Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CA63ED002FF11EF9C381255017001B1.roa
File: 5CA63ED002FF11EF9C381255017001B1.roa (raw, json)
Hash identifier: FeX0XttI/454uXO5gZpjMNLz6tDHN4AFPUH7b4eZgZc=
Subject key identifier: 6B:42:55:38:8B:E1:29:0B:6B:60:E5:7D:38:62:A1:F6:05:E0:25:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 853D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CA63ED002FF11EF9C381255017001B1.roa
Signing time: Thu 25 Apr 2024 12:28:47 +0000
ROA not before: Thu 25 Apr 2024 12:28:43 +0000
ROA not after: Mon 06 May 2024 12:28:43 +0000
asID: 5065
IP address blocks: 156.240.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 12:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34109 (0x853d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 12:28:43 2024 GMT
Not After : May 6 12:28:43 2024 GMT
Subject: CN=662a4c7f-0f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:7b:4b:1c:61:1d:df:4b:c6:68:da:da:cd:
55:3c:5f:15:8f:24:9e:ac:42:7d:c9:c7:b4:11:b4:
e8:e0:62:b6:c0:6e:47:8d:9d:43:cc:45:87:c9:65:
ad:bb:d3:eb:ea:ab:0a:48:5d:30:78:f1:64:4d:0f:
f9:b6:5d:50:b2:cf:1b:9e:6f:27:5e:ba:12:28:e0:
b3:d8:7c:8f:6c:72:d8:5a:38:0a:13:ca:76:ca:7c:
99:95:5b:fb:3e:10:32:08:fc:f3:29:fe:e7:1f:c3:
f0:ff:4a:a1:a3:76:5d:2e:09:c4:0d:05:46:fd:2e:
be:9a:3d:0d:f7:3b:98:21:5a:43:0c:3d:8b:75:ae:
72:c4:54:0c:4b:25:b5:a1:0b:89:89:00:6b:3c:44:
c2:7c:7f:dc:c2:ae:57:e9:ee:27:98:f8:d3:14:11:
ee:a8:fe:9d:39:91:0a:41:6d:01:44:1f:df:72:9c:
b5:87:b3:f1:a3:a5:d1:13:e6:a6:05:48:6c:e5:d7:
19:2f:b2:f6:bd:f1:99:06:0e:5f:ee:46:94:f5:0a:
1a:c7:53:61:84:10:a1:d9:c1:41:08:3b:1f:3c:07:
7e:aa:40:f7:30:5e:3b:47:2b:51:2b:31:83:f8:34:
ee:ce:18:5c:b2:b4:4a:39:02:6c:8f:be:d3:f6:4e:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:42:55:38:8B:E1:29:0B:6B:60:E5:7D:38:62:A1:F6:05:E0:25:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CA63ED002FF11EF9C381255017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:07:51:ff:70:bd:06:4e:ed:96:ec:5f:1d:b8:33:aa:8f:88:
81:5d:96:6b:b6:35:83:39:2d:cd:2f:1b:87:78:e7:e6:78:ca:
49:b8:77:3b:8b:2f:b1:e0:6f:09:b7:e0:5b:1e:7a:79:97:55:
a3:1c:52:9e:07:86:41:71:0d:df:f6:95:a2:2c:45:4f:ea:da:
19:9b:a2:6d:96:72:f4:60:3a:2a:03:46:30:8e:68:4f:3e:de:
56:8e:48:24:3a:7e:6b:9b:32:cc:d2:2c:71:85:58:3a:1c:e9:
e8:eb:d1:12:b4:c6:bd:3b:4f:61:b6:dc:b8:22:fb:a6:79:50:
a8:94:19:23:dd:b3:28:2c:88:16:a4:e3:0e:a0:56:76:a3:f3:
eb:fc:42:ff:6b:f2:44:1e:93:47:e3:01:3a:30:cb:20:40:12:
44:86:b1:45:64:7a:89:1e:3f:32:b5:60:62:a1:bc:6d:e2:29:
1a:f7:70:8b:5c:da:0d:2a:4c:5e:41:c4:73:71:f8:eb:29:e7:
29:85:d5:c4:ee:a7:49:28:86:e8:0c:1b:99:41:38:08:3c:b8:
14:a7:d5:f4:98:de:4d:0d:24:f3:be:4f:a4:6d:6e:34:5e:4e:
18:df:d5:44:0d:9d:f8:0a:af:83:fe:52:ba:3b:2e:1b:92:62:
5d:0a:f1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:09 2024 by rpki-client on console-fra.rpki-client.org