Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E8099CA951311EF993D539A762E951A.roa
File: 5E8099CA951311EF993D539A762E951A.roa (raw, json)
Hash identifier: AQZpYgqY2YFvgbMmpTbZoQxascArFYI5LhWJB9Nnswo=
Subject key identifier: 39:4D:BC:CB:53:C6:1B:43:A9:01:EB:0F:DD:67:A2:1A:04:6C:C9:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C946
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E8099CA951311EF993D539A762E951A.roa
Signing time: Mon 28 Oct 2024 09:59:49 +0000
ROA not before: Mon 28 Oct 2024 09:59:46 +0000
ROA not after: Sat 30 Nov 2024 09:59:46 +0000
asID: 203020
IP address blocks: 156.253.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51526 (0xc946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 09:59:46 2024 GMT
Not After : Nov 30 09:59:46 2024 GMT
Subject: CN=671f6095-054a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:e1:76:dc:b8:76:cc:8a:93:4b:f9:17:15:
0c:37:60:69:15:d8:7c:49:9a:6e:d2:33:41:58:e1:
15:a8:68:5c:38:ba:6d:ac:db:be:c5:73:3d:58:bf:
ea:25:6b:44:96:25:b8:5c:5e:b5:9c:eb:d1:17:e5:
17:b7:81:b8:e7:75:3d:67:46:91:22:7b:e2:31:a9:
8b:ed:ed:00:e3:a0:5d:bc:c1:c3:79:89:39:0b:2b:
d6:57:75:ec:cb:dd:c1:48:e8:27:e8:1b:42:14:53:
88:f8:06:e9:dc:be:bf:ca:b2:7d:f3:8e:80:64:f9:
3b:86:ea:4b:84:57:a8:d8:0e:d9:a3:51:0f:01:2d:
66:93:96:d0:a9:8c:7a:f0:a2:bd:0c:41:c7:54:b5:
86:95:46:7d:ae:0f:9a:75:f9:a7:77:8e:87:b1:fa:
bb:19:28:d0:ca:78:34:72:7d:11:d7:5f:ba:60:a4:
97:b7:a2:9e:a4:18:88:49:a0:e4:46:22:31:c7:f3:
21:8b:4a:37:82:f3:e3:d3:2b:71:77:37:a3:5f:cb:
b1:18:1c:49:94:28:57:69:91:7a:30:34:f1:d8:2e:
fa:2e:d2:08:06:a8:95:cf:91:67:4e:56:07:c2:82:
8c:f7:6b:31:4c:01:83:4c:f1:f6:18:07:86:b7:cd:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4D:BC:CB:53:C6:1B:43:A9:01:EB:0F:DD:67:A2:1A:04:6C:C9:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E8099CA951311EF993D539A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:6c:a1:ba:51:83:b5:4a:73:fd:4a:9a:c0:3e:ac:1e:88:76:
b1:ba:8c:fa:bf:64:2f:33:ed:90:71:ca:07:e5:fc:3c:5d:14:
80:fa:cc:d5:46:76:0f:51:e3:09:b9:e0:4a:c5:74:c7:f4:70:
05:cd:c2:b9:54:03:ac:50:1b:ec:cf:b3:76:cd:bf:5b:05:7a:
e1:07:fa:2b:1c:b3:2c:06:3f:df:c5:b9:67:0e:75:b0:f4:5a:
56:13:a3:55:ba:cc:a7:ff:f6:e6:7f:ca:52:01:bc:c8:66:57:
e6:53:7e:41:5c:64:50:b0:a5:83:bd:50:22:b6:37:91:4f:64:
c5:fc:72:fd:4e:ba:0e:46:2f:34:a7:b5:c4:77:77:4e:7e:ba:
a2:3b:80:a5:9a:95:01:1b:a5:bc:27:dd:c3:ee:c2:41:40:25:
70:a5:09:ea:df:81:b5:82:20:9e:48:5a:90:da:da:20:1f:c7:
6b:91:c3:ca:c4:8c:15:a0:bd:0f:0c:bc:14:50:cc:35:75:69:
fb:f8:e1:8f:2b:c5:b8:e2:82:9b:14:60:2f:53:bc:e9:5e:46:
ad:ae:a9:02:7b:99:4e:d0:77:d1:26:4f:e0:8d:64:bf:32:ba:
44:06:c6:f9:d7:7d:77:09:f7:b9:90:1e:75:08:1d:a9:0c:5f:
7f:8c:2b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:32 2024 by rpki-client on console-ams.rpki-client.org