Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C53152946BE911EEBB503C454AD9E6FC.roa
File: C53152946BE911EEBB503C454AD9E6FC.roa (raw, json)
Hash identifier: 5xAhdQsV6tUOBSRgL+/8G1TA9ThxFrTD5VsQjSysH1k=
Subject key identifier: D7:75:24:E6:BB:EC:03:20:D4:C0:96:3B:5C:C8:9E:56:D3:EE:AD:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3EA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C53152946BE911EEBB503C454AD9E6FC.roa
Signing time: Mon 16 Oct 2023 06:03:48 +0000
ROA not before: Mon 16 Oct 2023 06:03:44 +0000
ROA not after: Mon 30 Sep 2024 06:03:44 +0000
asID: 139265
IP address blocks: 156.225.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16036 (0x3ea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 06:03:44 2023 GMT
Not After : Sep 30 06:03:44 2024 GMT
Subject: CN=652cd243-42c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:0c:56:bd:8f:19:ff:22:54:64:39:3c:f0:
09:bf:85:e4:b7:c5:10:87:17:93:73:cb:39:08:9a:
39:15:5c:44:eb:04:f3:72:8f:e5:31:ae:bc:88:c6:
53:b1:dc:de:29:4b:a8:73:d3:58:8c:7b:24:45:ba:
79:e9:b8:39:5a:8c:f7:aa:fe:ee:06:3b:39:a3:19:
4c:f6:cc:fe:60:d0:1a:fd:a4:94:bf:f3:17:25:3e:
77:65:41:d6:51:6c:5e:1c:78:79:87:6c:1a:65:00:
c3:3e:0d:2f:e8:a0:a3:97:87:96:73:2c:86:d0:bd:
7d:11:81:1a:bc:4f:16:e3:f3:cb:46:4f:b4:63:a0:
8a:70:86:d3:02:88:e3:9a:69:8e:60:a9:20:07:be:
6b:a4:d2:3a:ba:03:06:20:13:b3:e0:9b:08:a0:14:
90:dc:bc:ae:32:ee:44:8e:4b:fa:cf:6e:ab:0b:95:
a2:48:13:dc:24:0e:7e:07:fd:0f:f7:3e:86:ee:df:
11:29:1a:d6:4b:0b:c9:d4:49:25:98:de:e0:7a:13:
59:8e:a6:44:6f:76:ed:91:88:76:81:ad:8d:be:86:
f8:f7:ae:bf:0f:33:17:07:47:b5:a2:34:63:a1:00:
89:0a:40:bb:18:7f:76:64:20:30:e2:dd:19:fb:94:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:75:24:E6:BB:EC:03:20:D4:C0:96:3B:5C:C8:9E:56:D3:EE:AD:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C53152946BE911EEBB503C454AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.2.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1f:49:ff:d0:db:79:a9:49:a0:d8:b7:56:4b:0c:8d:24:a1:
75:81:00:86:0d:42:7b:6b:ac:49:d6:b4:c3:28:20:4d:69:ff:
a8:07:0d:bc:f8:59:80:f2:e2:b9:72:0e:c1:0d:fc:4c:ec:3e:
8f:14:c1:03:99:89:5d:db:07:f7:e3:ef:f0:5a:e3:4d:4e:4f:
3d:df:8f:2b:36:52:31:dd:b6:af:05:2c:6a:76:cb:5f:71:f8:
16:8b:10:ca:4d:81:f8:d3:b7:0b:22:a8:59:29:1f:ce:4f:59:
9a:b8:16:22:26:8f:39:5c:96:0f:da:43:1d:5c:b4:22:22:34:
f9:09:46:ab:87:a4:91:f2:26:ba:a0:f7:e3:a7:a6:ec:06:63:
83:93:ff:5b:16:56:52:e6:f2:4b:53:54:a9:ba:e6:2f:4b:4d:
e2:b9:a7:d6:66:c6:b4:ef:68:59:ab:2f:37:86:4f:44:06:66:
e6:76:ff:e6:11:c1:ca:17:ea:6f:53:ec:1c:f5:0c:ad:30:e9:
e7:54:6e:c8:15:0f:34:69:4e:eb:2a:af:29:88:57:96:63:3a:
d0:05:4e:8c:f5:5a:04:bf:cc:82:9a:d4:99:f7:8b:7c:b6:3b:
8d:1c:0f:23:da:fd:ad:91:d5:0f:93:e0:e6:75:71:58:59:9b:
c6:04:88:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org