Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B95E3EF8A74011EF983DD6BD762E951A.roa
File: B95E3EF8A74011EF983DD6BD762E951A.roa (raw, json)
Hash identifier: Lem8Z9QyES52EhztGA3OJOjoumG4hNofUwGsqQLChqc=
Subject key identifier: A0:5B:E5:8B:68:EF:A2:20:8E:1D:6A:9A:D8:5D:74:2E:C2:4E:E1:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D639
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B95E3EF8A74011EF983DD6BD762E951A.roa
Signing time: Wed 20 Nov 2024 13:09:50 +0000
ROA not before: Wed 20 Nov 2024 13:09:46 +0000
ROA not after: Sat 30 Nov 2024 13:09:46 +0000
asID: 44559
IP address blocks: 156.246.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54841 (0xd639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:09:46 2024 GMT
Not After : Nov 30 13:09:46 2024 GMT
Subject: CN=673ddf9e-7992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:c2:2c:62:16:c8:30:7e:32:df:8c:52:1f:
d2:87:3a:64:e6:9d:a3:5c:e1:b0:9c:d1:99:bc:bc:
6b:5c:bf:95:d9:dc:3d:d9:e7:aa:5b:82:bd:d2:a9:
e0:c7:09:99:c6:e7:4d:7c:dd:72:f6:d0:59:89:b2:
72:28:81:8f:63:6a:21:66:85:45:36:7f:fa:1c:1e:
21:2d:0c:17:9c:9c:e1:cf:64:ab:56:c0:9d:50:ab:
db:29:5a:7f:cc:3d:34:0a:f7:83:ff:c9:ea:fd:08:
0d:ed:7f:3e:98:de:9a:6f:af:c6:0a:33:5d:98:b1:
4a:9b:9a:47:b9:f6:b7:ba:51:c9:5d:62:31:ff:03:
a4:19:2a:27:89:0a:9e:63:2a:6b:29:60:32:cf:5d:
c3:93:c8:e3:5c:b2:25:c9:20:b3:21:f2:2d:96:4a:
7c:d1:7d:a4:ce:dd:77:be:fe:b2:27:b9:31:fd:e4:
b0:74:1a:e3:1a:1c:7b:8b:2a:ac:ab:26:ab:ef:b1:
b3:61:8f:8d:d5:a6:41:0b:74:75:cf:28:af:6f:ca:
26:24:74:8e:aa:51:99:07:12:67:7b:8e:e2:94:f2:
6a:96:0a:34:21:60:dc:51:f6:80:17:6a:2a:83:f9:
48:d8:8e:1f:9a:45:df:35:ee:06:16:a6:0d:f4:31:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5B:E5:8B:68:EF:A2:20:8E:1D:6A:9A:D8:5D:74:2E:C2:4E:E1:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B95E3EF8A74011EF983DD6BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.152.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:74:fd:ed:f1:d2:d7:25:24:d9:6a:15:d1:b0:92:19:a8:5e:
f1:67:2b:66:c5:f3:da:65:72:a8:53:e4:82:d3:4b:e2:69:5d:
ac:db:07:4e:c0:41:84:11:dd:c5:f7:bc:f4:bf:ba:b0:20:4a:
e6:db:9a:86:7e:f6:33:b5:fb:6f:2f:43:f1:36:d7:59:36:1b:
99:44:a6:9f:8a:43:91:a8:4a:7b:53:c5:bd:be:98:ec:1e:e6:
21:27:b5:bc:25:3d:d1:59:25:8d:68:10:cc:1f:77:57:9e:74:
df:15:ab:a6:1d:68:2f:dd:a7:c5:a5:a7:81:13:91:1e:bc:1b:
d6:b4:43:cb:15:74:96:d8:0d:a8:45:f5:ff:98:9b:bb:f7:1f:
02:a3:a2:16:ad:ab:11:a4:65:f5:28:25:6c:f2:b7:fc:6f:79:
f5:2f:07:d2:ae:68:41:ba:b4:f1:5d:16:72:68:c8:2e:92:f8:
1a:cb:75:ac:df:34:bf:21:36:0f:9d:67:6c:61:7c:c6:99:1c:
14:c5:da:fd:ad:36:e8:24:12:6b:0a:21:d1:4d:15:4e:f3:f2:
46:8c:7b:81:84:64:ad:99:9c:8f:ce:e4:e5:ae:b4:fa:96:42:
1d:36:b9:d4:cc:e2:3f:c0:b9:ea:ff:58:9f:1c:98:df:ad:c3:
76:79:92:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:45 2024 by rpki-client on console-fra.rpki-client.org