Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F2C676EFE9711ED8621624A4AD9E6FC.roa
File: 5F2C676EFE9711ED8621624A4AD9E6FC.roa (raw, json)
Hash identifier: Q04X6LXlNejfab0A9gR2MOex1DarwSWqSd6RG8IBSDc=
Subject key identifier: AE:B0:77:98:8F:58:CA:1A:B4:7B:0F:AC:4A:B6:1F:B4:A7:9C:A5:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2821
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F2C676EFE9711ED8621624A4AD9E6FC.roa
Signing time: Tue 30 May 2023 03:09:21 +0000
ROA not before: Tue 30 May 2023 03:09:17 +0000
ROA not after: Wed 15 May 2024 03:09:17 +0000
asID: 63888
IP address blocks: 156.255.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10273 (0x2821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 03:09:17 2023 GMT
Not After : May 15 03:09:17 2024 GMT
Subject: CN=647568e1-4c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:64:f5:80:c5:bf:1b:3f:ef:84:29:a0:a8:15:
a6:1f:45:87:ba:1e:ba:a6:85:b6:c9:72:d4:4e:03:
ea:2f:c1:96:6a:05:bf:ed:26:84:ea:9e:94:a5:06:
79:8a:39:fc:61:a6:6c:dd:f0:b2:8a:1e:83:97:89:
6e:9a:eb:e9:fe:66:a9:35:ad:d6:7c:6c:eb:03:87:
11:75:a6:46:bf:f7:91:60:ad:85:9b:0f:9c:08:bc:
d8:4d:cf:ec:a4:2c:37:a4:87:29:c5:1f:30:0c:d8:
5a:47:c1:f4:9a:7b:35:22:b6:ec:ad:35:ee:76:37:
0c:b2:1c:54:63:c4:c8:fa:53:52:6d:9c:47:69:ce:
24:fb:5d:b8:6b:4d:d6:dc:49:61:19:e5:06:16:c4:
af:ab:35:21:93:53:d3:56:17:cc:7c:f5:11:d4:38:
da:9e:61:9d:81:e5:cf:ae:af:90:1f:1a:9f:2a:db:
1c:15:50:62:26:cc:7d:e4:5b:db:f2:d4:4f:79:d4:
66:d4:57:47:0f:9b:7b:56:aa:86:c7:74:04:23:37:
92:7b:11:1e:d9:d9:84:f6:7e:a7:c0:1e:8c:1a:de:
8d:5e:27:b6:de:df:a6:11:a8:dd:27:29:64:c5:54:
91:9d:04:21:3c:03:d6:b1:75:e9:93:fc:7c:42:a0:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B0:77:98:8F:58:CA:1A:B4:7B:0F:AC:4A:B6:1F:B4:A7:9C:A5:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F2C676EFE9711ED8621624A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.112.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a8:77:46:fe:64:39:89:0b:f4:11:15:63:19:1e:81:81:45:
71:7d:22:4a:5c:ec:a9:e9:2f:6c:4c:61:f9:b7:b4:2e:b9:b4:
bf:3a:62:79:be:08:4d:8a:f0:88:d7:53:45:e9:41:49:62:fd:
42:75:4b:dc:ca:22:10:84:66:3d:d1:08:ee:4f:dc:bb:df:98:
cf:af:f8:89:e7:1d:dc:0d:e6:40:92:24:24:9a:26:42:0a:dd:
c3:0e:a3:d6:e6:5e:eb:19:4c:de:60:12:9c:56:d8:85:c8:88:
ec:76:d9:4e:fe:a3:22:73:99:c0:61:9b:2c:87:e4:40:8e:78:
dd:1e:bc:38:e0:fd:39:68:cb:76:ab:6f:3b:34:15:bb:e8:e3:
5b:da:38:b1:cf:94:1e:c3:89:e7:69:f1:5c:88:20:db:cf:c2:
d5:94:0f:18:22:bf:9b:13:6a:1f:77:68:b4:d4:c6:92:0d:2f:
81:26:52:76:f8:2d:eb:91:e9:8c:92:eb:5a:7c:9b:e1:6e:ca:
66:a8:c1:3a:a6:93:f8:23:8e:e0:8f:54:ae:a6:6b:19:11:c4:
00:cb:10:c8:ee:dc:bd:d3:49:45:78:21:a1:d4:b9:29:06:28:
4b:8d:f6:fc:e4:cd:51:07:66:42:55:14:03:f9:99:27:a2:e6:
ee:5b:a7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:10 2024 by rpki-client on console-fra.rpki-client.org