Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59A26E307EB511EEADE2774E4AD9E6FC.roa
File: 59A26E307EB511EEADE2774E4AD9E6FC.roa (raw, json)
Hash identifier: Rr521bmaoCN8GOHTCTjXzX3Tg/LJdSh6D8oPn3Fd9fY=
Subject key identifier: 1E:D3:6E:1F:51:68:E7:C6:37:EA:49:39:7B:BF:AB:83:FC:E7:E3:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 44CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59A26E307EB511EEADE2774E4AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:06:25 +0000
ROA not before: Thu 09 Nov 2023 04:06:22 +0000
ROA not after: Thu 08 Aug 2024 04:06:22 +0000
asID: 133861
IP address blocks: 156.245.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17615 (0x44cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 04:06:22 2023 GMT
Not After : Aug 8 04:06:22 2024 GMT
Subject: CN=654c5ac1-6b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:e3:f8:60:6a:6e:27:42:26:6d:6d:8f:6a:
2d:0b:b4:f3:aa:1d:c3:99:0a:c1:d3:3a:c7:f5:82:
da:07:b9:9a:75:95:7b:cb:11:a6:7e:5e:e3:c4:a4:
fe:21:52:b8:99:4b:35:8a:5d:20:c2:b1:ca:8d:ee:
15:1b:cf:58:9e:75:ee:2a:88:be:37:0b:8b:50:73:
52:16:53:13:a2:df:0f:65:ab:67:49:e3:6c:bf:48:
ca:02:f9:be:bb:da:64:2b:e8:eb:34:bf:96:7f:18:
e0:ab:83:b2:ab:f8:2f:26:04:7f:22:fe:28:42:d3:
2d:ed:86:95:91:07:6a:fa:7c:83:8f:2c:12:c0:44:
af:7d:49:f5:00:59:53:26:92:23:0e:51:ae:02:71:
fd:10:1a:7c:79:70:1a:70:6c:b2:65:09:2c:7f:5a:
8a:5e:86:ed:86:d5:2f:b8:8c:0d:6e:a2:e9:c6:7d:
59:0d:1a:28:3a:a3:54:c8:59:c1:b3:9c:c2:0c:7c:
e2:3c:c2:96:97:b8:e6:aa:5a:c0:f6:2b:40:65:f3:
da:23:5d:68:ab:39:7e:f2:8e:7e:ac:04:d0:ad:f4:
0b:4e:84:fe:2d:db:e3:16:49:96:88:7e:8f:ee:91:
f9:ac:10:18:95:8e:ec:cd:09:9f:92:89:f1:f5:cd:
e0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D3:6E:1F:51:68:E7:C6:37:EA:49:39:7B:BF:AB:83:FC:E7:E3:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59A26E307EB511EEADE2774E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.20.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1e:46:3f:25:7a:85:8e:03:3d:8d:15:0d:25:17:8a:f1:cc:
76:0d:d2:d1:b6:5f:53:f8:8e:06:21:6b:e9:75:f4:ad:b4:42:
3c:0b:cb:35:aa:7b:76:3e:34:0b:7b:b0:2d:05:56:05:9d:d0:
ef:ee:98:90:a5:1b:b8:ec:75:79:e3:79:c5:e7:ac:19:25:e6:
d2:51:6a:b7:6a:b3:8b:1b:9f:1a:70:22:ab:a4:6a:5b:d1:b1:
fa:3e:ec:b7:90:ee:db:d7:18:25:56:09:68:02:6a:78:f1:ac:
28:12:51:17:91:75:77:ab:af:de:f0:eb:46:de:10:93:fc:0c:
09:61:ed:be:b5:d3:fb:b5:9b:54:9b:ec:7e:b9:48:3c:4f:11:
cd:eb:89:60:7c:6e:bc:12:5d:31:4a:d6:ef:47:02:b0:d6:2b:
6d:a5:1e:fe:48:79:91:0f:0a:c4:b1:61:ea:f2:79:d2:cf:4c:
47:db:e6:d0:09:bb:c9:61:54:2a:ad:c5:b6:63:dd:05:8f:e8:
d5:ef:46:5d:0f:96:a0:65:37:6c:b4:c5:c5:a6:f9:40:0a:d6:
52:34:b9:83:f2:00:2f:d6:56:3d:7d:38:e3:f6:73:fb:de:24:
88:13:01:78:78:f4:7d:b2:1e:56:a0:a0:bb:8b:e9:ec:bf:ab:
38:85:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:53 2024 by rpki-client on console-ams.rpki-client.org