Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/223E89FCA62D11EEAF00109B775412E6.roa
File: 223E89FCA62D11EEAF00109B775412E6.roa (raw, json)
Hash identifier: LeT9yLskPJb2cw0hwGkmG5eWDjoU2lu8B5uhe4lJSvk=
Subject key identifier: 49:47:DB:34:33:04:35:18:FD:09:2F:C0:2D:1B:F5:0E:5D:06:57:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 594B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/223E89FCA62D11EEAF00109B775412E6.roa
Signing time: Fri 29 Dec 2023 09:32:07 +0000
ROA not before: Fri 29 Dec 2023 09:32:04 +0000
ROA not after: Mon 04 Nov 2024 09:32:04 +0000
asID: 5065
IP address blocks: 156.229.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22859 (0x594b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 29 09:32:04 2023 GMT
Not After : Nov 4 09:32:04 2024 GMT
Subject: CN=658e9217-8e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:7b:d4:b4:18:8b:ab:b6:56:fb:02:4a:ca:
83:99:10:46:bc:e7:6e:2c:6e:43:30:08:4a:1a:39:
5a:cb:2a:7d:d6:39:d2:52:ce:f5:a8:d3:df:d4:30:
d0:59:91:28:86:8b:d7:52:36:f8:74:c8:48:5c:13:
a2:74:58:f1:7c:b0:4c:d1:c9:45:15:7d:a4:c7:fe:
11:a4:e3:7e:c2:05:83:5e:c7:3c:ae:2b:5f:4b:98:
91:40:3a:11:63:fa:89:72:39:3f:f4:42:26:62:82:
02:ff:d3:7e:5d:eb:c6:fc:15:59:2d:c1:3b:18:de:
73:29:20:c2:6b:2f:18:df:8f:c1:96:88:97:14:79:
f4:b1:cc:1b:25:44:97:2e:a6:ae:7c:3e:4f:fa:8e:
21:b9:5b:ee:9a:09:fd:b4:f2:d3:6f:7b:0b:b9:e6:
6b:38:c1:87:65:4f:c9:d1:97:d9:d9:12:48:2d:84:
4e:74:6c:71:3a:31:59:d1:03:f2:52:ab:35:e7:24:
83:b4:9a:7a:6a:11:75:9f:22:27:b2:fe:c4:6f:70:
92:65:c1:11:1b:19:8b:0d:a1:4e:da:ca:e7:4e:7e:
b8:91:d1:bb:4e:4a:2f:15:c2:c3:7a:c2:f2:cc:63:
9a:e8:56:7f:ac:0d:c5:9f:8e:60:4f:15:e2:99:20:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:47:DB:34:33:04:35:18:FD:09:2F:C0:2D:1B:F5:0E:5D:06:57:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/223E89FCA62D11EEAF00109B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.63.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d9:27:52:c5:28:5b:26:ca:04:2c:56:bd:a6:54:71:f6:ea:
e8:4b:52:62:8f:50:22:4c:0e:65:64:d9:67:7a:52:8e:10:b0:
8a:e9:db:5e:fc:74:56:c9:45:d9:b6:64:d8:bc:2b:62:d8:75:
dc:03:d4:48:c6:86:3f:ba:08:48:15:e4:0c:bc:b5:17:e1:1e:
3f:f6:98:a9:a1:fc:51:56:eb:ae:ed:78:7e:6a:ac:67:8b:5a:
7f:21:02:a7:3c:0c:bd:dd:1d:da:f2:d7:16:70:a7:42:74:b5:
22:b7:e5:a5:7e:0c:60:a4:d1:ce:b7:83:cb:ef:56:37:e5:5e:
da:08:d6:d6:34:2c:2f:88:e2:71:fa:c9:00:2d:a8:c8:64:9e:
fc:01:52:d1:96:6e:38:fc:28:b4:3b:f7:21:0d:40:ba:9d:27:
72:09:9c:92:46:53:1f:d2:92:d4:60:0d:87:f1:0b:24:43:78:
df:31:04:24:2b:f4:b4:f2:3b:a6:8e:23:96:0b:15:31:4b:2a:
f7:15:61:3c:65:46:71:80:5b:56:44:a6:ea:78:ea:d3:42:e6:
40:a3:2b:c6:aa:e7:04:a6:dc:0a:02:8b:87:d2:02:3a:21:72:
37:20:b8:84:09:7e:f5:80:c9:ee:14:f4:81:46:35:5e:41:3b:
f1:cf:d4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:43 2024 by rpki-client on console-ams.rpki-client.org