Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/519974723CCE11EFAFCC3545762E951A.roa
File: 519974723CCE11EFAFCC3545762E951A.roa (raw, json)
Hash identifier: 3elwQSJNxJ25ndQRJ6JSbQ97wSUqSXKMWlegAxQ5GL0=
Subject key identifier: BB:C6:1E:12:53:4A:6C:5D:B4:37:B0:AE:A8:68:E6:75:8B:44:26:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9952
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/519974723CCE11EFAFCC3545762E951A.roa
Signing time: Mon 08 Jul 2024 02:03:50 +0000
ROA not before: Mon 08 Jul 2024 02:03:47 +0000
ROA not after: Fri 10 Jul 2026 02:03:47 +0000
asID: 50183
IP address blocks: 156.238.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39250 (0x9952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 02:03:47 2024 GMT
Not After : Jul 10 02:03:47 2026 GMT
Subject: CN=668b4906-4129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:23:77:fb:ab:6d:4f:3f:9b:40:94:a7:7a:
35:c0:c8:30:3f:4f:70:5a:cf:d1:32:2f:74:96:9e:
9a:99:e0:29:e7:fd:cb:04:3e:8a:82:4e:a3:2a:96:
0f:cd:4b:f4:5c:44:66:57:ef:4a:3e:92:d9:5b:02:
dc:a7:a7:39:ef:af:b5:2e:78:de:10:73:72:28:99:
2d:4c:95:5e:d0:e3:c6:cf:d7:6c:60:e4:8f:0f:7b:
5a:a5:27:6a:c6:cc:fc:ce:c6:20:da:3f:d9:08:96:
10:9e:6a:c6:6a:c7:28:e3:4d:b8:79:9b:6e:38:e0:
ce:16:00:f9:1f:4a:cf:75:76:cc:2e:9d:09:0b:a7:
66:d6:de:06:70:e7:7e:df:64:9f:b4:ac:d6:3f:38:
ae:b3:e1:8a:8c:c0:f7:bf:28:62:63:b8:c9:80:b6:
a0:e0:ad:e2:68:aa:bb:2f:7f:71:c2:01:bf:ce:d3:
53:51:63:84:61:fa:19:c4:69:19:51:88:5e:b2:1c:
2f:dc:55:d0:4e:0a:30:e4:23:23:f3:cf:8e:10:b9:
e6:f8:60:8f:a9:f1:6b:ee:9f:40:50:17:f2:e4:a8:
58:80:9c:44:67:35:f8:d3:05:19:51:c6:bf:38:62:
73:ab:26:99:ce:03:c5:f6:67:70:93:d1:d2:d8:bc:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C6:1E:12:53:4A:6C:5D:B4:37:B0:AE:A8:68:E6:75:8B:44:26:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/519974723CCE11EFAFCC3545762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.192.0/20
Signature Algorithm: sha256WithRSAEncryption
05:fe:75:7d:8d:75:52:3c:06:7f:fd:2e:8c:37:14:3a:a7:4b:
a7:42:5c:7f:2e:f8:8e:73:23:90:8e:2d:07:6a:68:88:48:6c:
c8:9e:bf:4a:34:ae:ae:97:15:4a:8c:eb:a1:3b:12:4f:fe:df:
ff:a9:3a:7d:a0:3e:03:ee:9c:74:32:e3:c7:1d:aa:d7:0c:24:
64:ab:03:1c:56:76:20:3e:0c:6b:b2:d9:48:69:61:ee:7a:cf:
4d:18:26:3c:f7:b7:46:bc:17:46:3a:f0:24:76:73:4a:9a:df:
54:4a:cb:b2:ac:2c:dd:7f:f9:73:59:3e:96:be:b2:32:dd:3e:
ce:33:2f:95:c2:26:d9:98:53:63:f8:34:82:e0:cd:07:6c:2d:
b8:f5:c8:cb:3b:18:09:38:34:a1:a8:d1:74:67:01:e9:51:a0:
a6:df:bb:40:c5:45:3c:93:34:64:5f:d6:78:69:05:44:b9:ea:
37:5a:8e:cc:5b:63:72:8c:dd:b9:97:14:ee:b4:be:00:df:d1:
a4:e6:ba:7c:1b:55:e9:fd:8c:af:91:95:ac:46:db:1d:ac:a7:
ea:9c:ab:dc:02:25:fb:b7:ba:98:1f:02:82:32:44:d7:14:37:
11:6a:7c:b1:12:3c:75:2d:ea:13:88:b2:7f:6d:f8:bf:77:db:
f4:21:2d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:03 2024 by rpki-client on console-ams.rpki-client.org