Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BED0524EA74111EFA99C1D46762E951A.roa
File: BED0524EA74111EFA99C1D46762E951A.roa (raw, json)
Hash identifier: Vi9lmBg2JntqnyqKpJxdNq0qI06rAGYIvMvQcRKcfi4=
Subject key identifier: 4D:CF:0F:7A:D2:5F:5E:30:85:85:AB:7E:72:F0:26:73:80:5A:09:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D643
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BED0524EA74111EFA99C1D46762E951A.roa
Signing time: Wed 20 Nov 2024 13:17:09 +0000
ROA not before: Wed 20 Nov 2024 13:17:05 +0000
ROA not after: Sat 30 Nov 2024 13:17:05 +0000
asID: 44559
IP address blocks: 156.246.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54851 (0xd643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:17:05 2024 GMT
Not After : Nov 30 13:17:05 2024 GMT
Subject: CN=673de155-8daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:d1:50:4f:ad:df:cd:f0:a8:5d:ff:01:e1:
95:a0:1c:06:61:31:41:3c:18:6f:15:93:11:67:38:
4a:6e:e4:20:0e:72:5a:13:1e:d7:a0:6e:07:2f:73:
2a:f5:40:2c:61:bd:27:b2:80:12:4c:f1:8d:0c:db:
ae:2e:af:aa:ab:2a:ed:1e:f6:07:87:21:ca:d0:f9:
4e:48:45:56:00:85:50:e4:21:37:66:64:d7:78:d3:
f9:1e:ae:7b:b2:74:79:ae:73:41:a4:cf:c4:7c:a6:
39:1c:3a:be:f7:79:d6:3f:fd:3c:19:bd:b2:20:3f:
3f:af:e0:a0:53:c1:5a:a8:41:95:27:c6:47:c1:ad:
b1:04:ef:57:2b:9b:7c:3e:eb:e5:6c:6a:13:c2:fb:
b0:30:35:2b:00:1c:99:df:28:9a:51:c7:02:5f:bd:
10:fb:8f:99:3e:89:bd:7b:11:8c:d8:ec:00:08:7d:
39:fa:e5:28:4c:12:a1:89:a5:4e:11:f0:6d:91:a1:
35:7d:91:5d:9d:e1:56:2f:c4:c3:b7:21:14:e0:44:
21:30:c3:8a:ee:bf:99:64:57:b2:8a:4b:eb:76:55:
b5:d9:a3:a1:a4:6c:3f:2c:31:b0:15:71:23:ac:12:
be:22:c6:c2:1a:80:61:1c:43:71:ac:99:54:a4:43:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CF:0F:7A:D2:5F:5E:30:85:85:AB:7E:72:F0:26:73:80:5A:09:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BED0524EA74111EFA99C1D46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.168.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:1e:ac:d2:35:38:30:56:85:ad:ed:50:49:6c:30:27:9b:cd:
0f:02:e4:e4:dc:26:c6:58:dd:30:bc:55:97:2b:dc:60:99:61:
a1:c3:a2:9c:5c:e5:77:f0:80:0d:e5:b7:99:ee:5d:d0:d1:dc:
14:00:35:a5:83:22:27:f4:54:ee:e4:97:a1:f6:42:68:9c:9d:
48:e8:30:fd:de:38:17:de:e1:1a:49:b1:70:45:14:cb:88:a4:
a0:b8:7a:a4:4b:64:40:a8:c3:7b:73:5e:91:40:da:f3:b6:a4:
4a:1d:63:a8:96:71:f0:2a:bf:ca:3b:17:42:4e:14:7c:21:9f:
01:60:c5:7e:50:64:b1:3f:f4:f8:60:60:9f:6d:fd:94:7a:64:
89:f0:57:02:be:68:5e:e3:3b:3b:7c:47:d7:df:cb:b1:06:28:
57:58:9b:42:58:78:27:1f:1f:fe:d4:b4:20:53:cc:c1:9d:12:
6c:5b:ab:25:aa:2d:35:37:49:62:0a:73:39:ca:94:75:8d:d4:
60:0b:23:2d:c1:77:71:9c:a6:3a:dd:90:68:96:46:a0:86:77:
e8:d1:cf:c2:88:e9:4c:67:f8:6d:a2:2d:75:ae:35:9e:63:3a:
ce:c1:5c:c9:f5:57:6c:e8:73:ab:96:e3:c2:58:f7:fe:1f:61:
aa:fb:34:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:47 2024 by rpki-client on console-ams.rpki-client.org