Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5525222A60E811EEB88D68474AD9E6FC.roa
File: 5525222A60E811EEB88D68474AD9E6FC.roa (raw, json)
Hash identifier: XP6+p4Itbjd5f/Glrakxp0Q7NWq9jt7FC9HY38oZADM=
Subject key identifier: C7:AD:29:AB:ED:4D:CF:31:3B:52:80:E3:26:E2:EA:78:9E:FA:FE:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3D41
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5525222A60E811EEB88D68474AD9E6FC.roa
Signing time: Mon 02 Oct 2023 05:55:47 +0000
ROA not before: Mon 02 Oct 2023 05:55:44 +0000
ROA not after: Thu 10 Oct 2024 05:55:44 +0000
asID: 198990
IP address blocks: 156.236.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15681 (0x3d41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 2 05:55:44 2023 GMT
Not After : Oct 10 05:55:44 2024 GMT
Subject: CN=651a5b63-c0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:19:14:38:14:46:4f:c2:09:ce:9e:8a:9a:
58:7b:83:89:9b:cd:88:91:2d:56:94:73:c2:73:9c:
ba:78:2f:14:0c:0d:e1:8b:14:87:5a:cb:2b:25:b8:
bb:ab:31:17:01:c1:ef:eb:64:bb:2d:5a:03:23:9d:
1d:ad:f4:56:14:9a:d4:58:ed:0a:8a:b0:35:a9:f3:
04:c3:ad:ca:a9:1c:08:22:d6:37:58:c0:1d:11:f0:
3d:13:87:7c:79:d8:b2:8a:b6:36:a9:14:cb:4d:98:
a9:01:e7:e1:d5:3c:e8:dd:05:1c:06:05:a9:96:9c:
95:e8:49:ac:a1:f4:eb:91:93:0d:46:ec:d2:ca:ea:
f4:cb:6a:53:5d:26:53:a7:49:2e:65:47:11:eb:89:
94:d8:b2:c9:f8:d3:66:70:4d:87:72:35:32:d8:ec:
de:62:7e:94:bb:5c:26:fa:c3:7f:9f:20:3d:47:2d:
a1:a7:d8:75:cb:d9:94:a4:fa:95:8b:3d:ac:c4:b7:
1e:ca:33:0d:e8:51:b5:af:c5:59:a5:26:3d:d2:8a:
48:58:0a:c5:64:69:81:ed:24:58:50:06:0b:9b:3e:
0c:95:29:8c:dc:12:a8:fc:76:c1:71:43:63:92:8c:
d4:71:04:0b:dd:a0:ef:71:b0:66:9e:52:fb:b8:44:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AD:29:AB:ED:4D:CF:31:3B:52:80:E3:26:E2:EA:78:9E:FA:FE:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5525222A60E811EEB88D68474AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.84.0/24
Signature Algorithm: sha256WithRSAEncryption
12:30:2b:4f:a8:10:af:a7:e4:49:31:1e:ae:43:48:95:2e:2d:
16:f3:03:87:e5:8c:05:0c:cb:1c:40:16:48:f5:66:1b:44:cd:
ec:08:7d:86:1f:8b:18:1a:33:72:b9:db:b5:33:28:3d:78:88:
fa:3b:b7:cd:0e:34:bd:b6:5b:52:18:0a:19:7b:9a:15:66:32:
d7:29:97:34:53:37:7f:63:3d:bb:bc:31:17:7a:66:87:d6:f2:
47:ff:d5:78:28:26:fd:9d:7f:fb:cf:13:bf:5d:de:9b:ef:4d:
a8:d7:59:5c:a9:73:07:27:75:e7:93:ee:e3:0b:3a:34:25:f7:
b7:55:10:8a:b4:2e:a8:56:7c:58:ca:70:17:54:a4:a7:26:65:
19:66:58:2a:32:ff:08:44:21:fd:be:4c:5a:7f:95:33:72:23:
8e:3f:16:7c:49:e5:1c:bf:fb:9d:61:40:e9:73:ca:6e:fc:c6:
ee:3e:9f:1c:f7:ac:8b:a7:8c:91:a7:e3:a8:93:9a:47:63:89:
b1:79:a6:16:a9:08:54:15:c2:be:50:01:cc:58:63:1f:6b:7d:
9c:22:f5:81:1b:b2:63:5d:04:0a:b9:f4:f7:7e:49:73:88:41:
c4:36:0c:ba:a7:8d:02:b1:b4:fb:bf:96:f3:ed:6a:9e:57:7c:
ee:07:dd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org