Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E1242BC039211EF85F25103017001B1.roa
File: 5E1242BC039211EF85F25103017001B1.roa (raw, json)
Hash identifier: tvUbWop+g1F91D5hn2M6+AnzPQ6IdnB7YGUzWKR0NVY=
Subject key identifier: B3:60:5A:9E:B3:3B:A7:40:62:55:7C:2F:4A:04:2E:1B:C1:14:7C:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8627
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E1242BC039211EF85F25103017001B1.roa
Signing time: Fri 26 Apr 2024 06:01:05 +0000
ROA not before: Fri 26 Apr 2024 06:01:02 +0000
ROA not after: Sat 07 Sep 2024 06:01:02 +0000
asID: 138415
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 May 2024 00:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34343 (0x8627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:01:02 2024 GMT
Not After : Sep 7 06:01:02 2024 GMT
Subject: CN=662b4321-ee54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:77:a1:6f:d5:67:fe:c1:3b:7a:66:6d:3b:
5c:df:55:ec:08:a0:af:10:22:e1:de:26:5b:12:84:
9e:a4:1a:c8:f0:af:a8:9e:17:2e:e3:9c:4d:7a:b9:
08:d1:bd:91:6c:07:07:63:97:cf:a6:71:f0:44:bd:
5b:65:2d:0f:58:5f:4f:30:20:fe:2e:8b:f7:eb:b9:
c7:cb:aa:9d:61:ad:a4:dc:08:e1:7b:68:54:2a:66:
e6:76:bb:bd:7a:2a:3a:e6:54:1c:9a:0e:64:18:bf:
5a:a5:57:0f:5b:0a:1b:50:a1:83:3c:04:03:7a:03:
15:06:1f:20:c7:4b:b7:06:13:c4:fa:18:a5:d0:6f:
8c:6d:f4:22:70:90:44:2b:7e:64:f2:e6:94:46:3e:
09:c6:cf:17:a0:3c:44:d3:27:35:05:72:a1:78:73:
f0:7b:bd:4a:3c:5a:92:e0:2d:d8:e1:57:2f:4d:1f:
2d:40:b0:7c:a0:92:44:c4:ac:9d:49:ea:26:0e:b4:
22:f7:ee:51:61:24:1c:cb:7c:d5:8b:c7:20:90:e4:
53:09:ee:c5:06:46:43:fc:d5:8b:cf:f9:cb:77:e4:
bf:f8:cb:82:dd:5d:95:c6:59:83:93:31:0d:bb:3a:
6f:e4:96:dc:eb:86:37:dd:c8:54:9b:45:de:b3:34:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:60:5A:9E:B3:3B:A7:40:62:55:7C:2F:4A:04:2E:1B:C1:14:7C:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E1242BC039211EF85F25103017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
52:69:e2:f4:ef:b8:90:98:df:1f:d9:8a:82:4f:8e:00:1f:cc:
ef:12:62:d4:ae:6d:a6:ba:90:b3:08:9c:8d:2f:9b:32:3a:c8:
71:64:49:e1:84:7e:b4:0e:61:90:b7:55:f0:bb:a9:e8:0c:1a:
93:8c:32:ec:a8:32:d7:3a:35:bd:84:3a:98:e7:63:8b:43:08:
e3:af:82:21:53:15:3e:a1:64:12:3b:7c:c2:e3:fc:2e:61:01:
f7:69:6f:81:ce:c1:48:67:ab:bd:95:3c:bd:94:40:4d:35:d8:
bb:3a:36:78:2f:c4:61:54:fc:f8:fa:df:e1:c8:4b:1b:c4:9a:
48:b3:c1:5e:5e:28:b4:f6:df:c7:ee:e0:99:97:66:d3:cb:8b:
04:cf:2f:53:91:4c:a2:f3:a0:a0:ab:14:5f:ec:e6:5f:2b:51:
94:2e:e2:2d:e2:c1:f8:82:b7:4a:cf:a4:8b:de:60:3e:f8:e8:
19:75:fd:4d:e9:ed:5b:b3:47:59:75:61:2c:f9:3b:ca:5a:14:
cb:4c:f0:ef:61:d3:29:8c:48:44:3a:9e:44:1e:d1:49:59:1a:
a7:01:fb:6a:23:ba:14:bc:c9:40:8a:04:dd:94:cd:49:27:0f:
db:3a:03:22:8b:af:fe:3f:0b:79:b8:0a:e2:24:91:f4:6e:59:
17:d1:97:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:21:17 2024 by rpki-client on console-ams.rpki-client.org