Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D8C19CC037811EF8D320A2C017001B1.roa
File: 5D8C19CC037811EF8D320A2C017001B1.roa (raw, json)
Hash identifier: vJuFVe/d6DreH8FUgmttfHJS5+TfFJll8ijY/bWfw2A=
Subject key identifier: D6:AB:D4:15:C6:39:1F:0B:E9:70:12:81:38:FD:1F:4B:34:47:7F:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8560
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D8C19CC037811EF8D320A2C017001B1.roa
Signing time: Fri 26 Apr 2024 02:54:57 +0000
ROA not before: Fri 26 Apr 2024 02:54:54 +0000
ROA not after: Sun 12 May 2024 02:54:54 +0000
asID: 397630
IP address blocks: 156.239.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34144 (0x8560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 02:54:54 2024 GMT
Not After : May 12 02:54:54 2024 GMT
Subject: CN=662b1781-8074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:02:8f:d8:9a:50:43:4e:eb:b6:7b:01:01:
0d:0d:93:05:b5:c1:7a:aa:88:9d:3b:17:30:bf:82:
9f:f8:48:20:f6:35:3b:e4:2a:ea:19:91:ff:27:87:
29:30:ce:9e:32:70:81:c1:4a:c6:0a:e0:93:07:52:
42:9e:db:b1:6a:ec:95:12:de:ab:d7:e4:7f:65:cb:
1e:5b:38:4e:59:a9:0c:3e:3e:50:ae:84:f1:ed:61:
db:4c:dd:a4:aa:0c:a9:8b:0b:11:e2:56:bd:c3:e3:
2a:3a:2b:21:7b:fb:e5:d0:8d:c5:ae:6f:49:54:e6:
02:38:e0:2c:be:64:c5:16:c7:80:e0:46:71:33:2e:
18:6a:ea:8a:df:f8:c9:0e:d2:9b:ba:c8:5a:d6:f1:
44:d2:6f:98:70:32:bd:47:66:50:2e:57:92:26:e1:
4e:0b:5c:d4:76:92:0c:2c:e1:0a:85:35:ef:ca:cd:
68:86:d8:4a:83:8e:7e:1f:fa:b1:42:f3:4a:68:75:
d7:b9:33:bb:84:f5:77:d7:2f:0e:05:9c:aa:5d:eb:
8f:a4:96:fc:83:b4:70:0f:aa:44:d3:0b:a2:ba:10:
ac:6a:d7:6c:25:2a:32:5d:3d:70:8a:bf:71:4b:f2:
0a:56:36:9f:66:12:cd:35:cd:4f:65:01:6e:99:7c:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:D4:15:C6:39:1F:0B:E9:70:12:81:38:FD:1F:4B:34:47:7F:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D8C19CC037811EF8D320A2C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.36.0/22
Signature Algorithm: sha256WithRSAEncryption
79:21:66:8d:a6:95:3e:4c:3a:a1:9c:da:aa:73:48:ac:53:d4:
22:5f:70:9d:31:7b:f9:6f:30:8a:a5:c3:e9:fa:f2:33:55:cc:
66:3a:5e:8d:66:04:1e:fb:aa:33:37:8c:52:52:40:8f:1e:fd:
d7:63:20:ee:9c:c0:f9:1c:a6:0c:cd:ab:9e:1a:ec:98:c4:bd:
97:cc:f1:6f:52:d3:f4:4f:05:41:3f:9e:a4:87:b7:9f:74:87:
14:8e:ef:d3:85:de:28:b5:b3:da:69:25:61:7e:1b:aa:00:86:
95:02:86:2e:ae:93:f8:dd:b5:ca:80:be:6a:af:89:ba:92:06:
31:9e:bd:cb:86:12:2e:77:71:5b:7c:f4:2a:55:a8:c0:54:fb:
59:d8:7d:b3:3d:c7:30:24:30:bb:46:24:80:f8:90:92:72:20:
23:53:e3:46:46:00:ef:3a:55:4c:9d:54:78:9b:6b:ed:be:d3:
9b:5e:2c:47:b4:a5:82:86:51:1b:43:52:44:ab:49:92:9e:fa:
8b:f8:c3:35:77:f9:ee:6a:51:59:20:e5:64:33:52:3f:54:25:
b8:51:f4:00:44:c6:f8:4e:03:c3:8e:cc:2f:e7:2b:2b:97:03:
07:26:05:01:2b:3e:9b:5f:cf:7c:fb:80:20:44:a6:27:50:9e:
d0:2c:0f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:53 2024 by rpki-client on console-ams.rpki-client.org