Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC1F2A36A7DC11EFA11B3E9C762E951A.roa
File: EC1F2A36A7DC11EFA11B3E9C762E951A.roa (raw, json)
Hash identifier: GYgfanodExTGyR7cDuQyaRr7xQ6N8EM/oaA/A5ClXV4=
Subject key identifier: 46:86:3C:E6:BA:EC:31:55:24:9F:8B:68:93:CB:3B:DB:DF:D2:D8:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D701
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC1F2A36A7DC11EFA11B3E9C762E951A.roa
Signing time: Thu 21 Nov 2024 07:47:57 +0000
ROA not before: Thu 21 Nov 2024 07:47:53 +0000
ROA not after: Wed 18 Dec 2024 07:47:53 +0000
asID: 60223
IP address blocks: 156.253.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55041 (0xd701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 21 07:47:53 2024 GMT
Not After : Dec 18 07:47:53 2024 GMT
Subject: CN=673ee5ad-9f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:5b:d8:31:a7:f3:e7:04:e5:f6:46:6e:fb:
f9:44:e4:27:90:6f:bf:7e:52:10:1b:71:fd:b3:c8:
9e:e0:31:73:8d:cd:13:55:f3:66:04:99:9c:a6:35:
88:4b:61:df:68:2b:7f:c0:d3:08:c0:f4:8c:9c:32:
ef:3c:96:fe:52:d3:88:bd:88:25:d7:5e:a7:e4:a8:
ce:f0:32:89:30:f1:41:17:b7:a0:4a:cb:e4:6a:da:
97:04:4a:45:6d:d8:a0:aa:df:69:6e:7f:ef:1b:b4:
85:09:9f:b5:22:b4:03:d1:7e:d9:3d:f8:18:ca:8c:
3f:5e:95:59:31:63:14:2e:d5:c8:09:92:0f:10:dd:
5f:34:88:b3:a6:87:f5:41:c7:08:2f:5c:1b:f7:c6:
39:c3:e7:67:c7:87:bf:68:7e:e6:f9:58:74:a9:ae:
78:f9:32:e3:ef:8b:27:a3:f4:87:aa:78:b8:90:ff:
b0:ba:46:32:86:11:0e:56:eb:7e:61:fd:78:f4:f1:
20:63:2a:78:91:40:61:b1:46:8d:97:ec:01:e0:49:
13:e6:bd:c6:88:f3:c1:6e:dc:2b:67:df:7c:1d:ec:
88:3b:b7:65:b1:c0:ad:72:65:93:8b:fc:7a:37:59:
29:13:5e:bd:72:cc:91:57:dc:5d:93:ed:57:98:a4:
57:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:86:3C:E6:BA:EC:31:55:24:9F:8B:68:93:CB:3B:DB:DF:D2:D8:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC1F2A36A7DC11EFA11B3E9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.220.0/22
Signature Algorithm: sha256WithRSAEncryption
92:1b:f7:92:2d:a0:a5:66:57:97:e6:56:22:da:99:78:7f:2e:
2e:c0:7c:28:b8:0d:47:8b:a9:78:b0:eb:42:97:bf:19:21:51:
67:40:ae:d1:d6:e4:a8:68:26:58:37:ce:53:6b:56:ed:f4:76:
4a:e2:58:16:63:01:6c:cf:eb:2f:56:d5:a9:da:25:13:23:a4:
9f:00:27:05:04:8b:0a:f5:f4:39:f8:0d:e5:fd:63:65:fd:49:
ff:87:c5:4b:12:e3:40:11:b7:7a:59:e1:ab:6f:cb:8e:f5:b3:
84:21:c9:02:18:a5:3a:d5:70:00:24:d6:9d:51:1e:8d:21:4b:
30:14:20:c4:57:b2:34:4c:02:e0:03:cc:2e:df:ce:d1:83:33:
e7:59:29:d7:d6:27:06:8b:1c:00:64:ab:43:4b:48:a4:2c:31:
78:10:0a:72:77:50:5f:d5:23:21:3f:e7:de:61:17:b0:a4:d4:
8f:77:1d:4a:0c:ce:9c:55:3c:f9:b7:57:29:e3:53:ea:64:f2:
36:ff:94:f4:cd:00:24:b1:58:49:e8:82:b7:1b:21:3f:fd:c0:
41:9f:7d:03:2a:77:9c:be:0a:0c:20:49:4e:5e:88:48:71:c5:
14:e7:70:61:61:e7:9d:73:78:ab:7e:f2:31:cd:9f:b3:9b:8f:
18:86:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:53 2024 by rpki-client on console-fra.rpki-client.org