Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB95D7CAFE1911EEB7D8E267017001B1.roa
File: AB95D7CAFE1911EEB7D8E267017001B1.roa (raw, json)
Hash identifier: wpZiHu0jkFgu2W+yt0I3OFO/MhX2/fev5w5VEotqODo=
Subject key identifier: D4:27:16:E9:4D:C2:0D:9E:2B:6F:DA:85:3E:D4:A4:11:4E:5A:9D:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8374
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB95D7CAFE1911EEB7D8E267017001B1.roa
Signing time: Fri 19 Apr 2024 06:54:30 +0000
ROA not before: Fri 19 Apr 2024 06:54:27 +0000
ROA not after: Wed 22 May 2024 06:54:27 +0000
asID: 20473
IP address blocks: 156.240.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33652 (0x8374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 06:54:27 2024 GMT
Not After : May 22 06:54:27 2024 GMT
Subject: CN=66221526-fc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5e:3e:6e:58:40:b2:c2:dd:94:74:f4:df:49:
db:57:f2:50:37:ed:30:b1:e7:72:7e:6e:95:f9:78:
0e:c8:db:c5:85:da:d8:83:af:7d:8a:41:3e:53:3e:
c0:8c:dc:a3:aa:83:45:91:84:c3:c2:92:f2:ea:66:
d1:03:1d:81:07:64:c0:11:55:2d:09:0d:c7:e8:a4:
6e:f8:d8:c2:78:fa:2d:cd:f0:8a:22:d2:49:e0:b9:
b8:0d:c7:a3:9c:5a:7e:e4:18:b7:8c:6a:93:68:e2:
78:ce:b2:25:35:ce:78:f5:03:07:63:89:b0:42:9a:
da:2b:b6:d5:f8:ed:ce:28:94:44:36:2b:88:59:b8:
9f:de:b9:5c:3b:75:ab:80:96:5b:e6:c9:92:c8:fd:
3d:54:70:02:de:e0:4f:56:56:1d:b6:d0:2a:94:8c:
3d:19:e4:1f:28:13:34:9e:57:7b:93:e6:66:99:4d:
0a:ed:1c:55:5c:97:3d:f3:84:da:82:e2:b9:1a:bc:
56:7d:5e:19:55:b8:75:90:5e:35:d6:ba:65:d8:aa:
55:da:0e:e6:e2:1d:1f:d9:f7:44:98:6a:76:e8:64:
ac:48:f5:5e:12:50:d9:40:f6:6e:03:7f:f1:5a:a4:
b8:9d:8a:02:6e:3d:9b:2a:6c:74:51:31:ed:31:c2:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:27:16:E9:4D:C2:0D:9E:2B:6F:DA:85:3E:D4:A4:11:4E:5A:9D:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB95D7CAFE1911EEB7D8E267017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.96.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:36:db:83:a7:38:b0:9a:d8:06:a4:16:37:a1:15:58:a1:53:
32:87:17:44:5b:47:d6:b6:99:75:0c:8c:00:47:e0:d4:96:3b:
aa:42:12:1e:a7:53:49:fa:08:ca:1c:d9:22:25:cb:fb:0c:03:
8e:1f:64:d0:a5:95:f8:91:73:5a:6b:10:6a:20:1a:7b:f0:e4:
65:c7:c2:36:a6:6e:c8:bf:7a:ba:f3:29:8f:c7:1a:3c:25:9a:
19:b3:8a:8f:78:6e:7b:b4:a2:38:0c:d8:cc:3a:e1:29:02:03:
05:21:7f:7c:2a:0f:c5:2f:9f:ff:31:94:ec:0c:66:25:12:b9:
8b:93:42:2b:cb:b5:1a:8f:5a:38:50:c6:2b:37:26:b2:ae:b7:
29:7c:9f:f8:84:88:a0:32:9b:c4:97:6f:6e:46:23:f7:34:58:
fd:f9:4b:33:aa:d7:1b:7b:5c:7a:2e:16:da:85:bf:36:a9:45:
e8:25:b7:c0:01:c3:ce:5a:57:e9:c1:12:f8:6d:b2:90:19:b2:
d1:8f:fc:21:a3:c2:04:bb:c9:9c:a7:80:0d:eb:55:1f:f3:0b:
8f:95:da:77:93:eb:c3:8e:e7:d1:55:c8:89:c3:17:4a:b1:97:
f1:7e:c8:c3:95:75:ef:be:97:fa:63:cc:be:f7:39:84:f4:26:
22:da:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:14 2024 by rpki-client on console-fra.rpki-client.org