Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54285E201C1B11EFA3E14F1E7DDC24C2.roa
File: 54285E201C1B11EFA3E14F1E7DDC24C2.roa (raw, json)
Hash identifier: C1Ya0YUC4GC1u9NPL1umr34lTsmscJzEa3EqyrsP7OI=
Subject key identifier: C2:33:5E:D0:44:68:8C:8E:01:EB:56:F3:57:64:F7:85:39:47:7A:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8C29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54285E201C1B11EFA3E14F1E7DDC24C2.roa
Signing time: Mon 27 May 2024 11:21:57 +0000
ROA not before: Mon 27 May 2024 11:21:54 +0000
ROA not after: Sat 07 Sep 2024 11:21:54 +0000
asID: 18013
IP address blocks: 156.225.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35881 (0x8c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 11:21:54 2024 GMT
Not After : Sep 7 11:21:54 2024 GMT
Subject: CN=66546cd5-ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:d2:2d:80:65:07:42:20:6a:4a:01:be:89:
d7:dd:05:ec:5a:85:29:98:8b:d4:12:ed:8d:6f:ac:
50:95:e3:22:a8:29:f1:c9:c4:36:77:12:01:f9:e5:
27:06:31:ee:f6:15:05:24:0a:0c:f3:5d:59:90:f5:
df:7c:75:6c:ec:e2:44:d2:75:da:f0:10:c5:56:58:
db:6b:b0:71:07:ff:23:40:ba:c5:3a:5b:6e:28:b9:
0d:33:3e:33:c4:19:f4:d1:6c:b9:41:30:ea:c0:e6:
b4:ea:d6:11:52:30:e0:56:a2:3b:d6:6e:ac:bf:14:
83:57:ab:5b:db:9a:6d:87:b0:d6:ab:1d:74:82:8e:
31:cb:1c:ab:76:d2:31:81:e5:bf:49:54:80:7b:72:
4c:31:f3:f1:fe:f6:25:55:93:9c:4c:46:1f:2e:c0:
82:e3:1c:fb:f2:14:6b:65:07:2d:61:73:5c:e2:36:
31:35:67:c7:cf:1b:8c:ea:98:f5:e0:48:c7:60:ba:
36:dc:fd:43:d0:4d:0a:05:9f:04:95:eb:8a:b8:87:
c4:68:70:8c:c1:ed:d0:d1:2c:db:8e:86:ab:87:2a:
ca:25:75:9f:93:9d:66:1c:2e:80:00:30:10:9c:53:
2a:c7:f4:85:0f:83:24:d9:9e:f0:fc:fa:22:ed:c6:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:33:5E:D0:44:68:8C:8E:01:EB:56:F3:57:64:F7:85:39:47:7A:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54285E201C1B11EFA3E14F1E7DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:55:e3:dd:63:03:8e:b7:2c:14:67:fd:40:14:cd:69:4d:28:
8c:9a:44:2f:79:00:3d:98:b4:30:b7:a6:9b:66:cc:7e:ab:58:
31:a1:90:af:0b:c6:e7:c0:04:45:f1:83:9d:9c:2c:b9:f0:48:
f5:6e:d1:1a:39:12:95:33:c1:06:5b:ae:a8:49:55:e6:e3:7e:
98:0f:af:0a:37:c4:5f:c3:5f:05:08:67:ba:a3:91:21:81:bb:
4f:99:a4:71:c7:a3:02:3c:e9:cf:7a:82:75:c1:17:ec:e7:e8:
6d:57:15:40:cb:c7:8b:37:1d:b0:20:e1:18:4e:a3:fe:cf:67:
68:78:fd:81:3a:d8:59:9e:c2:80:2a:76:eb:98:d9:02:c2:d5:
69:af:96:94:33:f5:7c:6e:10:75:c1:6f:6b:d2:5e:c6:23:1e:
02:b0:d7:44:86:cc:4c:e0:44:40:e4:2a:f6:70:f2:5b:14:49:
17:a9:0c:77:71:3d:19:55:97:52:d5:c5:37:4a:a6:3d:26:b4:
d9:72:8c:17:5a:b7:7d:e0:19:e0:a9:15:23:25:9c:cd:f4:57:
4a:7c:9a:ac:23:48:99:11:27:77:f7:40:19:d7:2b:ff:46:67:
6f:b8:93:2b:d3:c6:e8:ef:c5:49:9f:3a:23:ce:56:15:0d:33:
c2:7c:43:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:10:38 2024 by rpki-client on console-ams.rpki-client.org