Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BAFFB7A1D1011EF8B2D15307DDC24C2.roa
File: 6BAFFB7A1D1011EF8B2D15307DDC24C2.roa (raw, json)
Hash identifier: c4WJnc5SZrY3iQvLelL5THkW5034c7vdaN/x7CkzFsU=
Subject key identifier: 5D:CF:FF:2F:4C:56:84:D0:09:12:3C:F0:BF:E2:47:DC:42:29:2B:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CB0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BAFFB7A1D1011EF8B2D15307DDC24C2.roa
Signing time: Tue 28 May 2024 16:36:23 +0000
ROA not before: Tue 28 May 2024 16:36:20 +0000
ROA not after: Sat 07 Sep 2024 16:36:20 +0000
asID: 138195
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Sep 2024 16:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36016 (0x8cb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 16:36:20 2024 GMT
Not After : Sep 7 16:36:20 2024 GMT
Subject: CN=66560807-e657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:f9:17:c3:c2:57:46:2c:55:ba:c7:3e:c0:
e8:87:46:bf:b1:22:02:18:70:53:8c:ee:04:29:78:
a0:ce:c9:f2:a4:87:84:de:39:d9:20:dc:ce:54:93:
48:ac:3e:e0:43:d1:cc:69:1b:e6:6b:64:15:46:a5:
e6:33:32:a0:6e:69:39:41:91:52:99:28:90:41:6c:
79:d1:f9:8f:f9:0b:9f:a2:25:8b:62:06:fb:2d:f7:
30:55:3a:c1:bd:d6:aa:d1:95:cf:8d:ed:74:dc:a2:
52:5c:73:98:62:73:81:84:63:b8:04:97:fc:5e:ea:
7f:97:ff:b4:b8:35:5b:ce:72:96:18:b9:9e:a4:3a:
62:a1:fc:7c:af:f9:aa:53:0a:63:7f:80:b3:7f:5c:
ff:ec:6d:92:70:af:a8:95:f9:fd:02:6d:a6:d2:61:
35:77:b2:9b:e9:c9:ea:73:bf:d7:4c:b2:52:39:36:
9f:cd:ee:11:db:3e:d2:63:64:9f:fa:b7:2a:c7:c7:
f0:c4:43:fb:00:00:ba:22:f2:c3:d4:8b:6b:f4:98:
61:d9:60:b1:b1:5a:75:3b:3a:31:78:b9:f4:b4:7c:
0e:0e:05:64:b6:6d:fb:4e:48:31:38:23:c3:d0:a5:
03:95:92:05:0d:95:52:2b:96:a3:85:f1:5e:42:ea:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CF:FF:2F:4C:56:84:D0:09:12:3C:F0:BF:E2:47:DC:42:29:2B:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BAFFB7A1D1011EF8B2D15307DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
51:76:66:d0:71:22:34:0b:d6:f4:38:ac:e9:dd:a6:30:c9:31:
85:84:e8:b9:c9:fe:93:d2:d0:a9:c1:73:2c:0e:ba:fd:bb:56:
26:7c:59:87:bb:1c:54:65:3e:0e:be:c5:e5:3a:1a:cd:17:a0:
38:bc:cc:83:3f:d6:43:6a:19:db:86:52:35:ae:25:4c:b3:76:
85:f6:20:9a:8d:bb:a2:22:3c:9b:89:99:63:92:cb:fa:40:1e:
5b:6e:e3:40:d2:44:0b:5c:65:12:fe:aa:11:13:a0:54:57:88:
20:c7:d0:78:c4:b8:b9:b8:03:9f:b3:3e:44:c5:a1:0c:32:86:
8c:40:6c:79:a8:91:7f:fb:79:d8:90:b0:38:98:c4:1f:b7:76:
86:85:1c:e0:d8:8a:fa:73:21:78:03:f6:e2:44:58:0e:94:e3:
3e:54:f1:b7:69:4b:c6:19:77:09:54:98:3a:a4:49:7d:46:85:
ca:e3:15:87:a5:f7:ba:b4:49:9f:72:20:7c:46:2a:a9:82:4d:
3c:58:6f:55:72:a7:5c:51:bd:5d:3b:a8:55:21:5c:fb:25:b5:
93:83:c5:ac:1d:0b:0a:b3:f4:cb:41:ef:f8:03:2c:8c:a6:5f:
fa:84:c2:62:09:c6:25:8b:ca:cb:b7:25:6f:8e:6c:d0:50:25:
38:c5:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:35 2024 by rpki-client on console-fra.rpki-client.org