Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A63F4EEC9B7A11EFB4D1A07D762E951A.roa
File: A63F4EEC9B7A11EFB4D1A07D762E951A.roa (raw, json)
Hash identifier: 7yT1i56ftGuHrgU/iuyEfzhTSH7JlTtzPJDBG3cXbsM=
Subject key identifier: 42:B3:0B:72:62:75:8F:C8:1E:BF:8D:CA:B8:4C:7F:10:D8:CE:4D:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A63F4EEC9B7A11EFB4D1A07D762E951A.roa
Signing time: Tue 05 Nov 2024 13:34:15 +0000
ROA not before: Tue 05 Nov 2024 13:34:11 +0000
ROA not after: Mon 13 Jan 2025 13:34:11 +0000
asID: 5065
IP address blocks: 156.233.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52831 (0xce5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 13:34:11 2024 GMT
Not After : Jan 13 13:34:11 2025 GMT
Subject: CN=672a1ed7-835c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:18:13:5c:94:3f:17:1b:51:9b:45:55:e1:
2e:6e:5c:aa:f4:45:67:19:28:24:47:47:80:39:28:
a7:17:8c:98:54:d7:0f:04:a6:4a:2c:87:d0:ee:d6:
f2:77:06:cc:9b:83:6e:96:8a:35:2c:66:e8:4d:29:
a4:77:8b:e2:57:ee:f2:2d:be:bb:a0:e3:8c:f6:2b:
51:1b:11:3e:23:03:37:16:b7:77:b0:ed:53:4b:26:
03:6b:b6:56:51:b6:55:96:3d:d0:59:66:fa:0d:b2:
f2:2f:9d:f4:19:e6:be:d7:26:46:0e:de:f4:b1:b1:
e8:cc:f7:d8:0e:a6:df:32:9b:a8:43:a4:0e:7d:0b:
a7:99:5c:b9:fc:56:a5:ae:2f:76:87:fc:d8:34:b7:
87:72:6c:23:2e:b1:3f:33:5c:8b:a6:b7:af:22:26:
ae:3e:8c:11:bc:95:68:39:f3:c3:51:e0:74:cd:f4:
3a:7f:17:bf:26:4b:0a:1c:2c:8d:eb:4e:a5:d5:48:
78:4b:af:83:e8:94:3b:a3:66:20:2f:93:52:6c:b7:
f4:6e:fe:b3:72:2f:bc:e2:b1:ed:2d:7e:9b:93:6b:
4b:da:47:f1:c8:81:58:af:87:c9:ec:1a:ef:f7:12:
91:34:e5:b2:65:5a:e5:0f:06:30:9c:fd:3c:db:ef:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B3:0B:72:62:75:8F:C8:1E:BF:8D:CA:B8:4C:7F:10:D8:CE:4D:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A63F4EEC9B7A11EFB4D1A07D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.20.0/24
Signature Algorithm: sha256WithRSAEncryption
39:20:72:fd:81:b2:af:58:4e:4c:9b:dd:37:63:94:da:6c:76:
93:ab:c2:f9:af:f5:5a:27:92:d9:fd:de:ee:2d:96:fe:c3:94:
cc:76:4e:a9:ae:f0:98:6f:77:9f:23:6b:51:ba:70:e1:42:57:
1b:79:18:f4:42:ba:ea:ef:32:79:42:9e:28:07:f4:3a:5a:30:
4d:e0:4e:d8:0a:f6:f0:61:70:ea:4d:9c:0d:9e:8b:99:32:b1:
ba:92:a3:d8:b1:27:e2:86:ba:3b:93:40:a2:a0:61:e0:d9:65:
1b:68:d8:c2:8c:5f:0e:eb:06:1b:4f:2c:82:eb:59:cb:df:48:
5e:dd:4f:8d:5e:0c:5f:cc:db:69:dd:cb:6d:88:ef:8f:a9:20:
e0:92:12:91:f8:7f:85:31:97:7f:fc:9d:0c:0c:3c:ea:d4:3e:
67:cb:bb:e7:47:e9:38:fe:de:75:6e:32:d2:97:ae:10:e6:7e:
e7:24:45:26:2e:a9:0b:e6:60:67:56:85:00:c3:a0:d5:2e:df:
44:f5:c1:10:66:ec:82:30:63:80:a6:09:65:f6:7e:a7:56:fe:
c4:7f:7f:f6:3f:da:ff:95:5d:3b:73:d1:01:4e:bc:a2:9d:f5:
c8:08:a6:56:51:c7:da:e8:48:fd:39:80:95:c6:50:0a:9e:32:
f6:d4:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:42 2024 by rpki-client on console-fra.rpki-client.org