Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6F6352A9AAF11EFAB33337F762E951A.roa
File: E6F6352A9AAF11EFAB33337F762E951A.roa (raw, json)
Hash identifier: pHa8YUWT900lRfajWiHd+DUuRHiZGW4hNq70e/AuZ3Y=
Subject key identifier: 7F:A2:CB:79:DA:6B:48:3F:18:6B:9B:FD:2E:18:F6:2A:9A:91:D2:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CDB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6F6352A9AAF11EFAB33337F762E951A.roa
Signing time: Mon 04 Nov 2024 13:22:56 +0000
ROA not before: Mon 04 Nov 2024 13:22:52 +0000
ROA not after: Tue 03 Dec 2024 13:22:52 +0000
asID: 141883
IP address blocks: 156.240.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52664 (0xcdb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 13:22:52 2024 GMT
Not After : Dec 3 13:22:52 2024 GMT
Subject: CN=6728cab0-6de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:21:1d:bf:28:54:b3:60:6c:cc:d0:26:72:
a1:5c:6f:e3:bd:32:f1:de:96:2f:07:90:b4:12:85:
ad:fe:1e:57:8b:3e:eb:63:6c:8e:5c:b4:d4:3f:c9:
3b:0b:37:21:76:57:19:d1:ae:63:a8:0b:f2:33:e0:
46:98:94:34:33:75:da:7a:24:90:3e:ed:b8:f7:f8:
41:9e:10:e5:57:d9:ba:74:54:1c:4a:e0:aa:ae:81:
a8:85:9b:92:23:2a:2c:80:80:52:12:22:5c:ca:ea:
9b:bc:77:59:7d:3d:f5:09:e0:2e:92:35:27:3a:f8:
c5:d3:cf:1a:35:4e:e3:5f:e3:52:f8:77:a5:46:28:
0e:37:f4:80:ce:a9:7b:9e:1d:b0:79:7c:6e:b9:ab:
14:18:c5:15:e5:09:76:a9:7a:0c:13:6f:70:93:a5:
66:2b:1d:04:25:f3:87:b0:2c:79:4d:92:a2:22:ca:
0f:93:06:2a:d3:a2:36:3b:6c:86:ff:b4:4e:e4:b2:
bd:fc:6c:1e:8a:cc:d8:97:c9:63:01:76:2e:ed:cc:
93:e8:90:97:17:2f:8f:4c:3a:2b:10:a6:11:b5:b4:
20:15:2d:07:1e:a7:ba:d3:02:e5:4d:18:27:c7:e4:
eb:9a:2b:3d:c7:d6:9c:1c:f6:bc:64:5b:31:4b:eb:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A2:CB:79:DA:6B:48:3F:18:6B:9B:FD:2E:18:F6:2A:9A:91:D2:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6F6352A9AAF11EFAB33337F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.32.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:79:db:3e:09:d0:00:58:61:45:4f:f6:89:4c:2d:10:05:94:
70:ab:a6:d7:e1:8e:65:29:45:c2:6c:7a:ba:2c:5b:87:1d:4e:
d1:8c:60:20:ac:6c:3d:86:75:31:23:bf:3d:1b:0a:8a:e4:e8:
5f:2a:91:c4:4a:d5:df:7e:98:9d:4d:4c:5d:ff:77:04:7e:cb:
8a:1f:99:1e:de:e2:33:4d:3f:52:df:21:a6:ce:5e:d6:02:0c:
5b:21:51:a5:cd:d1:88:78:72:ac:26:ab:2a:3b:ea:41:40:ce:
d7:b8:db:ad:56:53:a2:09:07:73:74:62:88:45:c7:5d:c6:fb:
5e:64:47:86:23:87:59:27:44:39:db:ec:25:48:7d:ef:a1:a8:
99:9a:ad:b4:13:1b:6b:ce:6b:f8:a6:a5:65:47:3c:4e:6c:6d:
ab:83:ca:7e:94:f7:4f:9a:f8:d4:45:03:22:3c:5a:9a:d2:ef:
68:c5:fc:cc:bf:b1:57:78:5e:86:f5:23:e8:b8:50:0c:5b:ab:
7c:a2:ac:9d:36:48:98:3d:f3:82:d9:a0:b2:c4:a5:49:27:b5:
ad:3c:3a:24:24:f7:84:3e:92:1d:16:a9:dc:7b:d1:cc:02:75:
17:44:92:88:f6:34:64:90:32:47:f1:b4:4d:05:19:16:4c:ca:
b6:d0:3b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:52 2024 by rpki-client on console-fra.rpki-client.org