Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFEF5BAE912111EFB3FBF646762E951A.roa
File: DFEF5BAE912111EFB3FBF646762E951A.roa (raw, json)
Hash identifier: nNppUZoEh8L3FJHmFeCsCrPwll4Uj2aRQ6d/l1qUjAQ=
Subject key identifier: DF:5B:34:76:E4:19:B3:DE:53:61:B7:4A:EB:B7:90:B1:30:C2:D2:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C7C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFEF5BAE912111EFB3FBF646762E951A.roa
Signing time: Wed 23 Oct 2024 09:33:35 +0000
ROA not before: Wed 23 Oct 2024 09:33:31 +0000
ROA not after: Fri 29 Nov 2024 09:33:31 +0000
asID: 203020
IP address blocks: 156.230.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51145 (0xc7c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 09:33:31 2024 GMT
Not After : Nov 29 09:33:31 2024 GMT
Subject: CN=6718c2ef-875a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:47:cb:d8:7d:58:3b:b9:c5:4c:f4:4b:21:
03:22:81:57:a5:6c:e3:c2:51:59:3c:a0:1b:ef:fe:
5f:26:50:81:a9:aa:58:d1:b2:5d:83:b0:b1:d3:71:
db:6d:62:50:23:28:98:39:81:15:39:96:7f:fc:6e:
3e:64:b8:67:b2:cb:38:6c:a6:ad:c3:d2:75:9b:fa:
31:0c:a0:76:85:a8:94:69:83:8b:88:5d:45:9f:7a:
23:b4:da:1e:15:fc:34:8d:18:22:85:b0:a7:d5:6b:
2c:17:14:b0:38:9e:69:b1:f8:7f:0f:c0:a6:a5:cb:
b2:86:6d:03:04:d6:a8:65:09:b8:e6:ae:e2:59:72:
a7:f9:7e:13:f1:bb:5a:76:b8:c6:6b:40:ed:ec:51:
e6:04:e7:40:3c:0f:be:4c:e2:64:7b:13:26:8c:9b:
2d:ca:eb:57:cb:d7:25:8c:8e:35:79:ea:9c:a4:70:
63:dd:e7:ca:cd:c0:24:b3:2d:67:25:86:98:b6:e5:
ba:51:68:6e:4c:39:dc:b5:f5:df:69:76:3d:53:0c:
5f:5b:34:10:21:2c:b8:11:ea:60:8c:c7:7e:a3:07:
a9:9f:c9:be:ab:fc:2e:76:1f:1a:30:98:67:2a:c4:
4a:34:cb:7b:f3:2b:bb:f4:23:12:ad:d5:bc:d2:2a:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5B:34:76:E4:19:B3:DE:53:61:B7:4A:EB:B7:90:B1:30:C2:D2:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFEF5BAE912111EFB3FBF646762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:31:d0:25:b8:cb:40:4e:da:01:cc:e7:e6:58:47:51:b5:90:
aa:c8:0a:12:eb:0d:7f:c1:81:68:68:62:8a:e8:14:b0:26:0b:
a6:e4:78:a6:28:9d:d2:7a:3a:12:2b:fc:af:9e:0c:e7:14:f1:
d1:3d:3d:a2:6a:20:f8:e4:19:7a:9c:41:fa:4a:3b:56:c6:3d:
bf:7d:ed:2f:c9:2c:31:5f:6c:5d:b3:ed:46:e9:b6:ff:41:90:
ad:0d:36:79:6e:9e:fb:3a:77:65:0a:21:e6:48:73:d3:a0:3e:
26:48:05:82:6a:e8:de:34:c6:74:09:48:3f:f4:27:70:00:92:
de:e8:83:ba:d2:22:4e:e6:5b:a3:af:a1:37:c8:86:25:3d:e5:
18:fb:43:f7:f9:19:ca:a4:a4:ba:3f:9b:53:2f:05:7f:46:ac:
54:f2:3f:97:0e:b3:f8:19:6e:e7:b0:e0:18:d9:f4:d7:05:d9:
48:af:2d:1a:23:09:40:d1:e1:32:85:93:d7:37:1e:47:2a:1d:
02:e3:8a:ab:50:3e:81:d0:75:88:d7:25:25:63:23:1d:31:d5:
d3:e1:91:25:a7:0e:f6:ab:b3:76:52:98:cf:0a:86:8d:19:23:
ae:05:b6:98:be:ff:7a:7f:52:1c:26:37:22:7f:db:af:3f:6c:
a2:48:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:51 2024 by rpki-client on console-fra.rpki-client.org