Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE8B45EEA26111EFB372D79A762E951A.roa
File: BE8B45EEA26111EFB372D79A762E951A.roa (raw, json)
Hash identifier: lMljopcZXZqgIz7Ej+5VOgbord7bu4ODXCDFhsjdMPI=
Subject key identifier: 89:FD:D5:31:9F:73:BB:4C:72:46:1D:CC:02:83:E6:B8:ED:E3:54:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D29B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE8B45EEA26111EFB372D79A762E951A.roa
Signing time: Thu 14 Nov 2024 08:23:36 +0000
ROA not before: Thu 14 Nov 2024 08:23:33 +0000
ROA not after: Sat 04 Apr 2026 08:23:33 +0000
asID: 55967
IP address blocks: 156.240.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53915 (0xd29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 08:23:33 2024 GMT
Not After : Apr 4 08:23:33 2026 GMT
Subject: CN=6735b388-7b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:f5:24:26:d1:9f:ad:78:c0:be:a4:0e:47:
06:c7:18:b6:b3:d5:7e:51:64:95:dc:88:b5:4e:86:
bc:71:1b:60:21:94:af:61:9d:7f:d1:0d:3a:d7:78:
5e:03:58:94:3e:f3:7e:95:d0:f3:6b:0f:23:c9:7e:
4e:5b:17:5b:0e:b3:fb:11:16:1a:bb:3e:93:d7:04:
5e:77:04:c9:30:d1:d8:d5:d1:d2:1c:e4:2b:74:b4:
73:d5:ea:d7:7e:0f:b6:2a:eb:c9:69:f7:ba:cb:82:
ce:85:38:c4:c2:84:22:2d:3e:d3:32:a7:fd:8b:7e:
8f:a6:1f:0b:cd:f2:6c:9b:c1:5d:84:d1:7b:dc:09:
b7:01:2a:5c:ca:06:c8:3f:82:72:ac:75:5a:d9:30:
fd:00:95:c2:59:69:5a:ad:6b:65:88:4f:47:81:1a:
7e:c1:65:12:1c:2a:0e:d8:a5:7c:a8:90:86:82:ae:
b4:f3:34:e5:e6:98:8f:85:db:b3:29:3d:3c:cf:f7:
94:4b:5a:70:49:4e:40:7c:f2:90:a6:13:8b:17:28:
52:6a:b0:d5:71:46:25:a2:c8:fc:88:11:4b:1f:d3:
5f:45:01:a3:21:91:75:92:ea:c3:9e:45:10:ae:a3:
6b:01:f2:d7:9f:d4:44:99:bc:87:19:59:ac:6d:7a:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FD:D5:31:9F:73:BB:4C:72:46:1D:CC:02:83:E6:B8:ED:E3:54:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE8B45EEA26111EFB372D79A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.120.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:1f:d7:39:b9:30:93:32:4a:8d:40:9a:5b:fa:cf:5c:1a:02:
fb:1f:bc:10:85:36:9e:96:1f:de:02:cb:34:07:26:bd:17:ee:
47:21:b2:a6:cc:dc:fe:43:62:6e:bc:21:69:6f:45:99:03:38:
7d:c9:93:a1:22:bd:a1:a0:e1:a9:1c:f2:e7:74:24:87:2f:3a:
14:9c:93:fd:28:a6:f3:c8:f2:08:03:98:33:fd:b6:4f:b4:33:
3f:f2:dd:97:ea:86:c9:7f:f3:b1:fa:97:5c:77:ab:6f:9c:f1:
13:a2:1b:b3:50:fe:f5:db:d1:2b:a7:4b:33:79:da:fe:5a:09:
33:7b:85:2a:4f:e6:d7:92:3c:cb:e3:ae:c2:d8:d7:01:e7:c7:
b6:fa:0d:be:fd:a9:12:69:5b:13:80:68:11:3c:e9:d6:16:9c:
c6:a0:2a:48:09:0b:68:6b:23:1a:4e:32:fc:5f:6d:9b:36:60:
75:cf:ca:d8:fe:0b:dc:95:77:20:bd:e1:e8:44:a7:fb:1b:98:
58:96:37:7b:1c:5f:da:51:7d:77:01:74:cd:79:e3:de:86:19:
56:a1:d8:65:a9:1c:a3:b7:f2:b5:3d:7a:fa:03:1f:cc:4f:b3:
52:b1:f8:32:b5:95:b9:77:44:44:7d:64:a6:eb:81:d1:57:5e:
00:b3:2e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:46 2024 by rpki-client on console-fra.rpki-client.org