Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85B3C086A62F11EE96625D9F775412E6.roa
File: 85B3C086A62F11EE96625D9F775412E6.roa (raw, json)
Hash identifier: 7UmwJnuWPKeoJN52ZI1gyaaIcy65t/c4JMvnubov/qM=
Subject key identifier: AE:82:6A:54:48:B0:77:04:1B:15:67:0D:30:28:4F:D6:05:16:EF:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 595F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85B3C086A62F11EE96625D9F775412E6.roa
Signing time: Fri 29 Dec 2023 09:49:13 +0000
ROA not before: Fri 29 Dec 2023 09:49:10 +0000
ROA not after: Mon 04 Nov 2024 09:49:10 +0000
asID: 5065
IP address blocks: 156.229.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22879 (0x595f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 29 09:49:10 2023 GMT
Not After : Nov 4 09:49:10 2024 GMT
Subject: CN=658e9619-70b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:4e:3c:e8:f8:0e:cc:79:fe:f1:11:26:60:
f1:fb:99:27:2c:1b:75:15:05:5e:a0:d3:72:86:6d:
01:98:38:38:6b:ca:e3:2e:b6:c8:32:b3:8b:fe:7b:
5a:e4:d7:8c:63:a6:82:5a:54:23:d9:e1:82:c3:c5:
4f:6e:f5:17:ef:c3:10:86:ca:50:82:61:92:54:f0:
b4:95:a3:41:76:7d:f1:52:a5:f9:a1:55:03:a9:78:
df:d9:23:9f:c6:80:aa:01:be:f2:6d:d4:90:95:d8:
77:1e:31:23:14:6a:04:86:a4:8a:19:79:a3:b7:ce:
b1:3a:3c:01:4c:fb:a1:96:b4:a6:bc:3a:e1:c4:4d:
cb:61:18:5d:d3:23:ca:68:59:bb:c5:49:1b:9f:dd:
c3:7a:72:df:f2:16:89:df:9f:f3:6b:d1:f5:b4:8e:
96:75:c7:1c:a9:33:a5:84:37:08:1a:bc:7b:fd:26:
83:1f:b5:8a:9c:34:ca:74:1e:eb:ec:a2:34:93:ad:
31:ff:21:f1:7e:ab:90:03:e1:37:bb:3f:12:bb:dc:
e2:9b:88:8a:2c:a0:93:6e:23:7a:25:4b:6b:78:d4:
86:dd:fe:78:63:eb:cd:9f:c9:78:64:7d:9a:4e:ea:
cf:e6:45:be:5a:e1:65:1a:46:08:74:a2:5e:52:38:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:82:6A:54:48:B0:77:04:1B:15:67:0D:30:28:4F:D6:05:16:EF:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85B3C086A62F11EE96625D9F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.52.0/24
Signature Algorithm: sha256WithRSAEncryption
83:71:9f:ca:47:2b:26:82:5b:c9:74:fa:33:1b:0c:21:b7:8d:
3c:98:7d:2b:d4:95:16:76:55:21:f1:f1:1e:b5:c6:1c:f4:ff:
31:c2:2c:42:1a:c1:a8:c3:db:9b:2a:7e:26:81:b8:d1:aa:76:
65:45:87:46:e3:be:83:77:c0:cb:98:4c:ba:e6:a2:e1:ea:b1:
f9:b2:69:be:b8:3a:7f:86:39:45:c7:d9:be:98:c6:62:a6:10:
11:a2:b1:eb:25:92:86:6c:6b:ec:63:87:de:04:9b:c3:80:db:
24:10:11:39:d2:ff:f3:58:32:db:d8:3b:59:bf:91:62:b1:4c:
d9:77:55:40:2d:34:ad:58:53:48:c6:bc:b7:44:bf:9b:11:45:
e9:04:17:98:05:ab:e6:4e:13:d6:1c:e8:70:dc:92:9d:01:64:
d0:a5:94:24:ff:fd:fa:2d:2d:b0:e9:b2:81:be:76:c6:8d:40:
ee:4f:2c:3f:d4:da:d6:91:ca:98:1e:c1:e4:f0:18:52:ad:da:
1b:aa:78:ea:5e:1f:97:e8:43:1e:f8:df:95:ef:a8:e0:2f:e2:
1f:7d:3e:02:ed:38:88:d2:5e:df:ed:2b:76:0f:f4:c1:8f:8e:
1b:03:ff:aa:1f:18:8e:20:d8:e7:12:e5:ca:a6:d3:b0:94:34:
d9:e0:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:19 2024 by rpki-client on console-fra.rpki-client.org