Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DDB95B6A33811EFB34FFA74762E951A.roa
File: 8DDB95B6A33811EFB34FFA74762E951A.roa (raw, json)
Hash identifier: X09ZEB0gBv2jzO9r1JDrYL9JgQGAIpcB1u7y+Vpz3J0=
Subject key identifier: F1:5D:F1:EC:1E:56:AE:00:20:66:BD:8A:58:08:CA:31:2F:7C:79:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D31B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DDB95B6A33811EFB34FFA74762E951A.roa
Signing time: Fri 15 Nov 2024 10:01:17 +0000
ROA not before: Fri 15 Nov 2024 10:01:11 +0000
ROA not after: Sat 23 Nov 2024 10:01:11 +0000
asID: 54467
IP address blocks: 156.247.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54043 (0xd31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 15 10:01:11 2024 GMT
Not After : Nov 23 10:01:11 2024 GMT
Subject: CN=67371bec-3e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:3d:42:9d:1a:ac:14:94:af:53:f1:18:21:
ea:5b:c1:73:b2:d9:5b:81:31:6a:9c:98:16:83:d6:
f8:00:70:ba:29:bc:d4:39:11:55:19:e5:b0:7c:ae:
3e:5f:9b:ab:9e:5b:be:d8:bf:50:16:7c:a6:f6:7b:
ec:58:70:95:0a:47:1d:ef:05:b0:14:aa:35:5b:67:
5b:c6:63:44:a7:04:05:43:92:bd:d5:24:a1:5b:79:
5f:e2:31:91:db:95:94:35:ed:58:38:dd:b3:bb:04:
7d:23:ff:71:43:1f:ad:20:5f:2b:e4:7a:03:45:11:
3d:5b:3d:15:e9:2a:41:67:5e:aa:55:9c:27:2f:32:
43:c6:fc:4b:47:d6:77:79:e9:d9:d5:82:a5:3d:7c:
48:d1:08:6b:0f:0f:46:6e:71:bc:31:42:2b:62:96:
34:94:3b:5c:7f:6c:0e:62:1e:1d:ef:55:20:81:85:
35:67:85:c4:a6:32:d1:83:c0:50:b6:9f:71:a1:86:
49:3a:f9:30:39:d4:6a:69:61:6d:a6:d1:42:c3:25:
aa:11:e5:14:40:d2:d2:8b:33:2a:34:9d:91:71:92:
a4:c1:9e:98:cc:1e:3f:5f:58:75:3e:a0:da:e6:b5:
2e:1c:cb:b6:ff:3b:a7:58:ca:10:2c:42:ee:88:de:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5D:F1:EC:1E:56:AE:00:20:66:BD:8A:58:08:CA:31:2F:7C:79:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DDB95B6A33811EFB34FFA74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.48.0/20
Signature Algorithm: sha256WithRSAEncryption
28:00:6e:62:e7:d3:73:c9:d9:ed:c9:9c:00:f5:07:8f:fe:28:
9f:27:b5:ad:86:8d:2f:2a:e2:b6:14:57:fe:d3:3b:f5:ae:86:
a2:87:ca:ce:fd:53:ae:58:90:42:6b:c5:64:86:73:2d:46:5a:
9c:cf:d9:af:8a:69:97:26:de:24:0f:a7:01:9c:d0:32:3f:8e:
78:4f:fc:c4:61:25:a2:d4:f8:e2:cf:d8:61:af:8e:7d:15:65:
56:13:b0:d5:bc:a0:8f:11:2d:51:ef:28:36:06:7b:78:0e:54:
ff:d8:7c:33:15:e7:70:aa:94:e5:5e:81:11:55:bc:60:b4:22:
ff:ad:66:8b:cb:28:ab:ae:d1:ba:73:a9:10:61:54:5e:4b:b3:
e0:48:5f:80:1a:db:8d:f5:03:e1:9a:d8:da:d5:2b:99:12:2a:
15:58:e5:28:2d:73:1a:2c:01:0f:4a:15:aa:ca:00:1e:ac:9d:
f5:eb:a0:90:e0:f4:07:85:32:24:56:0b:f4:6d:ad:ce:fa:b8:
1a:0c:ee:cc:4a:56:59:1d:f6:60:ce:d9:b0:f0:f4:d7:68:fa:
2b:be:70:b0:62:a0:2a:c6:89:d3:20:52:39:3e:e0:68:da:fe:
88:2e:25:4f:04:39:64:0f:9a:1b:2a:46:d2:7a:4d:16:80:e4:
5e:15:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org