Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/943AE20A9AA411EFB323E9B6762E951A.roa
File: 943AE20A9AA411EFB323E9B6762E951A.roa (raw, json)
Hash identifier: IEimZidMpxq6nX+GLdjbGxiG6QIYCR34bTBz2E9IzB8=
Subject key identifier: 5B:6A:8C:95:9A:CD:D2:20:0C:1F:F0:A9:4C:8C:18:D4:1E:34:4E:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CD6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/943AE20A9AA411EFB323E9B6762E951A.roa
Signing time: Mon 04 Nov 2024 12:01:53 +0000
ROA not before: Mon 04 Nov 2024 12:01:49 +0000
ROA not after: Sun 01 Nov 2026 12:01:49 +0000
asID: 132813
IP address blocks: 156.254.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52586 (0xcd6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 12:01:49 2024 GMT
Not After : Nov 1 12:01:49 2026 GMT
Subject: CN=6728b7b0-fe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7a:37:03:04:68:f9:3b:fe:d0:c2:d5:bc:df:
68:42:6a:86:a8:a5:0c:c0:37:1f:50:c0:80:2c:03:
c7:89:c8:0c:cc:d3:c8:58:b5:48:24:45:b2:6b:6a:
d6:f9:34:a3:b4:19:c4:d2:88:8a:b9:be:6c:b4:9a:
1e:58:b9:e3:96:77:96:91:31:d2:aa:39:bd:4a:96:
f3:4e:16:d8:87:4e:f3:df:7d:98:d9:5d:f6:28:96:
62:5f:be:e7:d0:4b:af:f7:a9:4c:52:fa:74:2c:60:
d1:ea:b8:6c:e5:4f:c8:de:1b:0d:0a:8f:b3:1f:4d:
96:e6:81:d3:66:0a:b8:f5:83:90:a2:23:e5:e0:8f:
20:7d:2a:bb:a5:2a:12:ae:c9:d3:bb:f9:73:ed:81:
1d:5d:79:cb:65:c6:bb:40:3f:77:80:6c:13:e0:8b:
d9:16:84:42:ad:25:fe:a7:06:2c:69:70:a7:0d:c5:
df:59:83:e2:01:be:11:a6:43:1d:cf:28:f2:f9:60:
cc:e5:71:5f:6c:c6:ff:f8:b8:ae:a6:22:fe:2f:3c:
87:c0:ea:11:6e:ed:c3:73:d0:a6:4d:b0:0d:86:a8:
04:ac:cf:16:68:5a:5b:4f:d0:f2:19:c7:0d:ad:60:
1d:e3:b8:5c:47:07:3f:f0:e2:85:18:96:11:73:46:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6A:8C:95:9A:CD:D2:20:0C:1F:F0:A9:4C:8C:18:D4:1E:34:4E:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/943AE20A9AA411EFB323E9B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.126.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:c3:46:8d:4b:31:9a:4f:75:8c:34:bd:0a:56:80:e2:09:88:
4d:2d:98:b9:b2:cf:3f:76:5d:a2:d8:69:fe:fd:82:78:dd:31:
da:f9:ff:73:10:cb:43:f1:d8:47:19:bb:e5:2a:94:0d:1e:62:
5e:36:96:ee:ba:bb:02:f8:f8:03:e8:15:37:67:29:2a:87:c1:
2f:41:c4:b0:99:40:d9:de:ef:f5:f8:1c:7a:73:bc:0e:ea:24:
81:98:38:52:36:ed:cb:77:22:1d:4c:2c:3d:39:8a:70:f3:96:
55:d4:18:09:18:b6:b4:0c:64:4f:41:0c:8d:3d:05:9a:f6:1e:
68:92:14:cd:0d:2a:51:9e:fc:29:3c:c9:91:36:d9:11:2c:76:
8e:83:67:81:04:ba:24:7a:b9:eb:7b:92:36:8b:4c:14:10:d5:
4e:86:73:cd:3f:56:33:90:05:a8:32:34:63:83:15:62:c6:a6:
f7:69:ee:9b:95:f0:fb:3e:03:67:61:41:2e:f2:29:b2:26:37:
dc:87:3f:2a:ec:4d:f3:f7:b3:49:ab:d3:12:a2:2a:ea:47:73:
00:c5:33:a6:94:9d:f7:f4:fa:3c:71:2e:5f:f7:e7:4a:02:51:
b2:f3:42:8b:20:69:fd:0e:1c:cd:00:c3:c4:93:6e:c4:03:19:
00:e8:30:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:39 2024 by rpki-client on console-fra.rpki-client.org