Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5683D058278111EEBBAB9F1B4AD9E6FC.roa
File: 5683D058278111EEBBAB9F1B4AD9E6FC.roa (raw, json)
Hash identifier: qohr+Rz8qjP0HXa3tLInYbnPIP3oWF4U7tsVUd87ilQ=
Subject key identifier: 1B:24:C2:16:CE:56:44:43:CA:E4:31:57:6E:4E:3D:8A:E6:08:2B:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 31C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5683D058278111EEBBAB9F1B4AD9E6FC.roa
Signing time: Fri 21 Jul 2023 04:44:55 +0000
ROA not before: Fri 21 Jul 2023 04:44:51 +0000
ROA not after: Thu 13 Jun 2024 04:44:51 +0000
asID: 5065
IP address blocks: 156.235.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12743 (0x31c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 04:44:51 2023 GMT
Not After : Jun 13 04:44:51 2024 GMT
Subject: CN=64ba0d47-ff29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:be:08:d5:3a:6e:cf:14:df:23:65:43:0e:
09:de:a4:1b:cc:77:13:89:45:f8:4e:1c:f9:4f:24:
58:08:c2:10:54:1d:ba:a5:a3:69:ca:49:05:d5:e0:
42:b7:fc:94:e6:8b:6a:25:f4:46:68:7c:0e:97:59:
b9:0c:7d:33:8a:46:c0:1e:72:d0:90:97:cf:32:30:
e5:24:84:b2:93:42:30:4d:7a:17:30:bb:63:29:58:
ec:72:e1:3e:a4:81:c5:4e:ae:45:67:13:5c:98:e8:
b9:7a:d5:90:0b:49:96:95:54:bc:29:bf:34:66:e8:
79:8b:fb:a6:d0:df:73:31:0e:8d:fa:b7:c1:17:77:
88:f4:22:e1:0f:b5:93:e2:ab:0b:8e:f9:6d:a0:4c:
58:fd:79:72:7f:a1:0a:ca:c8:2f:55:12:11:f0:f2:
f7:b5:f8:27:3b:4b:bf:3a:64:a6:a1:10:07:49:44:
a6:7d:ac:44:36:ad:76:2c:9a:59:94:bc:b3:43:09:
f2:57:b8:ff:8b:ca:e0:9c:24:ee:5d:9a:f3:2e:e6:
9e:91:87:0d:43:2e:2b:bd:53:c9:ed:85:6b:d7:c0:
60:a3:a5:22:ad:55:ed:3c:ed:1d:30:d6:fb:0c:94:
23:07:9f:5b:de:91:4b:d2:21:d4:7f:5d:b2:f2:d1:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:24:C2:16:CE:56:44:43:CA:E4:31:57:6E:4E:3D:8A:E6:08:2B:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5683D058278111EEBBAB9F1B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:9f:c6:ce:77:93:4a:19:ac:dd:54:47:a9:be:3b:d9:33:84:
0f:f3:99:7e:99:e1:42:06:32:8e:11:68:e9:c4:e9:63:6f:83:
4a:2d:7e:f3:62:9c:ba:80:91:3a:f9:e8:f2:a7:3d:a5:7f:b4:
dc:39:bf:65:c8:0e:02:ed:7a:83:d6:29:a3:eb:7b:33:a9:ee:
b0:e7:f9:ec:a5:bb:64:ee:4a:c1:d6:c1:15:bd:df:3e:e0:eb:
c8:1d:a8:2e:d2:1b:57:2a:f4:bc:ea:29:13:d2:3c:c1:95:70:
ec:e3:81:4f:ae:88:8c:1a:d1:45:ff:ae:21:cd:10:40:04:a9:
15:57:96:06:4d:60:bf:66:5f:80:2b:4e:e6:66:43:3d:fe:05:
e8:90:da:09:4c:2d:09:03:5b:c3:e8:d2:e1:44:e6:88:bd:1e:
03:72:f1:80:ce:5c:12:ad:e4:21:c4:96:7d:47:eb:73:36:2c:
56:5c:44:3d:98:90:d4:7c:91:7d:b7:c4:8d:9e:00:23:31:3c:
f3:2c:2e:8c:35:44:5b:05:aa:70:f0:e6:b2:30:2e:50:85:6b:
4f:53:bf:48:55:be:db:88:d3:49:0a:ef:33:dd:13:01:bb:06:
7f:d6:38:54:16:f1:a5:9c:43:68:76:59:ea:a8:6e:e2:8b:38:
6d:c0:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:17 2024 by rpki-client on console-fra.rpki-client.org