Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B06430FE8D3311EFB0EDEA80762E951A.roa
File: B06430FE8D3311EFB0EDEA80762E951A.roa (raw, json)
Hash identifier: IbB3XM/cz0zWtdCeOoIc1JBHyfOknAPoWOvX/b+X+nA=
Subject key identifier: 40:1A:B1:6A:F9:06:7F:B8:BC:3F:6B:FC:42:BB:65:F0:69:05:37:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C6B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B06430FE8D3311EFB0EDEA80762E951A.roa
Signing time: Fri 18 Oct 2024 09:31:01 +0000
ROA not before: Fri 18 Oct 2024 09:30:58 +0000
ROA not after: Sat 23 Nov 2024 09:30:58 +0000
asID: 202656
IP address blocks: 156.246.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50872 (0xc6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 18 09:30:58 2024 GMT
Not After : Nov 23 09:30:58 2024 GMT
Subject: CN=67122ad5-55a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:90:80:b3:aa:31:73:e9:9d:c0:c4:96:3b:
69:44:53:e7:a0:cf:ac:ab:86:0f:1f:f2:5b:59:e5:
c4:c7:6e:d6:2b:a3:25:01:c4:0c:6f:90:67:b9:e2:
c0:2c:c1:56:fe:94:90:26:96:7d:0d:0b:af:b5:4e:
92:22:9a:8f:9b:65:36:c1:5b:36:d3:37:3f:f4:33:
71:59:4a:66:b5:fa:83:6d:46:c8:cc:1c:7e:fe:c8:
d5:8f:bf:9f:4a:dd:ce:eb:9b:d7:45:aa:94:d1:00:
66:b8:46:56:86:a0:6a:0c:1f:9d:df:33:ac:0c:7e:
67:8e:42:34:f6:72:77:ac:d5:cc:cb:71:7c:47:07:
a4:63:93:86:e8:8e:cb:2d:d1:4d:51:8e:f3:4d:67:
13:b7:c9:ca:31:58:8b:2c:13:3e:7c:53:04:ec:f2:
69:a9:15:72:d9:a6:3f:5d:4e:da:31:61:b2:aa:06:
79:45:df:82:a2:5a:0b:4c:67:e1:56:99:d0:a8:71:
5b:e6:a0:32:ec:9b:42:fe:6e:2c:d2:ae:b5:15:fc:
49:42:21:bf:56:d3:a2:aa:9e:84:9a:5a:63:e8:5b:
e9:93:fd:85:d4:36:4a:d1:fa:66:28:8f:ce:92:a4:
f0:22:af:38:c5:8d:7a:17:30:53:42:31:f1:ee:04:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1A:B1:6A:F9:06:7F:B8:BC:3F:6B:FC:42:BB:65:F0:69:05:37:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B06430FE8D3311EFB0EDEA80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.164.0/23
Signature Algorithm: sha256WithRSAEncryption
33:c1:4f:c3:ef:19:5a:a1:a1:69:01:fb:81:ca:97:fa:53:f8:
6b:9d:e7:1f:99:f6:54:0f:2a:f1:62:de:d9:28:6f:a0:68:06:
d5:48:38:ea:c8:11:88:8d:6e:46:05:d7:af:2f:4c:66:92:b1:
95:66:de:bd:ca:67:41:66:0a:0e:2c:75:d2:8c:6d:3f:8a:69:
6e:de:53:e4:7f:b2:3a:19:53:dc:c3:3a:cb:b0:b7:08:62:4b:
05:ba:86:5a:ef:6a:84:40:9f:5a:61:c1:5e:f6:8d:97:51:c9:
0d:d4:87:57:df:67:76:13:84:a8:51:d3:42:61:1a:dc:fb:c7:
c9:c6:97:cb:be:95:d3:1c:b9:9e:de:59:87:ec:5a:8b:20:ba:
1e:cf:5f:89:e1:ef:1f:16:fb:2d:45:60:55:d0:44:e7:10:1d:
3d:d6:39:88:62:d2:0e:29:43:7f:7f:dd:9c:6d:f7:c6:61:f9:
af:5c:44:0d:d4:25:2b:65:35:6c:89:01:d9:0e:61:16:0d:3e:
94:a2:75:4e:4c:1e:7e:ff:6f:51:f2:e3:2b:fe:2a:0f:50:82:
7b:25:e9:3c:14:62:cc:ea:2a:c4:aa:3c:11:c3:71:27:71:0f:
95:52:83:28:49:98:00:d5:43:ca:9c:39:78:23:6d:3d:69:a6:
74:8d:68:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org