Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B66ECE469B7F11EF9F65FD9E762E951A.roa
File: B66ECE469B7F11EF9F65FD9E762E951A.roa (raw, json)
Hash identifier: 0azlAPY4/w0vyM7wIUt0YnMR3x1NQBCy6Z6h1pZdpLU=
Subject key identifier: 75:F6:F7:BB:09:D7:16:DC:8F:C7:BC:8B:BA:3F:55:D6:A7:73:0C:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B66ECE469B7F11EF9F65FD9E762E951A.roa
Signing time: Tue 05 Nov 2024 14:10:30 +0000
ROA not before: Tue 05 Nov 2024 14:10:26 +0000
ROA not after: Mon 13 Jan 2025 14:10:26 +0000
asID: 22773
IP address blocks: 156.246.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52893 (0xce9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 14:10:26 2024 GMT
Not After : Jan 13 14:10:26 2025 GMT
Subject: CN=672a2755-1bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:19:0f:9b:82:95:36:eb:b8:c5:2a:42:69:
57:41:4c:91:fe:f0:5d:1e:66:dc:63:58:0d:4b:65:
a9:e3:60:bd:93:2c:d8:54:c9:d9:06:6a:b3:99:b3:
b7:9f:8d:a6:df:e8:c1:08:b0:4f:a2:4c:15:8c:e9:
1d:b6:1a:9b:67:6c:88:96:b4:74:2c:29:d5:c5:bf:
61:5e:3c:7d:63:87:f3:49:ae:6e:e6:69:f1:b6:2b:
89:d3:23:f0:d9:3c:73:66:ca:7f:e7:2a:dc:e3:a2:
b6:e8:e7:64:10:d7:8e:ef:54:41:14:f8:a4:42:79:
db:b3:0e:4e:c7:27:52:7a:4d:f0:ac:14:32:48:aa:
27:09:5a:33:a5:ca:b3:a0:17:59:ce:78:2f:75:e9:
6a:9d:26:dd:ee:d4:c8:c0:3c:db:72:a3:b6:cb:32:
83:4f:4f:c6:5b:06:a5:96:c1:d0:52:98:8c:fc:40:
03:46:bd:a8:91:db:37:58:76:30:99:ce:67:a8:f0:
34:bb:d7:0b:18:ab:62:1c:1d:ea:f9:7c:c4:b9:a3:
c8:ca:7c:b2:9f:86:4f:bf:50:b5:3d:fd:05:bd:9f:
57:70:9f:d5:75:42:6c:92:5c:9d:d4:e7:b1:1f:d3:
03:e0:9d:2e:b3:72:07:47:4a:95:97:f8:04:27:b2:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F6:F7:BB:09:D7:16:DC:8F:C7:BC:8B:BA:3F:55:D6:A7:73:0C:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B66ECE469B7F11EF9F65FD9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.64.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:c7:e6:32:be:ac:08:93:0f:2c:ff:2a:1a:39:7b:4b:85:8b:
d2:e2:06:76:ca:e6:23:59:0f:3c:0e:2f:d7:82:bc:e7:a7:55:
d8:fe:37:0b:5a:87:ee:ea:af:a0:86:78:fd:54:ef:85:3a:f9:
f1:05:7d:e2:25:0d:05:61:f0:9b:59:be:44:96:c8:b6:7c:0a:
c0:10:52:f7:76:49:3f:2d:5a:4d:29:bc:5b:12:56:f2:92:07:
3f:d9:f2:61:6d:df:de:e1:c9:a8:32:06:aa:2a:e2:94:3b:89:
db:97:4e:47:45:3a:56:44:47:d9:91:79:55:50:3e:2d:ca:75:
f2:bd:25:23:4a:05:2e:ee:5f:8f:b9:f9:19:a9:cd:a8:f3:aa:
a9:70:f9:ab:97:18:a1:e1:13:a4:aa:e3:8c:4c:f0:b2:bf:e3:
c4:cb:16:8b:62:f9:55:43:2c:bb:59:17:d3:b2:4b:11:fe:c8:
45:0c:48:cb:eb:d5:08:6a:7b:87:ac:e1:c0:b8:28:de:db:34:
3f:7f:c7:b4:7b:a2:c3:c6:51:94:56:fa:b0:b4:c6:91:23:06:
7f:66:48:b2:97:bc:36:45:be:17:e6:5c:4c:69:8a:f3:53:83:
5f:6b:d1:f6:2a:7a:da:19:13:21:7b:91:a9:a6:d7:44:eb:36:
62:94:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org