Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFE65A72A4D111EF9D0DB37C762E951A.roa
File: DFE65A72A4D111EF9D0DB37C762E951A.roa (raw, json)
Hash identifier: fK4fBT3Ko8rG/NBJARsTRenvAI56XKtFj+OJU27RT6s=
Subject key identifier: 58:EE:F4:69:74:91:8B:64:4A:31:6E:86:C4:7A:23:CE:B4:00:D0:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFE65A72A4D111EF9D0DB37C762E951A.roa
Signing time: Sun 17 Nov 2024 10:51:18 +0000
ROA not before: Sun 17 Nov 2024 10:51:15 +0000
ROA not after: Tue 26 Nov 2024 10:51:15 +0000
asID: 39600
IP address blocks: 156.237.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54497 (0xd4e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 10:51:15 2024 GMT
Not After : Nov 26 10:51:15 2024 GMT
Subject: CN=6739caa6-4411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:cb:4f:e2:7f:aa:93:ae:52:ba:05:00:92:
57:29:2d:46:74:32:e4:0c:59:35:f4:5b:38:d4:33:
83:a5:97:e4:43:bc:5a:e7:f1:ba:7f:ee:77:af:2e:
9e:76:18:ac:bc:0f:61:74:11:84:09:8a:1f:08:e8:
64:ad:b5:4c:81:f3:4d:15:79:d2:cd:ea:a7:4b:c3:
18:04:bd:ac:ce:b1:bf:4f:d3:99:03:27:cc:f2:fa:
91:f4:b0:4d:0c:78:fa:c9:55:15:6b:c5:48:b7:86:
27:f3:e1:dc:a9:d7:0f:b4:66:72:64:76:65:06:f0:
95:34:d8:38:92:97:f4:57:81:12:fc:29:e6:77:0b:
d2:af:8e:b6:ab:5e:09:c8:a2:20:75:70:9a:18:95:
23:f9:db:6f:a8:68:ff:10:fc:ff:44:e7:29:aa:1c:
50:97:40:0a:af:81:a8:7a:11:0f:29:3c:40:4e:49:
55:ff:2e:49:54:f5:db:15:8f:31:c7:dc:52:99:12:
91:73:50:11:d4:5f:46:b3:30:18:31:c3:6b:19:7d:
23:92:06:2e:b9:30:41:6b:8b:84:bb:7e:66:b8:07:
de:13:8f:52:05:e6:e9:60:90:33:59:7b:d4:6d:8e:
e9:12:92:9d:bc:48:a7:5f:33:fe:ef:27:65:19:b4:
6c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EE:F4:69:74:91:8B:64:4A:31:6E:86:C4:7A:23:CE:B4:00:D0:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFE65A72A4D111EF9D0DB37C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.120.0/22
Signature Algorithm: sha256WithRSAEncryption
10:d8:f7:4f:1c:c9:6c:b4:15:04:72:57:f5:6e:22:7d:bb:e3:
ee:e8:32:74:a7:d0:e5:9c:1a:39:7a:e3:b5:91:4a:40:49:7a:
0e:1a:15:c2:33:e8:67:4e:1b:5c:c4:11:6b:43:2a:70:ab:ba:
68:a1:43:b3:35:b5:a2:81:72:e0:2f:d1:35:3c:9c:32:63:e0:
9e:a8:50:c9:34:82:e9:c0:04:a0:45:82:40:55:fd:ab:9a:bc:
6e:33:12:32:5c:08:d7:25:37:98:b0:e3:88:61:ec:0d:c5:3d:
9f:fa:29:e6:5b:84:c8:96:c6:95:c1:50:ae:5a:e1:c5:50:c5:
a7:fb:52:a9:5e:c7:45:fa:40:b9:3d:44:41:ff:1a:98:5f:01:
b7:56:bf:46:e8:ce:d6:2e:51:7d:3e:a5:92:40:8b:42:f0:7e:
1b:d2:f3:42:d6:25:30:dc:12:38:94:07:a8:79:0a:38:eb:8b:
f7:40:e8:7b:02:3c:cd:ed:05:c6:54:f9:1e:32:1f:37:a2:42:
81:a3:7d:34:6b:91:a2:05:78:59:dc:a1:26:c0:57:9e:db:f6:
40:92:2d:fd:15:8f:b7:ce:d9:7c:8a:05:0d:d7:e8:48:ad:7a:
b8:57:da:13:0a:15:93:8f:0d:ec:8c:e5:84:41:5d:de:06:6c:
db:6b:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:53 2024 by rpki-client on console-ams.rpki-client.org