Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CC79CECFD2811EE9882342F017001B1.roa
File: 5CC79CECFD2811EE9882342F017001B1.roa (raw, json)
Hash identifier: rBGFsKIBDj6jFwwZHuIXdf2qcgW7jAoZaxObqbVptwU=
Subject key identifier: AD:D6:92:C1:BA:DC:A2:CC:C1:2A:6C:0F:F9:3C:23:21:C0:BA:D0:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 82F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CC79CECFD2811EE9882342F017001B1.roa
Signing time: Thu 18 Apr 2024 02:07:09 +0000
ROA not before: Thu 18 Apr 2024 02:07:06 +0000
ROA not after: Sat 24 May 2025 02:07:06 +0000
asID: 211392
IP address blocks: 156.238.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33525 (0x82f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 02:07:06 2024 GMT
Not After : May 24 02:07:06 2025 GMT
Subject: CN=6620804d-ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:c8:c4:38:ad:73:a0:fd:9e:1d:b4:e8:4a:
b3:d1:2c:57:ee:80:53:ae:2c:86:42:1b:00:c1:d0:
93:f1:29:07:91:6a:16:7b:cd:c9:b3:16:19:f2:e5:
48:c6:0d:ae:45:7d:28:17:9e:94:1d:ca:8f:d1:99:
c5:21:af:b2:e4:7b:39:fc:ea:4d:11:7d:f3:e4:89:
55:7d:32:39:c1:33:0d:c3:57:a7:77:78:49:3c:5d:
a2:6d:bd:9c:1d:ae:3b:8d:ca:b6:03:d2:27:ef:5c:
8d:bf:a8:c3:67:ec:c9:63:47:1b:7c:57:f9:58:ac:
d6:47:ac:8b:91:76:f5:d0:20:1f:1b:7c:f0:8f:65:
7f:d1:18:45:37:a1:f9:ac:8c:06:7d:ea:6a:ae:d6:
51:40:30:10:8b:f0:bf:e2:34:c7:cd:1f:4d:41:01:
6d:bb:0d:0e:c0:0b:3e:bc:a9:f7:98:a2:17:e1:19:
6d:14:dc:db:0f:75:19:89:16:c4:d0:0e:93:91:16:
94:04:f7:b9:ec:a2:fd:2c:c6:39:36:16:fd:51:a7:
c3:3f:90:ca:75:05:4c:1f:74:ea:c5:5f:95:6f:7a:
52:8d:e6:6e:3a:8a:1a:f0:e7:76:8a:e3:87:64:69:
1c:98:75:e1:7e:ff:0d:8b:57:aa:b3:7d:ce:cf:3c:
23:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D6:92:C1:BA:DC:A2:CC:C1:2A:6C:0F:F9:3C:23:21:C0:BA:D0:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CC79CECFD2811EE9882342F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.18.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0d:c1:c0:12:a3:ba:97:98:9b:a4:fe:f9:d3:86:43:42:0f:
1e:27:a4:ca:66:a7:83:64:fb:be:05:f7:83:08:f6:d4:da:f5:
e0:20:23:e7:e2:25:1d:67:29:16:a0:3d:17:9e:54:af:bc:af:
fe:67:75:aa:fd:f3:df:ed:a4:59:22:0c:5d:92:dd:4e:cf:11:
44:b9:17:6a:00:60:3e:d3:47:66:c6:ca:73:d8:6a:19:80:3a:
5e:40:12:10:5c:c4:c8:80:6e:6f:93:1d:e6:16:c9:d3:3c:23:
0d:59:0c:f2:a9:4f:4e:e4:fe:b9:90:c7:85:fb:00:18:b5:8a:
22:f4:35:9d:9e:97:4f:63:df:3d:bd:cb:48:83:3d:40:ec:f6:
30:dd:5a:e4:96:2b:b4:e4:84:87:42:a9:6e:b6:c6:83:80:e3:
27:9e:2a:7a:7f:2a:a1:f9:36:dc:95:fd:ec:89:6c:88:a8:c2:
7c:86:68:8e:07:3d:b7:04:f8:af:30:c0:02:08:c9:19:5b:ad:
54:ee:fa:3f:ca:d6:e6:fe:e3:25:2a:62:79:28:5a:e9:d4:36:
23:d8:7a:30:85:7f:66:6f:ab:75:98:ff:91:48:04:d9:73:e8:
26:99:42:5c:b8:3e:39:8b:8f:5e:53:17:8f:f7:c2:9c:03:21:
b0:f4:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:09 2024 by rpki-client on console-fra.rpki-client.org