Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E220664912411EFB2153A56762E951A.roa
File: 5E220664912411EFB2153A56762E951A.roa (raw, json)
Hash identifier: 8g9SaNNllXPdCuYwTO54p0hoLJmSKOVEgkHXGPr+TxQ=
Subject key identifier: F0:34:9E:10:AC:85:8F:8E:3B:60:7F:20:D0:E5:F8:DE:69:2B:3C:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C7D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E220664912411EFB2153A56762E951A.roa
Signing time: Wed 23 Oct 2024 09:51:26 +0000
ROA not before: Wed 23 Oct 2024 09:51:22 +0000
ROA not after: Fri 29 Nov 2024 09:51:22 +0000
asID: 203020
IP address blocks: 156.235.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51161 (0xc7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 23 09:51:22 2024 GMT
Not After : Nov 29 09:51:22 2024 GMT
Subject: CN=6718c71d-a6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:5f:10:90:69:cf:eb:89:37:6f:14:66:90:
d0:8b:cb:07:4a:84:ce:e3:49:8f:65:26:81:9c:05:
26:c3:22:c9:94:15:59:23:d0:07:03:fb:a2:3a:cd:
e2:4c:54:59:7f:16:77:92:84:5c:3c:4a:d8:3a:7f:
06:d0:8e:f5:7b:73:ee:fa:fe:de:49:8e:4a:97:53:
0a:b2:fb:f2:3c:a9:2b:ef:05:87:71:af:d3:5c:d5:
14:94:cf:ba:67:d8:d7:c4:4b:5c:9a:b6:f7:6f:db:
2c:16:90:22:59:04:d1:a6:aa:06:47:df:d9:71:90:
49:a6:42:05:b1:f9:bf:b8:c9:c2:f7:8e:9b:a3:f6:
40:31:b3:7b:15:4f:9b:b4:95:1c:82:d7:c9:52:0b:
19:1f:60:68:d6:92:1c:39:80:79:ac:80:1e:54:93:
08:15:73:28:ad:4a:95:51:7c:f7:79:71:b3:b1:79:
07:de:68:6f:ca:cf:b2:86:d1:04:ff:26:f9:9b:9e:
71:b7:e3:d5:83:21:e0:65:cd:17:fd:17:f1:21:c3:
22:50:47:d4:f4:98:5a:91:71:e7:d3:af:ee:f3:8a:
14:9c:f5:16:91:9e:40:14:ee:4c:80:a1:1d:6f:5e:
5a:da:95:fd:fc:96:87:ca:a0:53:41:a2:45:b2:f3:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:9E:10:AC:85:8F:8E:3B:60:7F:20:D0:E5:F8:DE:69:2B:3C:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E220664912411EFB2153A56762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.24.0/22
Signature Algorithm: sha256WithRSAEncryption
86:8c:2c:33:23:8c:e3:51:09:5b:60:45:ab:7d:58:b6:8e:29:
9e:56:cd:88:49:23:64:82:1f:48:57:1a:a6:ee:10:f0:7f:ed:
cb:16:1d:a0:11:0d:be:2c:92:ce:14:2e:43:a0:86:b1:0d:50:
52:5e:ae:9b:6f:d0:8b:80:d1:10:89:ee:3a:5e:fe:d1:d1:31:
e5:6c:75:d0:04:09:f4:11:c7:8d:fe:83:f2:86:6a:1d:90:ea:
44:c0:a3:98:0d:8b:f6:1b:70:77:29:5c:fe:de:b5:5e:b7:9d:
17:d7:81:f9:ee:5a:9e:88:a8:78:e3:73:61:7d:5b:5f:44:e6:
54:8c:18:bd:c3:31:31:16:da:72:18:58:c1:b7:ac:2f:ae:f6:
f2:84:81:0d:45:55:01:85:3d:ea:2a:4e:31:d4:f0:43:16:50:
1b:38:6f:b9:4f:c4:10:22:80:70:bb:92:f6:ae:75:59:60:f6:
10:23:3f:40:d0:f3:e9:3f:1d:d8:95:c4:5f:48:d9:65:5f:07:
74:3a:16:22:79:d2:43:e6:dc:f0:e3:2a:7f:5c:fc:29:c0:41:
00:ee:1e:f0:97:bc:75:f9:89:2d:46:e1:69:95:b2:94:c3:3c:
0d:4e:ac:5a:a7:40:52:71:8d:b5:87:31:4f:b6:aa:27:a7:6a:
3f:8b:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:31 2024 by rpki-client on console-fra.rpki-client.org