Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F872E749D1111EFB63E4B86762E951A.roa
File: 9F872E749D1111EFB63E4B86762E951A.roa (raw, json)
Hash identifier: NuSqyp0Gwk3kRTA5S72DpfF5i3dxwQ0fs+VqZNWgx0g=
Subject key identifier: E1:C7:EA:41:03:E7:3A:C9:D1:BE:4E:80:7A:34:4D:07:40:8E:69:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CFD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F872E749D1111EFB63E4B86762E951A.roa
Signing time: Thu 07 Nov 2024 14:07:29 +0000
ROA not before: Thu 07 Nov 2024 14:07:25 +0000
ROA not after: Sat 30 Nov 2024 14:07:25 +0000
asID: 136970
IP address blocks: 156.236.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53200 (0xcfd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 7 14:07:25 2024 GMT
Not After : Nov 30 14:07:25 2024 GMT
Subject: CN=672cc9a1-6167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:5d:e4:bb:a3:15:56:46:61:30:94:af:96:
fc:c5:dd:83:f9:8d:74:ba:68:21:67:bd:b5:c7:92:
97:7e:5c:69:97:1c:97:07:89:18:e9:6c:d2:ed:4c:
4d:a6:26:77:72:8b:71:b6:5f:9c:42:5b:12:75:30:
70:7b:31:0a:7f:fb:28:73:54:3c:40:22:29:b6:f4:
0e:7b:d6:17:76:65:54:18:1f:3d:8b:4c:51:d4:da:
2b:09:cf:1a:6f:19:e8:80:e1:77:d2:e0:95:e0:68:
8f:81:f5:d4:af:84:0f:6a:16:75:fd:77:fd:d5:87:
3b:8f:a2:e6:79:8f:fd:cb:4b:57:e1:bc:af:eb:81:
c6:9b:35:d8:54:c6:a0:bf:81:02:ef:00:8a:2e:c4:
8c:06:11:85:26:21:3d:5b:13:e9:6e:b2:4d:4b:0b:
28:d8:c8:ab:25:ec:5b:27:51:b8:6f:71:5d:17:63:
bc:7f:1c:d8:87:31:4e:60:bf:84:5d:53:09:2b:0c:
f4:ec:c4:23:cc:86:17:b8:fc:50:d4:6e:d5:95:6e:
d3:67:64:7c:b2:da:af:3a:f5:53:d5:26:6b:8c:83:
11:20:8d:53:a6:d5:80:2d:95:45:3b:b2:df:fa:57:
f5:f6:d5:53:fc:78:70:79:89:29:09:6a:d0:c3:b1:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C7:EA:41:03:E7:3A:C9:D1:BE:4E:80:7A:34:4D:07:40:8E:69:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F872E749D1111EFB63E4B86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.64.0/23
Signature Algorithm: sha256WithRSAEncryption
81:2c:b0:2f:ea:e2:a4:f0:99:3d:b4:50:6d:ad:0c:3c:ce:1a:
ea:57:1e:d7:ec:56:00:ed:2d:4c:77:b1:fa:4f:93:db:30:ab:
1a:9a:cc:8d:9c:6b:d9:5a:25:0e:8b:9e:35:35:f6:5f:83:c9:
bf:a3:52:74:e9:d4:c4:fc:88:55:6b:25:44:5f:4a:23:9a:99:
6f:53:5d:b8:55:b5:72:27:f8:2d:ac:5e:08:2f:4f:83:0c:68:
b8:5c:23:ad:f7:0e:84:3a:46:e9:21:4d:cf:de:23:fc:9a:4d:
02:92:be:71:0b:bc:cd:db:72:e9:86:c4:fa:13:de:6e:cb:dd:
96:43:9e:67:80:82:4d:91:92:55:fb:0e:8c:63:35:3b:ab:82:
cf:72:74:d3:a4:26:c2:57:fe:2c:fb:1a:16:8e:b5:d7:c0:e3:
7a:e2:cf:44:55:fd:a2:21:3f:33:48:e0:a3:f6:eb:ef:5f:ed:
3c:82:ab:40:38:71:a0:d5:d6:9b:eb:44:9e:19:3e:33:ba:08:
55:61:6b:24:df:8a:44:99:a6:31:57:34:03:04:2e:e4:3d:be:
d2:6e:38:ce:82:77:7c:86:c0:bf:7d:63:df:74:26:dd:03:c3:
0c:2c:3a:6b:cb:3c:3e:aa:73:c6:60:ff:93:44:47:13:5e:91:
b2:ba:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:41 2024 by rpki-client on console-fra.rpki-client.org