Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3C585E2A74711EFA02BBD6C762E951A.roa
File: D3C585E2A74711EFA02BBD6C762E951A.roa (raw, json)
Hash identifier: W35nUE06Guldfgu/4KlTRrFooXUzOOihOxmJf5uDHgA=
Subject key identifier: 0A:DE:6A:4A:F3:42:D9:80:D2:97:6A:67:CD:FC:14:2D:EA:25:2D:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D686
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3C585E2A74711EFA02BBD6C762E951A.roa
Signing time: Wed 20 Nov 2024 14:00:41 +0000
ROA not before: Wed 20 Nov 2024 14:00:37 +0000
ROA not after: Sat 30 Nov 2024 14:00:37 +0000
asID: 202656
IP address blocks: 156.246.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54918 (0xd686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:00:37 2024 GMT
Not After : Nov 30 14:00:37 2024 GMT
Subject: CN=673deb89-3091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:02:23:65:94:ad:c5:18:b5:ad:3f:07:06:
06:d8:71:83:cd:26:f2:71:dc:93:22:3c:2a:7d:38:
a4:af:72:6c:13:83:dc:dc:af:06:39:8f:db:27:73:
7d:c6:45:1a:e7:f4:af:0d:e6:7d:9d:1b:c1:c0:47:
89:2e:c0:75:8d:a9:f0:c7:6c:ff:6c:34:b4:01:12:
b0:39:08:0b:b0:1c:21:ef:3c:53:cc:8c:92:53:9e:
b0:ea:3c:49:1c:f5:eb:e7:cc:66:6a:71:87:30:cd:
3d:ff:56:29:40:c0:ee:d4:65:66:e0:ab:51:c5:93:
25:b0:65:41:23:b3:bf:a6:40:d1:5f:8d:b1:98:3a:
ab:8d:b0:75:6e:02:f9:79:c4:41:ec:20:91:44:88:
51:d8:85:f0:96:8d:a9:86:ab:93:af:d6:9b:e4:41:
97:7a:94:fb:f2:7f:7a:3d:f9:22:fa:40:14:b2:11:
5f:cf:b1:15:5f:c7:a7:89:bd:5e:0c:b8:53:29:3a:
4a:3a:70:0b:c3:1b:0b:bd:6f:0a:ce:9b:2e:e1:e8:
69:9d:68:a3:8d:76:48:7b:2f:7c:7e:ac:c4:ff:fd:
8a:26:e7:5b:d3:01:ad:35:eb:07:b8:88:f4:92:15:
4d:c1:3e:66:b8:5c:78:cf:54:ce:ff:5a:94:09:c9:
40:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DE:6A:4A:F3:42:D9:80:D2:97:6A:67:CD:FC:14:2D:EA:25:2D:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3C585E2A74711EFA02BBD6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7c:96:73:d8:2a:82:15:f0:77:8e:4f:09:40:5c:51:5c:d0:
58:4a:9b:cb:cf:fa:2d:a1:b0:cb:29:cb:cb:07:03:fb:64:8a:
c1:90:6f:b7:3b:45:72:e3:d7:91:4c:68:ef:e8:a1:07:e0:ab:
30:88:3a:aa:bb:77:92:c3:b1:c6:79:ab:0e:5d:03:8b:c0:4c:
29:11:fe:73:45:27:18:4d:60:cb:3e:20:12:6d:46:63:92:b8:
f9:7b:41:7a:3b:51:08:3a:01:23:70:f4:54:aa:4e:b8:be:a2:
42:e2:c5:ca:d3:78:2a:35:59:d6:21:db:ab:03:4c:1c:b0:1d:
f4:23:df:e9:85:45:2a:87:71:00:9d:d9:e8:6a:85:73:0d:c0:
9b:ef:7e:0d:ce:59:07:91:d4:4e:29:ae:e4:23:b2:17:1a:2b:
f0:d1:f4:5b:6f:cb:e9:19:d3:c7:7c:7c:61:12:aa:55:97:46:
59:00:89:45:4a:d6:e2:5a:bd:c1:83:91:de:f4:f9:af:3b:ec:
e4:45:d9:56:5c:17:e9:de:3f:27:ee:c3:60:2f:81:96:ed:c5:
de:39:b3:a1:1e:66:12:d2:f8:8a:d6:37:ab:45:f3:82:a5:8f:
99:6c:c8:68:d1:27:dc:80:71:0f:8c:04:60:e8:f3:22:66:65:
4f:52:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:51 2024 by rpki-client on console-ams.rpki-client.org