Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97786BDEA62D11EE8682FC9B775412E6.roa
File: 97786BDEA62D11EE8682FC9B775412E6.roa (raw, json)
Hash identifier: TJ57b/5sHT8NYgc8658CT4+z8wMBiFE71dWWvRT6xbU=
Subject key identifier: 77:CF:7A:47:95:44:63:07:2B:DF:84:BA:09:06:7C:B2:35:A8:B9:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5951
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97786BDEA62D11EE8682FC9B775412E6.roa
Signing time: Fri 29 Dec 2023 09:35:24 +0000
ROA not before: Fri 29 Dec 2023 09:35:21 +0000
ROA not after: Mon 04 Nov 2024 09:35:21 +0000
asID: 5065
IP address blocks: 156.229.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22865 (0x5951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 29 09:35:21 2023 GMT
Not After : Nov 4 09:35:21 2024 GMT
Subject: CN=658e92dc-198a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bc:12:15:00:e8:10:6c:53:23:e9:d4:b4:d5:
74:a1:c7:af:94:ea:3a:fa:f9:1c:72:33:38:c3:f9:
f5:7a:b1:88:74:55:c8:1d:05:fb:ec:88:31:12:a0:
c9:2c:d1:4f:a5:38:e7:3c:e6:8e:97:ce:0f:f6:24:
7a:a4:03:66:8d:de:d3:0d:a4:74:66:f2:d8:cc:03:
fd:85:95:1e:d4:1a:3e:7c:33:5d:ea:f4:59:ea:87:
fc:6e:3c:b3:75:08:7d:54:ba:ea:6b:ad:5d:fe:df:
e0:c1:bc:72:41:24:14:05:49:80:a2:6d:22:f7:93:
14:3c:a4:be:12:cf:5e:dd:64:d8:f6:37:df:1b:f2:
26:3b:c6:1c:45:04:cb:a4:6e:5e:b3:67:88:5e:33:
15:51:24:ee:a1:80:66:95:d0:66:b6:7d:ec:1e:94:
cc:16:23:04:b7:2f:10:f9:b2:f0:d5:36:8f:55:16:
f5:f5:38:36:ee:94:7f:72:30:8f:1e:f5:81:ef:c4:
af:c5:c2:14:13:5c:61:6e:9a:2a:69:47:f0:cd:b6:
2b:9e:fe:54:93:c5:04:e2:ed:78:33:79:66:ec:24:
9b:b1:3f:2c:9b:58:ec:39:9e:62:af:fd:e8:9c:dd:
0f:a1:07:2b:0a:85:c5:88:92:78:f8:1b:5b:9e:f9:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CF:7A:47:95:44:63:07:2B:DF:84:BA:09:06:7C:B2:35:A8:B9:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97786BDEA62D11EE8682FC9B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.60.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5b:f6:71:ef:fd:4e:0c:b4:b1:a5:3c:19:fc:39:c4:89:84:
9f:4f:1b:d2:56:5f:4e:d1:ec:af:b5:21:50:3c:92:d4:97:8e:
42:0d:67:86:b5:20:70:26:67:e9:0d:40:c3:fb:7a:c5:9f:fe:
38:05:a8:e2:23:09:5a:39:3f:40:8a:ad:ed:b1:6f:dc:88:66:
60:03:df:e1:f2:1d:b2:b2:3b:ef:3a:79:0f:c1:0f:46:95:cf:
05:bd:b7:39:ee:93:bb:8a:a8:0d:71:af:e0:82:3b:92:0a:79:
68:b3:3e:07:93:b1:12:c3:cd:af:9a:37:4e:a5:b1:03:1a:9d:
81:f0:24:8b:6b:af:50:ba:1d:05:1b:ed:d0:f9:23:99:87:ec:
59:16:4e:17:d7:03:6f:ad:7d:cc:9c:19:88:1a:81:db:61:68:
d9:0a:37:0c:79:8c:dd:7a:83:b8:93:98:c7:31:37:13:6a:bf:
24:02:5a:a8:24:58:7e:6f:be:b0:30:37:ea:dd:8e:e1:80:53:
d1:af:8b:70:c0:b9:a6:70:33:3a:06:81:8b:ba:01:01:0c:e2:
de:45:9f:b8:8e:88:8f:2e:56:4b:8b:05:60:56:28:b4:21:e4:
9d:05:5a:7e:ca:79:db:a7:3c:2c:55:b6:b1:0a:76:0f:03:35:
b7:06:a9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:48 2024 by rpki-client on console-ams.rpki-client.org