Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B420E384A33811EFB7350675762E951A.roa
File: B420E384A33811EFB7350675762E951A.roa (raw, json)
Hash identifier: VTJPcZeB7gGMy11YoX8hV9jGnxAOLNQovYMNhBfYX9k=
Subject key identifier: 69:88:1A:D7:6F:32:F2:F1:93:3B:FA:CC:91:D8:C8:B1:63:71:7B:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D31D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B420E384A33811EFB7350675762E951A.roa
Signing time: Fri 15 Nov 2024 10:02:21 +0000
ROA not before: Fri 15 Nov 2024 10:02:17 +0000
ROA not after: Sat 23 Nov 2024 10:02:17 +0000
asID: 54467
IP address blocks: 156.239.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54045 (0xd31d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 15 10:02:17 2024 GMT
Not After : Nov 23 10:02:17 2024 GMT
Subject: CN=67371c2d-7c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:16:f4:c3:91:3f:0c:8e:10:a6:da:93:ef:
9b:bb:5f:f6:ee:60:f1:9e:57:e8:1a:52:61:19:e8:
a3:97:06:5f:1b:78:c7:38:90:db:e9:9e:99:e1:7a:
6e:be:d4:fe:37:9a:d7:c5:79:54:dc:2a:59:c5:ce:
71:da:14:ba:5a:8d:b2:6f:43:ed:98:0f:c4:0a:be:
91:93:cc:76:3c:6b:db:f3:02:8e:eb:31:86:6a:14:
8b:18:d7:cf:0a:19:f9:1e:b4:80:1d:49:67:c3:80:
50:d3:5d:9c:f3:6a:0a:a8:e0:c3:9d:dc:86:53:12:
52:97:f5:d9:0b:b4:13:be:9b:3d:ac:6a:c2:ac:78:
eb:c6:8c:df:d9:32:d1:35:6c:0e:bf:7d:d7:ae:cc:
8c:9c:d3:b8:88:1a:53:77:fb:3b:1b:a5:00:cb:b4:
35:e6:8d:45:df:eb:4c:88:1e:b2:fd:d0:14:2b:89:
f6:76:c9:a5:05:23:a7:26:e3:18:08:0f:85:d8:c9:
8b:df:94:45:00:90:50:34:74:16:ab:eb:9f:85:e8:
8f:51:33:69:eb:14:6d:75:bd:bc:73:b1:7c:e7:c6:
b0:8e:ef:c7:8d:22:1d:e7:59:83:e6:69:a3:63:1b:
fb:55:6e:9f:66:49:00:2c:50:16:ac:48:cf:f4:e8:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:88:1A:D7:6F:32:F2:F1:93:3B:FA:CC:91:D8:C8:B1:63:71:7B:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B420E384A33811EFB7350675762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:ed:fe:05:48:bb:6f:d8:05:df:6c:40:43:5e:3f:b8:56:a0:
b8:d4:ca:eb:f6:1d:7e:28:6b:b9:52:ef:3b:14:fe:21:dc:0b:
4d:1e:86:6f:28:58:a2:fb:a7:53:b8:db:60:55:c0:59:30:de:
be:5f:1c:c5:4e:7c:2a:6d:91:da:00:d0:dc:5d:46:ee:11:b8:
96:92:3b:0f:41:cb:27:79:ed:cd:57:87:3b:57:54:a9:7b:1c:
a7:61:78:b1:4a:71:5f:e0:0b:3d:b8:6f:40:fe:fd:2f:02:10:
2c:8e:3c:99:68:53:3c:bd:c4:2d:31:50:10:70:3b:e3:b6:36:
89:b4:f8:8d:38:5d:02:18:f4:2d:02:e5:7e:9a:3d:37:8e:e9:
24:02:47:d2:d1:cf:1e:b9:4f:e6:61:cc:e9:2d:32:5a:3e:08:
eb:ee:90:16:f4:bb:e2:19:d7:be:62:7d:95:32:3c:cd:b3:2f:
79:59:cb:f8:df:91:8e:3f:6a:80:ef:cd:19:0a:a9:7b:fa:04:
d3:f8:19:84:fa:14:80:3f:f9:c3:73:3b:85:3d:81:16:fe:c0:
f9:f6:43:e0:75:e8:96:b1:3f:8b:51:c8:99:70:dc:f7:c4:57:
55:15:40:5d:f6:f6:23:4e:1d:73:15:af:f1:a2:bf:4b:77:c4:
7d:f3:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org