Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE8C9D84D13B11EEBB46AB5E775412E6.roa
File: AE8C9D84D13B11EEBB46AB5E775412E6.roa (raw, json)
Hash identifier: B3WfXIS5O4NQa4Wp1R+ssJeyAzK0UrRE9KFDkIXm2D4=
Subject key identifier: B6:6E:F3:AA:AE:E8:A2:C4:B5:25:62:AC:A1:F7:E0:6C:F8:3B:92:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 72BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE8C9D84D13B11EEBB46AB5E775412E6.roa
Signing time: Thu 22 Feb 2024 04:34:36 +0000
ROA not before: Thu 22 Feb 2024 04:34:32 +0000
ROA not after: Mon 24 Feb 2025 04:34:32 +0000
asID: 137996
IP address blocks: 156.224.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29373 (0x72bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 22 04:34:32 2024 GMT
Not After : Feb 24 04:34:32 2025 GMT
Subject: CN=65d6cedc-a4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:74:2e:2e:0b:15:f4:42:ab:08:6a:56:98:
d1:52:1c:66:6e:c2:36:94:73:3d:d7:d8:6a:e2:7f:
15:02:9a:f4:87:b3:8e:69:02:2e:34:99:5f:92:a6:
6d:71:2f:3d:e6:8f:ea:89:73:8b:67:1f:f1:e5:c8:
49:66:7e:e6:26:9b:b5:0d:ba:98:d1:f7:e0:9c:90:
4e:80:60:cc:fc:b1:ad:4d:f3:3f:82:06:3f:6a:f4:
dd:a9:b3:3a:79:a8:33:8a:9f:e7:e3:a9:30:c7:d6:
22:a9:a3:36:85:ad:14:92:79:9d:3d:3d:66:99:9b:
7e:91:13:03:5d:5d:89:c4:88:5f:15:5d:7a:10:42:
75:5b:1b:ef:9f:5b:b9:65:21:f2:34:4a:7d:aa:ac:
56:93:3e:b4:39:f7:0a:25:b4:26:0a:ca:3e:35:d0:
ea:9f:3e:fb:ea:ac:bf:eb:6e:b6:18:d4:5d:f4:8a:
e5:31:30:5f:3c:12:5d:67:5d:50:d2:63:e5:ea:11:
3f:24:77:33:8c:b5:0d:f2:62:80:46:01:6e:d4:d4:
55:7e:af:72:5d:a6:75:56:df:05:5f:e0:6f:50:7f:
25:9d:eb:b4:ab:e3:48:88:7e:62:ea:cb:c0:90:6b:
97:95:d1:d5:56:d3:2c:a2:e8:45:79:c8:b5:5a:70:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6E:F3:AA:AE:E8:A2:C4:B5:25:62:AC:A1:F7:E0:6C:F8:3B:92:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE8C9D84D13B11EEBB46AB5E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.5.0/24
Signature Algorithm: sha256WithRSAEncryption
10:89:73:3f:90:00:26:44:b8:d5:79:be:83:00:ce:50:b4:56:
fe:1d:81:84:ce:f0:09:f4:e7:b1:c0:a5:0e:ac:b4:5e:b2:0f:
85:4a:cd:2f:bc:93:32:3d:4e:c7:e2:b5:17:a9:bc:7d:a6:bf:
86:39:9a:2b:b8:41:06:91:bc:7c:26:24:4c:6a:b8:8b:f4:69:
ba:70:1c:fd:3f:3c:18:e0:fc:73:df:96:be:a5:4b:7a:0e:ff:
f2:5a:c8:a5:f5:a4:66:e6:be:e7:f1:fd:59:e0:0c:c6:1f:00:
32:34:ef:93:75:20:cb:5d:2f:de:c0:ec:b2:d1:8d:e7:40:2c:
d4:13:21:a0:01:ae:84:3c:4a:45:4b:48:b7:36:87:86:8f:4c:
5d:61:41:7e:2d:1a:15:d4:bf:5d:9f:9f:e0:ba:6b:bd:40:04:
26:aa:c0:22:02:37:20:a6:65:c2:c2:98:e3:15:f2:8a:c6:fb:
c7:db:a3:e8:ce:9a:a4:28:d2:84:19:de:64:f5:95:19:4c:cf:
a1:2b:b0:d2:92:c4:5e:11:8d:1e:b7:ef:06:35:50:ca:c7:9f:
9f:7c:bb:1d:91:fb:56:17:f0:8c:0c:a3:e0:a3:48:a4:0a:70:
11:6a:d7:b5:15:43:7c:27:62:c8:bf:c5:3e:4b:a3:58:35:7a:
54:96:51:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:00:50 2024 by rpki-client on console-ams.rpki-client.org