Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F347F36A62F11EE80F5299F775412E6.roa
File: 5F347F36A62F11EE80F5299F775412E6.roa (raw, json)
Hash identifier: /NfUvnUDzk+jGH4pD5sHTkZ56c+uMd/YWZThjj+CIFM=
Subject key identifier: 25:83:58:C2:83:74:4A:5F:8A:0E:6D:68:D3:F4:BA:10:71:67:D3:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 595D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F347F36A62F11EE80F5299F775412E6.roa
Signing time: Fri 29 Dec 2023 09:48:09 +0000
ROA not before: Fri 29 Dec 2023 09:48:05 +0000
ROA not after: Mon 04 Nov 2024 09:48:05 +0000
asID: 5065
IP address blocks: 156.229.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22877 (0x595d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 29 09:48:05 2023 GMT
Not After : Nov 4 09:48:05 2024 GMT
Subject: CN=658e95d8-3c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:97:1e:42:7b:49:b5:f4:0b:96:5a:da:21:
67:7b:93:d4:fe:68:37:eb:d5:d9:24:b7:29:18:11:
dd:68:d7:24:71:fb:e4:4c:b3:f4:05:bd:5f:75:b4:
65:13:89:a6:f5:fd:f0:16:ee:80:8f:31:a3:4b:21:
d9:d4:d7:e0:de:4f:40:8d:79:a0:a6:ce:88:03:f6:
f6:cd:6e:cf:df:d7:d8:9f:9d:3b:e0:f4:88:91:07:
90:43:da:28:6f:b0:9f:19:78:3f:55:89:26:b8:98:
ff:e6:e1:55:f5:63:8d:93:84:cd:c6:b0:f3:50:23:
79:08:19:de:1d:c5:da:79:25:51:cd:95:b0:59:9d:
19:4d:7f:c2:66:23:4d:38:4e:e7:f4:08:75:ff:aa:
44:39:44:06:b7:84:db:ab:bf:3b:d0:53:b8:86:09:
ec:f2:0a:45:9b:5f:e1:d2:3f:a8:84:56:16:3f:0b:
dd:b4:7e:f2:25:2c:e8:a0:6b:88:8d:1b:57:4a:99:
1d:21:27:21:af:f5:13:41:02:21:aa:2c:01:38:4b:
34:77:a9:82:09:01:7f:7a:2f:81:0b:9b:83:07:10:
03:ca:94:a2:5c:88:7a:d4:ce:46:bf:7c:3c:c2:a8:
5b:1e:e0:7b:38:7a:e1:8f:61:ce:2d:6c:53:63:46:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:83:58:C2:83:74:4A:5F:8A:0E:6D:68:D3:F4:BA:10:71:67:D3:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F347F36A62F11EE80F5299F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.53.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:45:1c:a8:99:36:d7:0a:a4:83:c6:c1:43:f4:99:1c:09:fb:
4a:94:3c:fe:75:ec:00:41:27:9d:24:ac:b0:5e:0f:93:9b:9e:
3d:c6:c1:87:75:85:b0:05:71:7e:0e:bf:84:85:f5:4e:46:f5:
c6:b9:c5:b8:15:75:9a:e0:fa:3e:dd:53:bd:f6:f8:4e:a0:51:
30:ec:4b:36:be:e2:8d:2e:4d:d2:7d:b1:77:93:00:74:be:14:
62:c0:f2:38:9b:e6:cc:ba:d1:50:bf:dd:72:98:f5:08:dd:5f:
a8:7f:4d:69:dc:5f:99:74:11:38:a5:9a:0e:c5:57:55:49:78:
02:72:1f:73:db:20:d5:e2:c5:6e:28:15:41:dc:e0:2b:d8:9b:
18:23:d3:93:31:d2:eb:be:be:23:40:6b:f4:b1:32:8a:02:ad:
15:e1:69:e3:72:ae:6a:5c:46:0d:46:ed:84:05:29:64:92:16:
7a:54:f4:dc:22:73:4b:1b:2f:7f:7d:23:81:86:1f:59:19:18:
a7:41:c5:dd:5f:40:3b:06:d9:f3:e4:f4:ad:18:b6:34:94:1a:
20:70:a9:76:79:2f:40:9b:84:1e:a1:76:ab:b7:74:13:f1:83:
2c:5f:02:ba:7c:f4:59:5b:d5:2e:15:51:16:dd:4d:a0:b5:a8:
d0:c2:73:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:17 2024 by rpki-client on console-fra.rpki-client.org