Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBD4D5EE039711EFBC9F092F017001B1.roa
File: CBD4D5EE039711EFBC9F092F017001B1.roa (raw, json)
Hash identifier: ZayKoJWr3MDsrPpW9dcsd2XWPk0lbygLtebFg8edEtI=
Subject key identifier: AA:38:51:42:8F:68:6B:D7:8B:6B:56:AF:B5:FB:67:C9:A8:3B:57:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8660
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBD4D5EE039711EFBC9F092F017001B1.roa
Signing time: Fri 26 Apr 2024 06:39:57 +0000
ROA not before: Fri 26 Apr 2024 06:39:53 +0000
ROA not after: Mon 27 May 2024 06:39:53 +0000
asID: 18013
IP address blocks: 156.225.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34400 (0x8660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 06:39:53 2024 GMT
Not After : May 27 06:39:53 2024 GMT
Subject: CN=662b4c3d-21db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e3:51:2f:79:33:bc:32:8f:9e:1a:00:5f:6c:
ae:9f:49:8a:a8:37:0c:4d:32:36:7c:39:08:df:76:
7a:18:ac:66:9d:1f:a3:4b:f9:99:dc:23:55:52:cd:
2f:a2:f0:85:67:02:47:e3:a2:12:df:ec:5b:7e:77:
89:95:1a:fd:39:03:fa:fc:20:94:6b:b7:25:51:bc:
74:69:1d:a2:39:f8:1a:da:f2:02:3c:d1:b1:6f:44:
5f:08:ad:e3:2e:3a:3b:36:f5:83:78:8e:e2:25:42:
75:ca:84:6c:00:c1:1f:9a:84:94:b8:83:09:74:ce:
6a:da:17:b8:75:5d:d3:1e:e6:60:81:43:32:83:37:
12:ee:0c:fe:44:d6:d8:65:6c:ce:18:24:84:3e:5e:
df:14:c6:74:1c:4a:8a:f9:23:31:88:52:72:a1:99:
12:a4:01:46:b1:50:c1:65:bf:7a:34:c8:e1:94:c3:
35:98:d8:c0:f6:fb:be:6e:3c:f3:ea:23:09:ca:85:
4a:f4:c0:c9:7f:d5:cb:ac:dd:fe:d0:7e:d9:f5:6c:
23:d2:45:61:27:e5:18:85:7c:ec:4a:aa:24:3d:d2:
48:f5:c6:b0:07:e3:99:41:39:63:db:04:32:bc:05:
df:40:c2:f7:e5:3a:86:a3:95:b6:f5:08:ba:20:62:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:38:51:42:8F:68:6B:D7:8B:6B:56:AF:B5:FB:67:C9:A8:3B:57:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBD4D5EE039711EFBC9F092F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:88:67:da:14:28:d2:e8:98:30:8d:03:e5:8b:29:cd:55:08:
cb:38:c2:54:ff:db:6b:27:6a:a2:24:9a:d1:5b:9c:28:8e:ec:
4c:71:b9:25:47:54:cc:34:49:e9:e0:96:19:07:f9:f4:c7:45:
f6:b0:17:d7:f3:5b:11:67:2e:d8:84:34:a6:3a:b6:94:7e:36:
07:92:d6:22:0d:44:b8:e1:7d:f1:88:db:3a:ac:fa:a6:43:dc:
05:d9:91:26:b3:ec:25:5e:c3:77:9a:3f:52:79:5a:bd:8b:25:
1e:07:04:70:22:a1:aa:d0:d3:24:28:f5:dd:e3:9a:4e:da:a1:
0e:b3:77:da:14:62:b8:53:fc:a3:ea:1f:ad:5b:9e:45:ec:da:
43:84:13:01:fc:d3:f1:da:44:9f:cf:22:47:8d:84:31:e1:04:
9b:d8:0a:49:e8:f6:a0:d4:96:71:2b:b2:e0:c2:21:d5:0b:69:
37:08:88:54:ec:c5:af:e6:4b:43:b4:2b:9f:3a:fb:80:18:8d:
98:eb:45:6f:f0:38:41:8d:6d:c8:d7:8e:44:30:c6:d2:68:58:
24:9d:d1:63:cf:d1:2d:52:94:43:49:93:7b:8b:0d:e4:44:47:
89:bb:26:cb:23:9f:e3:1e:64:69:eb:37:e5:3b:3f:bd:80:e5:
1c:df:79:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:21 2024 by rpki-client on console-fra.rpki-client.org