Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6B6518C9B7F11EF85BC139F762E951A.roa
File: E6B6518C9B7F11EF85BC139F762E951A.roa (raw, json)
Hash identifier: QCKWmjkACIUrKN5U4xvC6lSKQSJZ3Xo1QYVbVkc8GXU=
Subject key identifier: C2:99:9F:6B:67:56:F0:C2:E2:7F:9F:3E:23:1F:FA:30:0F:C4:C9:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE9F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6B6518C9B7F11EF85BC139F762E951A.roa
Signing time: Tue 05 Nov 2024 14:11:51 +0000
ROA not before: Tue 05 Nov 2024 14:11:47 +0000
ROA not after: Mon 13 Jan 2025 14:11:47 +0000
asID: 22773
IP address blocks: 156.246.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52895 (0xce9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 14:11:47 2024 GMT
Not After : Jan 13 14:11:47 2025 GMT
Subject: CN=672a27a6-ecde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:24:9c:a7:96:61:3f:a4:05:eb:e3:c9:8e:
ac:78:63:a6:66:bc:3b:9c:ee:91:17:c2:c8:54:36:
60:d1:6a:dc:3e:0d:3b:2a:dd:ab:f2:9c:0f:3f:e7:
61:f0:1a:44:16:54:96:58:8b:e2:43:92:f2:e9:ec:
46:b0:ed:07:85:fd:b7:02:7c:f9:5e:f8:36:f4:31:
3f:d9:70:61:89:8d:90:41:90:e0:ff:a5:76:6c:11:
ec:7c:dd:80:89:42:14:81:36:ca:db:b9:c6:21:67:
c3:79:b2:62:e3:12:c4:4c:ae:8b:89:7a:4a:fa:d0:
cf:ee:73:03:85:f7:4c:df:0b:84:a5:fb:41:c8:bd:
e6:24:56:0e:0f:e2:4c:06:7a:7d:07:0d:99:51:92:
82:e5:ca:cc:b1:47:de:84:41:e2:b7:b3:d2:71:e9:
ef:fc:d9:74:3a:1a:5a:00:e7:57:83:98:fa:9c:fc:
65:33:48:44:e1:70:09:d4:58:c9:9e:51:6a:01:21:
df:db:b6:00:40:f7:1c:32:2a:44:f2:31:dc:90:5f:
3b:65:6c:c7:a2:16:0f:8e:77:12:ab:70:31:9f:c2:
bb:b9:21:7d:7b:fe:68:fe:e1:7c:15:df:bf:e5:f2:
e6:47:15:d4:b3:8d:2b:82:d6:9f:4d:c0:ea:84:ce:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:99:9F:6B:67:56:F0:C2:E2:7F:9F:3E:23:1F:FA:30:0F:C4:C9:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6B6518C9B7F11EF85BC139F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.80.0/22
Signature Algorithm: sha256WithRSAEncryption
73:e3:f7:d1:fb:1d:f4:c9:c2:fa:4b:72:93:e5:2e:6b:15:7b:
80:9f:2c:5c:68:42:e5:73:d2:66:15:e1:90:0b:99:d7:65:03:
57:b0:8e:42:0c:9d:82:6c:72:68:13:87:16:d8:a7:4e:5d:d5:
14:73:25:5e:2a:a8:46:f4:a0:18:90:11:49:8d:9c:22:91:88:
98:2f:93:01:8e:2a:59:dd:67:5c:ee:8e:09:c0:5b:f9:a8:20:
02:d2:0d:82:c1:38:cb:6e:8e:b2:a8:d3:b1:9e:41:70:19:dd:
57:c7:9a:18:b8:60:41:30:3e:b7:52:fa:7c:09:dc:02:de:96:
be:aa:42:fe:b0:b0:0c:dc:4a:14:c8:c6:24:78:d0:cd:da:2b:
5d:14:09:ef:de:b4:56:ad:70:9a:76:a5:cb:cb:c5:76:09:de:
0d:98:e8:37:b4:73:72:71:b3:f2:25:4d:49:db:a9:c5:a1:51:
9f:07:2b:ed:52:e1:73:89:d0:af:55:78:5e:5c:b7:b1:05:1c:
b1:4d:7f:f5:df:13:4b:18:65:a3:33:26:de:c8:81:00:5f:6b:
3a:8b:13:8c:d8:b6:d3:5a:fc:84:9f:49:6b:d2:ec:06:b8:d4:
4d:95:cf:92:76:76:2b:9b:fe:9d:5b:b7:db:83:17:67:96:59:
e4:37:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:54 2024 by rpki-client on console-ams.rpki-client.org