Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2761D6AE9E4A11EEAC61FE0AD25BE465.roa
File: 2761D6AE9E4A11EEAC61FE0AD25BE465.roa (raw, json)
Hash identifier: 4gZpRdTdPr3uLNmCLxqcdSKqLxVcpwB6IT7Cnz3i0Ls=
Subject key identifier: 56:E7:D6:D9:80:29:AB:E0:9B:F9:B5:1C:52:47:DD:FE:40:1F:51:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5418
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2761D6AE9E4A11EEAC61FE0AD25BE465.roa
Signing time: Tue 19 Dec 2023 08:39:42 +0000
ROA not before: Tue 19 Dec 2023 08:39:39 +0000
ROA not after: Sat 21 Dec 2024 08:39:39 +0000
asID: 212552
IP address blocks: 156.253.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21528 (0x5418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 19 08:39:39 2023 GMT
Not After : Dec 21 08:39:39 2024 GMT
Subject: CN=658156ce-4e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:1c:31:c0:83:69:1e:18:4a:ad:74:7e:7a:
49:f3:71:dc:bc:89:32:84:c9:6f:de:cb:00:c8:7a:
47:c0:7f:3f:21:ea:1a:70:ca:87:47:00:78:bb:9d:
57:5c:57:6d:14:5d:0b:de:32:14:80:ef:21:d4:21:
a3:fa:84:81:a2:2f:70:43:48:3e:e3:a7:5f:b6:7f:
9d:a9:b4:ad:0c:1b:1b:69:9d:78:ad:b8:1e:fc:8a:
f0:a0:20:0f:06:48:44:19:a6:52:b1:dc:ab:05:ec:
96:ef:05:38:75:c7:c4:f0:9b:fe:28:88:5a:1d:64:
37:54:b5:29:f0:97:f7:50:89:27:98:e0:1b:58:fe:
00:84:d5:6a:60:33:4a:8a:73:13:7c:3b:ef:47:8d:
0c:39:fd:f0:fa:dc:7d:60:45:70:95:56:56:36:b8:
55:30:2c:b5:e3:9c:81:cd:79:e3:31:90:64:9e:8e:
59:16:ad:3d:fe:0e:21:10:34:bc:fe:41:10:40:27:
c5:12:44:9b:41:70:f9:0e:bf:b6:7d:67:fc:ee:51:
24:91:fd:95:b4:11:19:12:a8:e3:f5:41:57:5f:59:
b6:64:59:ce:3d:da:e9:db:b3:8f:0b:18:95:a0:7f:
55:4b:27:30:38:84:ad:da:02:df:46:0b:4b:9b:58:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:D6:D9:80:29:AB:E0:9B:F9:B5:1C:52:47:DD:FE:40:1F:51:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2761D6AE9E4A11EEAC61FE0AD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.5.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ed:ab:51:ee:c1:43:41:cc:27:85:40:de:a0:3c:96:4f:fd:
82:df:9f:c3:fd:7b:b0:c9:4a:bf:f7:c5:5b:53:87:00:16:84:
a8:98:99:cb:58:89:e1:c1:03:d6:5f:d4:26:06:fd:97:9a:2d:
81:ec:92:08:36:d6:06:5e:f4:98:0e:ac:5c:1a:52:26:a9:84:
99:a9:90:e3:7d:e3:d6:90:2b:5e:31:df:e3:42:43:d6:ec:c4:
81:d8:ee:25:8c:21:05:06:ba:8a:da:db:29:20:9c:00:75:ab:
99:ec:57:e9:66:4d:6b:98:c5:3f:f9:42:75:02:91:aa:82:35:
30:64:73:73:62:01:8e:73:e8:90:0d:29:7a:a3:4d:65:e0:95:
bb:6a:02:a2:70:eb:29:10:25:0a:a5:1a:16:b0:c1:fc:2c:14:
d8:ec:3e:af:22:ab:42:2f:dd:ec:39:81:a0:0f:06:4c:88:d6:
36:69:b7:9c:a4:54:22:ee:f9:7e:8f:60:f8:e3:6b:88:f6:b6:
fd:bb:de:9d:97:a0:24:a6:56:23:3a:75:fc:86:10:6d:b2:86:
af:ee:af:36:4c:b5:ca:06:e2:d4:ba:a8:d2:3b:c8:30:24:49:
51:5a:ee:49:01:b2:db:e8:eb:b6:7a:92:93:cd:a2:f2:90:15:
8c:aa:28:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:50 2024 by rpki-client on console-ams.rpki-client.org