Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8545848A74711EF9DF1776A762E951A.roa
File: A8545848A74711EF9DF1776A762E951A.roa (raw, json)
Hash identifier: zdlnQd+aO3g0TovtS614HCXrhxRh3E9oFHMzr2JDMDg=
Subject key identifier: 8E:60:FE:0C:77:24:10:CE:54:8F:79:2E:9A:7A:30:89:2C:F3:3F:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D684
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8545848A74711EF9DF1776A762E951A.roa
Signing time: Wed 20 Nov 2024 13:59:28 +0000
ROA not before: Wed 20 Nov 2024 13:59:24 +0000
ROA not after: Sat 30 Nov 2024 13:59:24 +0000
asID: 202656
IP address blocks: 156.246.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54916 (0xd684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:59:24 2024 GMT
Not After : Nov 30 13:59:24 2024 GMT
Subject: CN=673deb40-f645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:e6:09:35:b0:10:cb:3a:13:49:ce:0c:95:
65:c4:08:b8:64:55:a2:a8:ca:81:1e:9a:6d:d3:3f:
f6:a6:2c:36:d9:0f:cc:7d:35:03:3b:37:f8:dd:20:
2c:e8:81:4a:1e:38:f1:12:da:a1:5b:ad:aa:7d:8a:
68:ce:18:5e:2f:e7:cc:11:d8:c9:49:41:11:7a:c5:
de:13:0a:37:c9:83:1c:e5:fd:15:2a:db:f1:e6:a8:
00:35:7b:e6:13:4e:d2:3d:fb:2e:6a:3f:cb:25:6d:
6c:8a:c9:41:c5:f6:ef:0e:84:9c:2d:07:fc:68:a8:
67:72:a5:84:c0:cb:65:33:b0:3c:f5:04:98:97:3b:
bb:c3:a2:56:b6:e4:e6:7c:4f:65:d5:71:96:c5:2e:
69:63:b0:70:b7:20:fd:5c:58:69:de:37:6a:74:ae:
d9:3c:e2:5d:25:82:54:8f:e8:b5:6e:34:c1:4b:9e:
f7:2e:c1:2c:0e:dc:8f:ae:a9:48:45:6c:89:fb:4e:
21:01:d9:8c:d8:af:0c:b6:52:0e:6c:7f:0c:bc:87:
61:30:14:79:31:1c:a7:a0:9a:d8:58:19:79:e9:0e:
b6:cc:d8:04:80:13:02:7a:ca:6f:a8:56:f1:cf:46:
47:fa:a0:8f:05:e3:ec:02:7d:67:10:33:57:55:8a:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:60:FE:0C:77:24:10:CE:54:8F:79:2E:9A:7A:30:89:2C:F3:3F:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8545848A74711EF9DF1776A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.162.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:6a:26:98:20:39:f8:d5:fe:a9:10:b6:54:10:45:36:96:c7:
0f:55:10:f9:dd:64:3a:bc:29:09:d2:82:e1:68:8d:77:7a:f3:
09:5c:f4:86:df:1d:f8:fd:d6:b6:d1:7b:d0:51:a7:58:3a:56:
d7:0d:b2:0c:8a:99:75:59:19:2b:af:0d:67:d1:b0:3b:7c:b4:
a7:77:88:16:b4:82:e3:77:9b:a9:0c:d4:59:8e:5d:cb:5e:7c:
12:d5:a7:2c:23:31:84:3e:98:42:1a:c9:d6:f0:a4:9a:c4:e2:
00:8b:81:ef:74:54:86:61:35:46:cb:ad:9a:3e:a2:be:57:35:
4d:d2:90:b9:c7:ab:8e:cc:52:a0:de:94:63:b7:64:72:3d:d5:
5c:4d:53:a5:ba:8a:49:c3:51:ab:35:fb:d1:04:7c:0f:4f:a3:
c4:de:7d:07:40:43:5b:6f:8c:82:22:42:5e:35:17:d6:06:1e:
11:ee:8c:c6:1d:df:72:34:ff:a6:5e:fd:1d:71:78:2b:bc:3a:
e1:60:f3:61:9a:c2:55:c8:19:b5:d2:dc:ac:03:21:80:87:e7:
c8:7c:48:7a:a5:72:60:dc:e0:12:7b:cd:1b:05:9a:ae:6c:b5:
3d:ad:9d:64:38:2a:c1:3e:72:73:cd:a2:0a:af:b0:8f:dc:70:
4b:c5:d0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:44 2024 by rpki-client on console-ams.rpki-client.org