Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E0B3DDE8F8B11EFBF05B944762E951A.roa
File: 5E0B3DDE8F8B11EFBF05B944762E951A.roa (raw, json)
Hash identifier: Z0msyz2dSJiXXgAJl15Nvf/6Fy2ZPxu+BRYr/OcGu1M=
Subject key identifier: 32:B6:6D:03:CE:18:A2:54:4D:09:82:B5:BF:CF:84:1C:6C:FA:47:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C75D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E0B3DDE8F8B11EFBF05B944762E951A.roa
Signing time: Mon 21 Oct 2024 09:03:41 +0000
ROA not before: Mon 21 Oct 2024 09:03:38 +0000
ROA not after: Sun 24 Nov 2024 09:03:38 +0000
asID: 149440
IP address blocks: 156.235.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51037 (0xc75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 09:03:38 2024 GMT
Not After : Nov 24 09:03:38 2024 GMT
Subject: CN=671618ed-5162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:c8:5a:7a:b0:89:62:60:0a:84:18:01:ac:
f4:61:86:9e:4f:09:eb:b0:a2:51:da:0d:de:49:dc:
5e:d6:4c:79:6e:d1:9b:8f:c6:cd:6f:a6:a9:bf:a3:
f7:df:ba:c4:7c:e5:45:a1:3e:df:2c:fe:c7:11:69:
46:8b:00:97:d6:5d:cd:d4:18:a2:b8:e6:bc:93:5f:
4b:39:fe:99:39:ff:5e:0f:ac:e1:19:9e:14:02:8c:
6c:c0:c5:70:b8:df:9b:a7:a0:ef:be:53:f2:b8:ea:
38:eb:2e:ef:e8:50:cc:97:f8:b2:c9:5f:83:5c:a1:
8d:49:35:16:9f:b1:6a:b8:02:83:28:d9:de:72:ea:
4b:e7:8b:2e:51:03:2b:69:8f:ae:d1:83:e8:66:74:
ab:ae:80:30:d5:48:9b:74:a1:00:b0:cd:c0:cb:03:
65:02:82:0b:ee:c1:e1:e3:dc:b1:a1:e7:38:bb:9b:
4a:a4:c0:10:29:32:e2:3b:3d:eb:3f:87:78:39:49:
bf:d9:0c:81:32:67:9b:a5:08:fa:42:61:0b:9e:04:
ca:57:6e:70:59:de:ef:25:07:19:67:e7:8f:e1:5b:
c0:cb:85:19:7c:2e:7e:7d:a2:77:83:da:8c:58:b3:
68:c9:b4:45:fd:5f:87:da:ee:b3:56:15:4e:62:e0:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B6:6D:03:CE:18:A2:54:4D:09:82:B5:BF:CF:84:1C:6C:FA:47:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E0B3DDE8F8B11EFBF05B944762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:44:9a:d7:e6:93:01:93:f6:29:70:ac:2e:5d:44:56:b4:57:
e4:fd:4f:8e:65:8f:2f:6a:d7:92:1c:e0:21:e7:50:9b:33:c4:
e5:45:c8:eb:fe:b1:29:b3:4a:82:67:38:75:92:54:65:8c:48:
54:6c:f0:c5:aa:55:bd:45:1d:aa:7a:0b:73:ac:21:ae:70:04:
af:09:0c:d9:36:79:e6:9a:20:63:14:f3:82:fd:df:de:ed:ce:
2b:50:93:3b:12:6b:a3:09:30:7a:56:de:0f:4e:58:18:b6:63:
8b:a3:85:08:52:ba:0b:02:fb:2c:81:09:aa:c3:3b:18:69:89:
23:1c:16:66:61:f3:42:65:d0:f2:b0:cc:07:da:2e:e1:67:4e:
2c:b7:fc:3e:0c:a3:14:3d:29:15:c2:77:10:88:fc:a3:e0:a2:
57:7f:07:47:8d:04:6f:0f:58:2b:8e:78:fa:d0:d0:50:8d:1f:
7e:e7:d4:c8:f3:cc:0e:73:5f:d5:a3:3a:ca:df:53:8e:e3:0d:
73:d5:50:2b:88:8e:4c:15:05:0a:32:c6:aa:47:00:99:b5:29:
21:17:44:69:94:35:0f:ee:62:c5:a9:8d:ff:16:4d:7b:56:ec:
f3:bb:22:d1:bb:36:93:9d:95:fc:1d:17:d3:61:37:cb:80:d3:
37:5e:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:32 2024 by rpki-client on console-ams.rpki-client.org