Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/705459DCA62D11EEB10A739B775412E6.roa
File: 705459DCA62D11EEB10A739B775412E6.roa (raw, json)
Hash identifier: FjHlwxUWEnejScts/26CCf2CdfjtOS4Snj3KimEfPE4=
Subject key identifier: 12:93:82:EF:AF:5E:5F:1D:77:EB:91:21:41:75:D6:AD:54:36:80:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 594F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/705459DCA62D11EEB10A739B775412E6.roa
Signing time: Fri 29 Dec 2023 09:34:18 +0000
ROA not before: Fri 29 Dec 2023 09:34:15 +0000
ROA not after: Mon 04 Nov 2024 09:34:15 +0000
asID: 5065
IP address blocks: 156.229.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22863 (0x594f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 29 09:34:15 2023 GMT
Not After : Nov 4 09:34:15 2024 GMT
Subject: CN=658e929a-a5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:af:dc:9d:5b:65:72:a7:d5:2e:c8:48:b6:
82:2d:b5:89:d2:0f:bf:78:01:12:0d:97:f6:da:fd:
62:20:c8:76:3e:42:5e:4f:b1:28:43:24:aa:95:6a:
31:6e:e8:85:14:39:8c:0c:ab:f2:ab:e6:75:46:88:
05:55:a8:57:fe:1b:2e:b4:c0:47:72:3f:0d:70:c5:
41:6d:a6:07:e7:e5:34:71:5c:c1:24:c7:e5:0e:01:
ea:ae:60:eb:25:5e:0a:2e:d5:26:09:af:42:5c:e0:
87:b6:c0:b1:fe:13:b4:95:da:06:3f:f7:8a:50:d0:
79:7f:b9:96:08:5e:08:97:99:95:e1:10:16:8e:5e:
24:ac:6b:1b:1b:88:4f:52:35:9f:2c:cc:30:aa:e1:
82:37:89:99:82:5b:d3:39:96:98:f5:67:e9:8a:de:
0d:15:bb:3e:0a:43:f8:35:80:21:ba:af:20:2f:45:
50:e1:34:30:80:ff:07:83:cb:d7:a1:dc:59:f5:ed:
1d:f7:ce:88:b6:88:8e:1d:03:42:d7:74:02:bc:0b:
e8:bb:ed:e7:59:d9:3f:5f:22:2f:b6:69:c8:b7:77:
02:49:9d:10:f2:d0:c7:dc:a1:37:99:06:fb:86:cd:
bf:01:c5:5e:78:05:da:a4:06:8f:aa:84:5d:75:0d:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:82:EF:AF:5E:5F:1D:77:EB:91:21:41:75:D6:AD:54:36:80:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/705459DCA62D11EEB10A739B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.61.0/24
Signature Algorithm: sha256WithRSAEncryption
77:71:5e:ef:c1:f3:59:e8:7b:3e:79:d9:cb:2d:24:a6:f1:cb:
7c:ef:04:d1:0d:63:7a:bd:af:6d:48:fe:20:4b:17:33:3e:b8:
60:08:6a:89:5e:c3:d8:25:f9:ef:38:4f:ee:3c:e5:a3:c4:f3:
c1:79:34:b7:e5:f5:cd:91:36:34:46:79:57:ba:74:14:aa:db:
a1:fe:db:f4:72:fd:de:35:a4:14:8e:c9:49:6e:16:42:82:9b:
1b:7b:08:eb:b1:36:67:66:81:ed:a0:1c:ef:36:07:72:14:02:
41:aa:3b:ee:f8:a0:cd:76:d1:1f:8e:35:cc:30:af:2d:52:89:
95:36:c0:ff:11:82:54:bc:1f:2c:87:cc:43:cd:07:2d:74:f6:
b0:f5:c8:63:fb:65:e1:cb:a2:fe:a8:71:dd:f2:c6:80:22:61:
7f:15:ba:ea:d7:42:2c:8f:0c:cf:5c:93:a4:f9:e7:c7:72:7f:
64:c5:9f:13:d5:f0:34:e0:99:19:71:05:d7:9c:09:33:8d:29:
8b:ef:03:02:c6:ee:39:b6:e5:0a:b4:96:b2:79:af:0a:7e:24:
26:b1:39:d3:3a:50:40:26:f2:10:af:02:05:38:7e:75:86:6d:
f1:90:f0:83:6e:d4:c9:7c:7c:27:26:33:03:d0:63:cc:5d:af:
2d:c4:e7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:18 2024 by rpki-client on console-fra.rpki-client.org