Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD792FB4A15D11EFB75CCB50762E951A.roa
File: FD792FB4A15D11EFB75CCB50762E951A.roa (raw, json)
Hash identifier: EIvFImGf8ft9/bqF6oNOnGGyFCdl9PNJWGJDWm3rZdM=
Subject key identifier: 95:C9:58:76:B4:CE:42:A0:DD:4C:EB:58:CB:C6:28:CF:55:F5:A2:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D1E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD792FB4A15D11EFB75CCB50762E951A.roa
Signing time: Wed 13 Nov 2024 01:24:13 +0000
ROA not before: Wed 13 Nov 2024 01:24:09 +0000
ROA not after: Fri 04 Apr 2025 01:24:09 +0000
asID: 55967
IP address blocks: 156.240.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53734 (0xd1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 13 01:24:09 2024 GMT
Not After : Apr 4 01:24:09 2025 GMT
Subject: CN=6733ffbd-3d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:5e:a9:9e:e5:5a:da:a2:ee:3d:d9:a3:9f:
30:3e:1a:9a:5f:84:bb:1f:12:ff:b2:7a:66:4a:34:
fc:0b:ec:77:91:d7:df:37:6a:d1:b9:2a:e8:d6:ff:
da:e6:3b:98:22:df:a6:f8:bf:88:4a:4a:99:2b:30:
c0:1d:ec:2d:f9:3b:de:a3:91:0e:e1:e5:68:37:94:
09:e6:fe:1d:8f:84:bf:22:8c:5a:b7:f3:4a:0e:a4:
e4:1f:28:f5:70:ed:ce:b2:7c:af:88:93:4f:79:0f:
13:a2:b1:82:37:0b:f3:c0:8e:80:c8:72:f4:9c:40:
67:d1:3d:f9:4c:50:33:bb:59:7d:e4:28:43:51:52:
fe:1f:e5:38:94:6e:02:ab:1f:8b:e4:4e:c0:39:9d:
75:57:ae:dd:41:18:4c:2d:de:57:44:9a:6f:25:01:
66:cd:07:40:31:65:d1:3b:df:67:72:2b:ed:c8:5f:
c1:f4:ad:c1:c0:2a:ea:3e:b0:6b:30:42:5e:69:a4:
49:0d:d7:a0:eb:f3:13:66:25:85:9b:9d:42:76:77:
30:c3:b0:dd:75:fb:a5:90:50:02:be:76:d1:e5:42:
0f:e4:0e:af:6e:0d:5d:fe:e2:c9:46:81:ff:f2:b4:
bf:63:c5:59:d3:99:b8:5e:93:ed:02:31:83:5b:1e:
c4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C9:58:76:B4:CE:42:A0:DD:4C:EB:58:CB:C6:28:CF:55:F5:A2:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD792FB4A15D11EFB75CCB50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.120.0/21
Signature Algorithm: sha256WithRSAEncryption
91:5d:00:f5:5e:48:40:28:05:7c:ed:a4:67:4a:6e:67:bb:cc:
97:12:1e:12:a5:81:0b:aa:7b:4e:f6:79:49:de:ee:97:90:a0:
c6:e8:7c:3e:3c:ba:6c:03:98:15:ad:a5:6c:73:60:9e:b0:a8:
33:75:2e:61:e7:38:1b:5c:fe:1e:9d:ed:71:ca:55:44:78:4e:
41:3a:64:af:63:b1:4a:9c:2b:2b:05:65:64:60:79:d1:0a:ba:
65:5f:af:56:93:f5:5e:3f:8a:d4:2a:85:b5:ac:3e:99:4d:be:
26:ae:2d:4e:7c:3e:f9:a3:7b:d7:7f:c3:0f:78:30:c5:af:74:
98:f6:7e:4e:bd:a5:fc:a1:b7:a5:fd:34:ef:2d:33:05:42:05:
1b:0d:f6:14:16:ca:06:32:e5:24:e3:5e:6a:0d:0c:c1:e6:84:
dd:19:72:af:d6:f5:a5:d5:53:24:4a:3f:76:07:a4:3f:aa:df:
85:3d:62:95:83:ee:4d:c2:62:81:f3:fa:4a:5e:5c:58:75:0e:
b5:cd:9b:a5:c4:e3:ed:ae:66:de:ea:ff:5c:a7:22:86:8a:76:
8f:2e:a0:e0:62:6b:34:3e:3e:79:09:54:44:f1:21:79:41:1c:
e3:4f:61:b8:b0:70:a5:cc:2d:f6:7d:dd:d3:26:c5:a5:f2:1f:
3d:0b:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:56 2024 by rpki-client on console-fra.rpki-client.org