:84:40:ff:
9b:66:99:dd:b3:9c:49:8c:a9:69:2b:ed:21:e4:6c:fb:51:fb:
e9:13:fa:c0:54:99:6e:1b:06:9c:29:12:d1:7a:15:58:5a:89:
7f:1c:e5:f5:b0:a3:1b:f6:4a:5e:fb:15:b8:9f:17:4b:3b:43:
ca:7e:cc:6b:73:b9:21:e6:4c:26:25:dd:a8:41:07:09:6f:69:
1a:74:05:8f:ea:50:28:ec:b6:52:41:9e:63:c5:cb:7d:40:c3:
5c:c9:ab:6a:e7:96:c4:a7:71:dd:dc:38:a5:1c:2e:fe:9a:eb:
90:2b:67:fe:3a:cc:90:a2:7f:ca:c7:9f:b8:ee:9b:a1:bd:85:
2b:4f:0c:0d:ba:71:d9:c8:d4:39:80:71:ba:bf:7f:87:ed:c1:
be:f5:6b:a6:57:6e:d1:d2:05:97:40:69:e8:27:75:b1:12:f3:
a6:a2:07:e1:19:2f:fb:d5:b0:d5:d4:f8:af:73:d9:f3:8a:f0:
82:f1:25:4c:10:12:16:b1:1f:b7:ac:ac:b4:7a:7f:b3:34:06:
f5:35:e1:32:3b:1c:68:07:37:4e:78:1c:35:f4:b1:14:72:46:
8b:c7:b6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:35 2024 by rpki-client on console-fra.rpki-client.org