Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5E1E4FA1D1011EFB75A39347DDC24C2.roa
File: C5E1E4FA1D1011EFB75A39347DDC24C2.roa (raw, json)
Hash identifier: BupWsEMAUA4mnZocI9few58TrwKFTc/wVEe3PfbuNAw=
Subject key identifier: 8E:D2:D3:37:09:45:98:B7:6A:8C:1F:C7:19:89:28:CA:5E:C7:9D:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8CB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5E1E4FA1D1011EFB75A39347DDC24C2.roa
Signing time: Tue 28 May 2024 16:38:55 +0000
ROA not before: Tue 28 May 2024 16:38:52 +0000
ROA not after: Sat 07 Sep 2024 16:38:52 +0000
asID: 138195
IP address blocks: 156.241.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Sep 2024 16:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36022 (0x8cb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 16:38:52 2024 GMT
Not After : Sep 7 16:38:52 2024 GMT
Subject: CN=6656089f-5c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:90:8e:22:d0:02:a5:1f:73:8c:a2:d1:e2:
7f:ae:48:30:00:d4:b1:b1:83:f8:78:8d:13:27:bd:
6d:e3:27:a5:af:be:a7:c4:6e:3e:3b:66:cc:3a:92:
a4:10:16:4b:61:ee:ee:be:bb:9a:12:e2:62:6f:fd:
0b:ca:6d:7f:24:c1:83:0c:72:12:ae:b6:cb:45:59:
c1:49:37:fc:4a:ed:a2:73:89:e7:a1:f4:ed:fc:f6:
4a:8d:94:60:76:f1:14:da:be:5f:d6:7b:06:90:9f:
e1:6b:a4:f2:55:e2:30:ce:c2:29:c9:4d:1a:53:7e:
50:47:cd:ae:3a:2f:9b:18:f4:4f:dd:f7:0e:2b:7d:
73:f8:d2:ff:00:f8:b3:7e:50:9f:6d:b0:61:92:52:
2c:65:f4:07:5a:e6:82:5f:f6:39:ff:63:23:fc:90:
56:4a:ed:10:a1:e2:e5:a6:65:23:7a:2c:13:53:20:
89:8f:46:c9:23:c8:0b:1f:49:18:55:22:f9:69:73:
5a:5e:75:ec:46:09:fc:cf:69:e5:ae:65:b3:9d:e0:
52:ac:c5:e4:c8:40:fe:d5:1d:39:2b:95:59:2c:f1:
08:a4:97:bd:71:a0:f9:be:69:29:bc:2e:b9:bf:c7:
fa:b4:0c:ae:78:fa:de:db:b0:35:54:78:e8:a7:a6:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D2:D3:37:09:45:98:B7:6A:8C:1F:C7:19:89:28:CA:5E:C7:9D:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5E1E4FA1D1011EFB75A39347DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.16.0/20
Signature Algorithm: sha256WithRSAEncryption
21:40:2c:8e:41:cf:b5:c2:45:ac:e2:72:fa:93:01:e7:47:30:
d8:ad:50:30:c1:fb:de:0a:1b:38:19:9e:60:2f:fa:ae:a3:24:
89:59:ed:9b:7e:91:9e:72:07:2a:80:e2:be:c2:98:91:cd:d4:
b4:75:b7:97:bb:22:5e:72:34:52:4e:b8:03:d7:fd:a3:3c:a4:
ba:17:eb:55:f7:3d:c4:34:73:fd:80:c3:97:e3:e9:29:15:73:
df:83:09:4d:48:a3:d0:1a:64:dd:9d:1c:61:00:bc:52:0f:7c:
14:6e:5e:23:8e:9f:92:4b:db:be:a5:bc:68:13:6d:05:5a:c9:
66:0a:90:44:5d:a4:29:8e:e2:04:e2:9e:06:38:ef:62:94:c9:
ac:da:6c:52:d1:70:c8:c1:b5:31:ba:65:24:87:ed:c1:88:c0:
d9:2f:0b:64:ac:05:10:16:c9:33:3b:48:b2:ca:b8:97:5a:e6:
e3:51:05:19:f7:8f:00:0f:bb:3f:c5:c3:0a:a9:0d:76:91:90:
2d:d4:86:e9:ed:01:52:6f:93:9f:06:12:66:32:b1:48:00:3f:
86:8e:61:8e:25:24:24:a6:00:e0:2a:b2:21:61:4e:37:9a:0b:
26:3f:a9:2e:58:3c:f4:06:92:06:73:dd:c7:06:8c:a1:14:76:
18:19:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:09 2024 by rpki-client on console-ams.rpki-client.org