Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56BA51C61D0F11EFB127AD247DDC24C2.roa
File: 56BA51C61D0F11EFB127AD247DDC24C2.roa (raw, json)
Hash identifier: Fxt6wIEfXxw4TN5tEuoas5uO1D5BxIZZdg/mpXrCwp8=
Subject key identifier: 0E:1C:2B:00:51:22:1C:FB:D1:17:85:FD:70:14:BA:DF:6B:96:27:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56BA51C61D0F11EFB127AD247DDC24C2.roa
Signing time: Tue 28 May 2024 16:28:39 +0000
ROA not before: Tue 28 May 2024 16:28:35 +0000
ROA not after: Sat 07 Sep 2024 16:28:35 +0000
asID: 138415
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36000 (0x8ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 16:28:35 2024 GMT
Not After : Sep 7 16:28:35 2024 GMT
Subject: CN=66560637-1a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c9:02:6c:9a:6e:0e:14:78:2b:94:4b:20:39:
ea:c7:ed:c7:cd:2e:f1:61:09:05:94:af:92:19:dc:
cc:c7:27:53:29:45:19:dc:11:54:e0:c4:d3:fb:3f:
59:a8:93:47:9d:b9:4b:f4:08:e2:48:24:8d:52:d3:
1e:88:37:7d:1e:52:97:0f:83:1d:47:2a:88:61:91:
3e:f5:cb:99:11:24:c5:fb:6b:b8:85:69:1b:53:35:
ec:20:e7:ef:14:59:04:d2:c0:9d:52:ee:6d:66:a4:
99:13:97:d3:c3:4a:1b:2e:9b:bb:e9:9e:ef:30:23:
b1:72:09:18:ed:38:78:23:95:de:26:8f:90:c9:19:
5d:ad:96:45:fe:1e:19:da:9b:a1:54:ee:be:e3:44:
23:8a:a2:05:21:27:53:a1:da:5f:28:32:e2:37:49:
00:bd:eb:a8:2c:40:9a:dd:bd:ac:3d:61:db:34:a9:
67:12:ee:87:c7:39:87:30:69:1b:67:e8:8f:c5:87:
97:3f:f1:de:23:f7:23:e1:34:e1:d6:89:18:74:b6:
24:2b:72:94:52:7d:e5:33:a2:06:7c:85:11:be:a5:
82:1b:bf:d0:cc:a9:ac:f8:dc:b5:ca:20:a4:90:a1:
fd:17:a9:60:0b:1f:40:d0:bf:25:a9:e7:b9:48:82:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:2B:00:51:22:1C:FB:D1:17:85:FD:70:14:BA:DF:6B:96:27:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56BA51C61D0F11EFB127AD247DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:e7:29:f0:8d:38:15:1d:e6:11:a5:98:93:63:bb:a9:a3:f5:
10:4f:37:b2:af:88:a1:40:4a:c5:e9:ac:02:bc:87:12:4f:9c:
8c:b7:67:1b:ef:30:9f:47:89:37:23:ac:6d:20:7a:2c:5a:aa:
c7:df:3d:23:3c:26:6f:b8:b8:3d:b5:e1:0b:c1:66:ad:91:97:
12:41:b0:33:39:af:c0:3d:04:66:d0:4c:95:5f:1e:0c:c1:6c:
ab:54:e7:6c:5d:a6:d3:2d:c5:25:eb:2c:bf:c7:92:cd:2b:9e:
5e:b3:ee:b2:fa:c2:d3:b2:64:cd:16:54:12:5a:24:c7:2a:06:
3c:39:77:2b:2c:6d:5e:dc:68:bd:85:b3:aa:58:54:d7:76:e1:
30:28:72:63:b9:b4:ab:73:16:65:de:52:b5:31:ad:c3:b1:b8:
c5:4e:94:b7:ce:99:ee:3c:88:4d:95:f9:79:8d:4e:af:ae:7f:
78:dc:02:3e:ed:cf:e8:18:7c:47:ff:13:27:36:6e:16:4b:1c:
09:1c:5c:5a:d8:56:61:40:10:da:61:72:8d:f3:71:a7:67:33:
08:3a:2f:ca:84:96:3a:cb:e0:51:aa:c1:b0:95:7b:0a:59:bc:
2d:75:d9:ca:f1:f6:d3:95:7b:95:8d:fc:62:b3:ab:dd:e5:7b:
c8:95:68:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:56:09 2024 by rpki-client on console-fra.rpki-client.org