Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52A8423E037711EF8E9A2422017001B1.roa
File: 52A8423E037711EF8E9A2422017001B1.roa (raw, json)
Hash identifier: 8FFVT1B0vY02v52k67tduTCDvJ/zlKKfaX+h9pW7G+A=
Subject key identifier: 15:95:BA:97:2B:92:17:52:3F:D4:98:15:BC:B3:CC:F8:0B:82:5A:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8556
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52A8423E037711EF8E9A2422017001B1.roa
Signing time: Fri 26 Apr 2024 02:47:29 +0000
ROA not before: Fri 26 Apr 2024 02:47:24 +0000
ROA not after: Sun 15 Sep 2024 02:47:24 +0000
asID: 142286
IP address blocks: 156.250.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34134 (0x8556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 02:47:24 2024 GMT
Not After : Sep 15 02:47:24 2024 GMT
Subject: CN=662b15c1-c15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:93:e5:a0:ae:ab:b7:6c:e1:0e:b8:99:a8:3c:
13:1d:ca:f7:34:90:7e:87:91:d9:01:d7:32:0e:c5:
2b:dc:a2:b8:c4:14:aa:2b:76:f3:c9:ed:a3:24:d4:
fc:de:f1:f8:f6:71:f2:81:2d:42:c4:a1:0e:85:24:
aa:3a:02:db:26:f9:dd:39:d4:f3:8a:83:97:9c:11:
13:ff:18:84:23:0f:f5:ce:b2:5d:6a:37:74:1c:33:
35:a3:5c:23:45:c4:f8:a3:06:bc:3e:ab:c2:d4:31:
72:de:66:5b:60:18:85:67:ad:fb:bb:42:d8:c5:57:
11:e7:09:16:74:2a:07:33:5d:0a:fd:59:a3:54:a4:
55:a0:2b:34:b9:37:09:26:3d:da:d6:28:53:e9:c5:
53:eb:b1:2a:05:4e:77:a5:a3:d0:fc:c9:83:1a:34:
3b:01:08:42:26:4f:5d:58:dd:11:dd:50:09:15:a3:
19:49:57:31:01:ca:38:25:5d:35:1a:4b:ce:c3:9b:
c8:1b:d1:97:e2:bb:1a:75:80:b1:fa:4a:f7:56:26:
d8:be:9f:2b:89:a3:30:5a:f8:5a:cf:e1:dd:b1:60:
b8:2e:5e:30:91:96:65:67:57:b2:7d:73:1b:02:d7:
82:c4:ba:09:c3:f9:58:15:bf:09:ef:76:00:57:0a:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:95:BA:97:2B:92:17:52:3F:D4:98:15:BC:B3:CC:F8:0B:82:5A:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52A8423E037711EF8E9A2422017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.4.0/22
Signature Algorithm: sha256WithRSAEncryption
72:a6:17:d8:05:86:52:cb:9e:82:e3:74:e7:88:2b:52:2d:d0:
5c:02:93:bd:90:7d:84:1c:ac:2d:af:e4:41:66:19:3b:cf:83:
57:2e:e4:fd:c1:9f:02:35:72:57:71:7d:af:bd:1f:b2:e0:2b:
b4:f8:df:b1:b6:9f:18:92:aa:20:69:66:0c:2d:55:0f:ad:d3:
92:c2:08:a1:a7:8b:39:9d:37:28:cf:0e:65:4f:1d:bd:a9:7f:
90:a4:58:d3:d4:df:7d:5d:32:d1:88:e7:c3:e1:14:aa:1e:03:
d0:98:8c:8f:11:6f:95:22:cc:a5:5d:bb:52:34:6c:e3:f4:9c:
b2:cc:26:48:d3:83:1b:8b:6a:37:7b:56:dd:3a:62:6b:a0:c5:
96:d6:a7:26:3c:a7:97:2e:84:ff:e0:93:7e:29:8e:4a:36:15:
d7:8c:dd:9b:b5:81:e1:5d:4b:5b:a6:68:ba:1b:57:8c:16:3d:
70:a0:c8:40:16:22:1b:fa:c5:3f:34:83:1b:6d:de:a4:0d:b9:
f3:fd:00:12:9b:91:96:f8:ca:40:0b:b3:11:2a:8b:c1:48:ac:
d7:cb:c4:04:9d:6d:46:ca:38:fb:07:5c:38:11:55:7c:e9:ae:
2e:41:e6:3a:3f:3b:1b:35:87:c4:a8:37:09:7a:4f:b7:2e:78:
25:e2:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:58:03 2024 by rpki-client on console-fra.rpki-client.org