Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24B64E7C10CC11EF9266EE4A017001B1.roa
File: 24B64E7C10CC11EF9266EE4A017001B1.roa (raw, json)
Hash identifier: 5JkotuCDo2sucb9gEcVQ6qEhZkcJfqNHz3W9olYD5es=
Subject key identifier: E8:51:69:40:0D:28:81:F2:FC:14:2D:FA:EA:6F:9E:17:59:A3:FD:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 89C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24B64E7C10CC11EF9266EE4A017001B1.roa
Signing time: Mon 13 May 2024 01:57:25 +0000
ROA not before: Mon 13 May 2024 01:57:21 +0000
ROA not after: Tue 25 Jun 2024 01:57:21 +0000
asID: 137547
IP address blocks: 156.245.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 18 Jun 2024 00:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35269 (0x89c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 01:57:21 2024 GMT
Not After : Jun 25 01:57:21 2024 GMT
Subject: CN=66417385-cc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:8e:d0:6c:45:1a:82:2c:12:56:87:3a:eb:
51:0a:5a:d5:b2:09:be:e0:00:d6:70:cd:2d:f8:74:
5b:c1:fa:a1:10:b3:b0:1b:4c:63:45:aa:e7:14:cb:
94:e1:54:87:40:73:e4:4f:b1:80:51:4b:ab:fa:b0:
cb:05:a1:23:8d:4f:14:29:dd:97:5f:05:8c:ae:d2:
8d:22:87:2f:fb:83:fb:c4:23:9a:27:ae:cd:91:27:
8c:9f:54:89:39:b9:04:a6:9b:e9:77:69:8b:c9:ca:
55:a3:e5:2c:d1:a7:b0:13:06:d7:34:37:3d:97:b8:
99:70:54:9e:12:c3:88:dc:19:2e:8a:4e:57:a3:bb:
31:cf:2b:dd:ab:ed:69:14:7b:f2:59:17:ef:f1:77:
ed:5c:7b:27:f2:2d:31:f1:b1:0a:36:c0:3e:57:b9:
1b:1d:51:5d:03:ad:38:30:e5:ee:44:2c:c3:fa:d4:
3f:04:56:8c:55:4f:2c:34:15:f3:ec:a1:22:cc:76:
f8:18:d8:f2:42:37:0c:5a:ad:6b:b6:97:42:af:b6:
56:8f:8f:ef:f6:d8:65:f9:b9:c9:3a:18:7c:40:05:
c7:ee:28:f0:96:b1:8e:c1:ab:d9:32:6e:01:af:bd:
0a:4e:a5:6e:8f:ec:73:fc:95:19:ce:db:e8:b0:3c:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:51:69:40:0D:28:81:F2:FC:14:2D:FA:EA:6F:9E:17:59:A3:FD:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24B64E7C10CC11EF9266EE4A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.188.0/23
Signature Algorithm: sha256WithRSAEncryption
51:cf:1f:1b:fb:70:1c:1b:19:13:63:e1:33:92:8b:62:b2:6a:
0e:a6:80:e2:23:d4:17:db:d3:99:1f:18:e5:1e:97:32:f6:8f:
72:97:75:84:49:f2:2d:8c:0d:6f:dc:33:a6:52:2e:7b:86:dd:
1a:b0:27:b7:72:c0:21:19:8d:14:03:db:cc:bd:92:0f:60:d8:
d3:b2:24:71:5a:07:d1:c9:8d:21:18:ea:6d:6f:6b:a6:36:5a:
f4:b6:21:99:2f:96:d1:88:b1:6d:a3:33:2d:25:29:91:cb:fc:
40:2e:ab:31:76:0c:dc:f9:d3:91:d8:bb:6b:2f:5c:a1:70:65:
7d:c6:7f:85:b6:3b:dd:e8:6f:02:84:2f:b0:85:36:fd:3e:32:
e2:71:2f:46:72:5c:c7:aa:95:91:09:57:d7:2f:8f:cf:ec:3a:
94:f8:41:56:ef:36:49:ac:ff:2e:2c:6b:85:54:d1:64:08:91:
17:39:6f:5a:13:4e:6a:be:e0:1b:27:0a:82:41:19:8c:eb:5d:
2c:f0:fc:53:26:32:fc:7d:e5:58:1b:12:4b:fe:cf:b2:07:fa:
45:61:a8:8b:22:bf:71:86:db:9a:cf:8f:fb:e8:5f:51:b5:c0:
78:bf:5f:80:be:96:5e:7c:e5:fb:49:40:35:07:12:0a:c0:28:
12:b3:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:02:43 2024 by rpki-client on console-ams.rpki-client.org