Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BFE4BD809BA11EE919698804AD9E6FC.roa
File: 5BFE4BD809BA11EE919698804AD9E6FC.roa (raw, json)
Hash identifier: rSjiNA3I3tLKofAAEWg31TxhiRV5uHgIgZNt5Xwso3M=
Subject key identifier: 0E:EB:57:89:9F:4B:C6:D4:D2:7C:27:8F:D1:F3:A5:7E:6A:BD:C7:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2C14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BFE4BD809BA11EE919698804AD9E6FC.roa
Signing time: Tue 13 Jun 2023 07:17:31 +0000
ROA not before: Tue 13 Jun 2023 07:17:27 +0000
ROA not after: Sat 15 Jun 2024 07:17:27 +0000
asID: 138678
IP address blocks: 156.249.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11284 (0x2c14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 07:17:27 2023 GMT
Not After : Jun 15 07:17:27 2024 GMT
Subject: CN=6488180b-e92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:5b:0f:1c:7a:1f:e0:fe:0e:8b:c8:c8:7a:
ee:4c:3d:d5:7e:17:e9:ff:1e:26:b7:3c:9f:d8:96:
ad:95:66:f9:d0:ec:c0:df:eb:f3:5f:66:3c:9a:04:
38:2a:5d:93:ce:bf:c7:b7:d2:b5:ef:23:6b:3c:22:
17:cf:a4:e8:76:d6:62:bf:55:94:23:81:3c:b5:d4:
e3:dc:79:a5:a4:50:2b:5f:06:3d:62:76:20:04:0d:
f3:97:95:7f:77:79:b1:a5:89:48:93:79:bf:64:81:
94:43:bf:6f:44:bd:dd:dd:9b:ef:e6:03:83:b6:83:
d7:72:8f:00:49:a4:9b:d2:ca:5b:2e:ed:35:03:93:
73:84:f1:e9:3a:42:f1:2d:ea:65:18:40:37:f9:31:
25:e1:45:c0:19:19:f1:b9:59:4a:cb:83:b8:2a:fa:
be:93:b3:fb:18:e6:48:e2:e4:d1:b5:39:a4:4f:cd:
ac:31:65:26:06:19:9c:82:cd:f6:d9:2e:dd:ea:1a:
f7:69:68:20:e9:3a:5c:b5:8b:f3:71:3e:94:3e:8d:
f4:4b:82:33:9f:48:d3:33:a7:ed:90:0f:32:93:e9:
b6:1d:c5:e5:04:49:55:da:a7:36:18:2e:a8:08:a3:
07:8d:c7:d7:9d:79:8d:41:04:80:d3:77:bc:cf:ea:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EB:57:89:9F:4B:C6:D4:D2:7C:27:8F:D1:F3:A5:7E:6A:BD:C7:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BFE4BD809BA11EE919698804AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.1.0/24
Signature Algorithm: sha256WithRSAEncryption
93:3f:3c:43:fd:8f:40:8d:ab:c7:df:84:ce:bd:53:38:7b:f9:
40:3e:fc:8b:4f:7d:4d:4b:6c:9d:e4:17:05:ab:b1:70:2e:63:
05:66:5c:cc:25:d4:0f:4c:25:2a:8a:e9:3f:15:e5:62:f6:ab:
ed:48:b0:9b:dd:5e:00:a4:ef:62:75:4b:5e:3e:da:e2:b4:04:
a3:2a:56:aa:8a:d8:3e:80:cc:c5:09:bb:46:13:0a:6f:fd:08:
a4:bc:da:55:4d:3b:1e:0a:17:24:4a:31:1d:dd:80:4f:fb:40:
47:b4:91:eb:07:de:86:cc:d1:d3:59:be:7b:3c:f2:c7:aa:93:
b6:96:3b:62:6f:95:3b:41:53:4a:89:0f:52:79:da:47:e9:4f:
b2:fa:cc:57:cf:b1:6f:7c:35:65:72:af:9a:8d:84:80:6d:eb:
3f:50:80:a0:29:09:83:78:51:0a:12:85:9e:80:c8:87:61:c7:
ab:c2:ce:8e:ca:b3:4c:6c:8e:7d:40:3c:64:d2:d1:70:6a:f0:
3f:fa:12:ed:95:e3:12:e2:de:d7:5a:73:d5:37:89:7e:e0:1e:
57:fb:33:07:08:87:b6:40:9e:67:7b:1e:41:c1:e6:fa:0b:04:
d0:b5:1a:98:49:dd:7d:02:64:95:5f:7f:bb:13:d8:4c:39:5c:
b6:55:a2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:00 2024 by rpki-client on console-fra.rpki-client.org