Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AE4EE56D70A11EE9072AF70775412E6.roa
File: 4AE4EE56D70A11EE9072AF70775412E6.roa (raw, json)
Hash identifier: QhOMzQBaly4N/iIcTSxgLq+gjT798WMh4wbn0OGC2w8=
Subject key identifier: 62:80:D5:16:65:F5:65:F8:9C:F6:96:57:52:63:D7:00:3C:26:39:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7926
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AE4EE56D70A11EE9072AF70775412E6.roa
Signing time: Thu 29 Feb 2024 13:56:10 +0000
ROA not before: Thu 29 Feb 2024 13:56:07 +0000
ROA not after: Thu 13 Jun 2024 13:56:07 +0000
asID: 5065
IP address blocks: 156.239.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31014 (0x7926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 29 13:56:07 2024 GMT
Not After : Jun 13 13:56:07 2024 GMT
Subject: CN=65e08cfa-a718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:70:1f:3d:7d:91:c9:d2:73:5f:22:18:04:
8a:46:26:08:b1:2a:85:c6:1d:c8:21:f5:d0:28:4c:
5b:9c:1e:42:fc:5f:60:ea:05:a3:86:d5:96:d6:0c:
f3:46:30:47:1a:0e:53:ec:d2:da:68:fa:f6:dc:50:
2c:ea:10:6e:d7:48:41:6c:b3:21:fd:7d:e2:6a:21:
90:c3:74:cb:65:f4:1a:40:da:a4:f7:62:be:4e:59:
01:94:57:69:63:0f:5e:d7:d5:9d:63:aa:13:6c:af:
40:f1:6e:ff:41:c4:e3:b2:a8:04:87:d6:fb:bf:5c:
3d:4a:b0:e3:fb:a1:c5:bd:d7:3c:e8:ef:a0:28:86:
c9:2e:10:1b:25:e2:3d:2b:35:5f:30:a3:77:e5:9e:
5e:0f:75:d8:f4:b6:4f:92:fb:92:ac:0f:e9:18:00:
8f:4b:06:4e:ce:b2:c7:b1:36:f9:dd:0b:99:de:7e:
d1:7f:7f:b3:fe:4b:35:80:02:7d:6e:97:ba:71:d5:
32:92:41:05:1f:85:74:e5:e0:ae:8a:4a:0e:15:3f:
03:94:b3:03:62:bf:91:a0:d7:9d:cd:3b:24:2f:31:
3d:be:bc:9a:26:34:6e:d1:19:5a:05:ff:72:ec:73:
1b:96:8c:ba:26:a7:a4:9d:7e:4d:69:b1:f2:98:04:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:D5:16:65:F5:65:F8:9C:F6:96:57:52:63:D7:00:3C:26:39:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AE4EE56D70A11EE9072AF70775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.20.0/24
Signature Algorithm: sha256WithRSAEncryption
86:10:60:35:f0:65:9c:92:e6:d8:32:24:f4:52:bd:d7:50:af:
41:b9:ce:e8:d1:42:80:6d:48:5b:8e:63:bb:da:7b:79:72:58:
c6:6e:d2:85:23:2d:58:ae:c8:e5:97:45:30:dd:9f:ee:fa:cf:
c4:6d:74:7b:06:46:24:05:31:ee:66:1b:2e:5c:9f:2a:2b:e9:
3c:16:40:a3:76:4e:3a:8e:e8:a1:fc:f1:ac:91:6e:4f:0f:da:
bd:89:72:82:b8:86:d0:32:d7:c4:d3:5b:0d:b6:fd:e8:5c:4b:
2f:91:f7:50:fb:93:32:52:10:c3:1d:31:ab:af:5c:e6:be:5e:
e1:9b:0d:f2:1a:af:00:45:d2:2a:87:b8:d0:6c:a9:0a:07:38:
46:7f:63:e5:d1:4a:f5:55:b3:37:77:1d:fb:14:db:b4:7f:e3:
12:2b:47:03:1c:a0:d0:c6:c2:a4:0d:29:da:f3:ae:73:a4:27:
79:a0:39:7e:36:e4:5c:ea:31:d0:c6:0e:71:86:2a:c9:08:d8:
aa:b3:f9:7d:e6:e0:b8:e3:c6:ab:d0:98:65:28:5a:7f:51:98:
8f:49:de:0b:8b:59:7e:4c:6a:ec:9b:0e:44:bc:26:9e:dd:9f:
2f:0e:59:18:f6:70:eb:b6:79:ac:1a:c7:96:5c:a0:63:7a:21:
10:c4:02:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:16 2024 by rpki-client on console-fra.rpki-client.org