Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FB87E4465B111EEBC5E9B704AD9E6FC.roa
File: 5FB87E4465B111EEBC5E9B704AD9E6FC.roa (raw, json)
Hash identifier: i+F/hVldwgpOZpr3u8V+2KnlDre0BQruLSMrMdBn9Qk=
Subject key identifier: 88:6C:0C:F5:83:82:63:AD:6C:7B:A9:4E:D6:B7:57:7A:80:C7:65:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3DE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FB87E4465B111EEBC5E9B704AD9E6FC.roa
Signing time: Sun 08 Oct 2023 08:04:58 +0000
ROA not before: Sun 08 Oct 2023 08:04:54 +0000
ROA not after: Wed 05 Jun 2024 08:04:54 +0000
asID: 137263
IP address blocks: 156.253.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15841 (0x3de1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 8 08:04:54 2023 GMT
Not After : Jun 5 08:04:54 2024 GMT
Subject: CN=652262aa-be8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d4:1b:a2:9a:6c:ae:bc:b9:c2:22:1b:be:53:
30:a6:06:a7:de:dd:ac:ec:55:29:87:2f:7e:8e:df:
39:39:67:c7:3f:9f:d3:e9:89:83:5f:3f:7a:f3:77:
d2:83:ad:41:d9:3b:c0:d2:0f:2f:fe:9f:36:ac:88:
5b:4d:67:84:52:12:ed:6a:4d:4b:e1:ed:e5:44:c9:
9b:60:85:4f:5b:c6:4d:53:d7:81:e4:38:f7:df:17:
3e:31:1d:2f:35:e3:11:b1:e7:b6:3c:12:d1:a2:0b:
fa:a5:a7:6f:0b:ed:be:c3:35:d7:46:ed:2f:6b:ce:
86:00:e1:34:99:9d:de:18:01:ed:5b:ea:03:48:7c:
99:e2:81:1c:3a:d6:ff:6f:0f:21:fb:8e:b6:27:d7:
48:0f:6f:15:30:e1:c1:54:3b:59:17:24:f3:5d:00:
ec:b5:f4:4e:a7:d2:f1:aa:60:27:5a:7b:50:03:9f:
d4:5f:c0:e4:c8:f7:48:c8:79:5e:96:c5:2c:f4:d8:
48:02:4c:08:53:91:48:62:7b:3a:92:18:2b:e7:89:
01:0a:1e:ca:0f:64:cc:6d:7a:e7:9c:3c:30:12:0c:
ab:2b:01:a6:12:7f:af:3e:f0:1f:c5:17:fb:21:75:
d5:ef:10:e0:ce:7f:e6:59:a0:a4:d0:52:02:4b:1d:
e6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6C:0C:F5:83:82:63:AD:6C:7B:A9:4E:D6:B7:57:7A:80:C7:65:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FB87E4465B111EEBC5E9B704AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:12:a5:f5:c7:2d:0d:ee:35:54:46:9a:19:f4:5b:3c:2b:cd:
0d:d0:db:3b:07:64:f7:96:d3:2c:36:09:fa:fa:3f:e7:a7:18:
37:34:14:d0:c8:aa:f4:13:44:9e:3b:a7:79:16:50:24:1f:4d:
2c:7b:7f:ba:95:17:53:7f:58:49:7b:c3:5e:fc:74:f9:61:ea:
97:cf:98:62:4e:30:66:36:2a:d3:bc:03:37:52:69:a7:2a:11:
53:21:0e:d4:60:56:72:2b:4e:33:d0:00:92:94:1a:a8:ae:23:
8b:b0:ad:e2:4b:24:57:25:f1:ce:2b:79:67:4d:cd:e3:77:d2:
5b:79:4e:e1:9b:05:27:7d:f9:18:a8:69:54:f2:96:bc:dd:b6:
e0:b9:0e:53:d8:4a:77:ba:58:39:58:6f:8c:fa:a9:b3:46:2f:
06:03:19:e3:33:9c:8a:64:5c:ca:28:5e:4d:f5:4e:69:ed:cd:
b6:9e:b3:72:a1:9f:13:95:d7:5e:4f:ee:45:65:67:28:fa:95:
3c:77:53:36:03:aa:80:ab:3d:c8:37:d9:09:14:97:7a:80:0e:
37:63:84:20:2d:2b:55:e7:1f:a9:be:95:37:e6:b8:5f:a6:c8:
82:3c:48:ec:94:8f:e1:a7:68:16:de:82:33:fa:26:4e:a2:c6:
02:82:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:53 2024 by rpki-client on console-ams.rpki-client.org