Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C540972A62E11EE9DAD999C775412E6.roa
File: 0C540972A62E11EE9DAD999C775412E6.roa (raw, json)
Hash identifier: GnKMtRI3icI02zKp6EDr2X6BN/SO9e1RPih2In5FErk=
Subject key identifier: 9A:4F:FB:59:21:15:AB:70:FE:45:3B:D5:CF:A6:AD:E2:D0:4E:97:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5957
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C540972A62E11EE9DAD999C775412E6.roa
Signing time: Fri 29 Dec 2023 09:38:40 +0000
ROA not before: Fri 29 Dec 2023 09:38:37 +0000
ROA not after: Mon 04 Nov 2024 09:38:37 +0000
asID: 5065
IP address blocks: 156.229.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22871 (0x5957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 29 09:38:37 2023 GMT
Not After : Nov 4 09:38:37 2024 GMT
Subject: CN=658e93a0-6f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:dc:91:e9:c8:ae:29:0b:9f:0d:76:53:9d:
86:9d:3b:1c:79:85:a4:61:52:76:15:4d:e4:75:cd:
a7:15:96:45:fb:34:61:b8:6d:3e:43:1a:3e:d9:b1:
9e:b8:87:b3:51:98:f5:6b:e5:7f:eb:68:f0:51:95:
1e:70:dc:cb:50:08:b7:9a:e5:db:e7:0a:16:a8:51:
aa:ab:28:81:e0:73:f3:d0:68:e4:b6:32:7f:10:b3:
38:f2:da:df:74:36:8d:b7:29:0b:00:8d:5f:e6:84:
b5:c0:e1:e3:9d:dd:cd:78:17:00:1e:5d:db:bd:67:
4f:18:45:d6:88:e9:fe:32:7a:a9:3c:ec:14:9b:3e:
eb:f9:df:f1:03:02:c4:56:56:6d:b4:4f:72:14:b4:
32:cc:98:aa:85:44:9b:7a:62:7f:7f:76:d6:85:5f:
d0:e2:d2:a0:6c:8d:c6:38:b6:79:73:98:bf:00:3e:
ce:36:e1:84:bd:de:04:63:57:6c:c6:99:97:5c:3c:
3b:43:09:af:32:44:20:f2:ae:75:0e:6b:6c:3d:33:
77:67:6e:b3:dc:f0:e5:82:53:f2:d0:07:a6:67:df:
61:5d:7e:09:29:78:5d:7f:54:0a:32:5c:7b:07:e7:
c5:d2:70:16:48:bc:e4:11:fc:d3:ec:fa:f5:f2:07:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4F:FB:59:21:15:AB:70:FE:45:3B:D5:CF:A6:AD:E2:D0:4E:97:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C540972A62E11EE9DAD999C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a8:41:20:d6:7f:58:e5:71:a5:3a:c8:62:39:95:82:1a:42:
71:f1:b4:73:9c:1f:47:5a:0b:2e:9a:d1:76:a7:21:40:9e:3e:
05:6c:b8:b9:a6:c2:42:40:7d:81:9d:df:ea:ea:c9:5f:39:0a:
38:05:5d:8a:8c:2e:cb:9e:cd:11:83:3e:a7:9b:0f:db:c0:a5:
95:eb:bd:bb:58:6e:ab:c2:04:66:f8:24:c2:37:82:e4:f8:99:
2a:26:19:ec:b0:8f:6a:3e:a0:d0:d9:1d:23:00:ca:e1:50:0c:
61:80:08:f3:ea:48:c4:5a:23:c9:c4:72:86:2c:f2:e0:f6:ed:
f0:db:3c:cc:85:bb:6c:6b:b1:3d:29:19:56:74:e2:85:92:6d:
b6:d1:65:3e:11:f8:4b:38:94:e0:87:21:f3:26:32:ac:de:1d:
62:65:cb:48:58:1b:cf:e2:ac:02:e7:97:35:c9:ca:84:ac:ef:
20:56:98:6d:20:9c:5f:b7:b3:69:91:27:0e:7f:ec:1c:df:22:
07:ca:9d:46:5f:2c:ae:2b:1e:2e:cc:31:8f:aa:f3:3d:16:5f:
fc:14:6d:f0:f8:ef:bf:7e:7c:63:3e:b7:8c:67:45:c5:f4:b0:
e6:31:6b:75:58:c9:fc:34:31:c0:25:83:c9:70:9a:99:6a:01:
25:20:cb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:12 2024 by rpki-client on console-fra.rpki-client.org