Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAB23058F00011EEA2B4F78F775412E6.roa
File: CAB23058F00011EEA2B4F78F775412E6.roa (raw, json)
Hash identifier: KR1EOMz2Zf18NVrd24ggOGrfL8DtZ0/OCRu8CGWJsZ0=
Subject key identifier: B1:5C:71:78:CE:F0:AA:17:0A:AD:B3:F4:56:B4:BA:AB:8F:6D:5B:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8121
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAB23058F00011EEA2B4F78F775412E6.roa
Signing time: Mon 01 Apr 2024 08:21:09 +0000
ROA not before: Mon 01 Apr 2024 08:21:05 +0000
ROA not after: Thu 10 Apr 2025 08:21:05 +0000
asID: 135419
IP address blocks: 156.236.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33057 (0x8121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 1 08:21:05 2024 GMT
Not After : Apr 10 08:21:05 2025 GMT
Subject: CN=660a6e75-22d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:f3:5c:53:ef:a8:2f:3b:62:6f:0f:1f:80:
76:67:eb:ff:bf:8a:a1:e4:dc:e4:92:ea:8d:e7:bf:
20:36:91:1b:19:d7:9c:c4:f7:06:b3:25:e3:ee:ca:
b7:7b:a1:6d:00:a6:14:81:7d:56:a9:57:55:1b:8f:
28:9a:35:c0:4f:51:80:43:4b:95:83:7d:9b:07:2f:
9a:6a:94:1d:3c:3e:cd:ce:4c:f1:ea:31:eb:7c:0a:
22:2a:ac:42:ee:33:15:28:0a:ab:c7:c3:14:b4:0f:
a9:10:14:f1:5a:5e:59:d0:62:45:f9:59:3f:24:f8:
5f:31:36:06:b2:83:ef:d4:0b:0d:7d:98:24:e7:d0:
e5:5e:03:84:91:1f:6b:87:41:ba:4a:20:a0:41:3a:
ca:e9:85:10:ce:bb:fb:a2:85:ed:8c:15:2e:a9:92:
95:57:1a:8b:af:a7:18:b8:48:d5:d0:80:ed:b7:04:
6f:c2:fd:4e:a3:fe:d6:f3:1d:e0:56:e4:e7:27:b1:
e9:cc:e4:5d:1e:08:dd:d3:77:a2:c2:ae:8f:69:0b:
68:66:f3:c5:10:7a:d8:47:bf:29:19:93:b5:af:8b:
1c:90:2e:93:44:da:03:8e:7b:04:7f:62:6e:ea:46:
64:4f:e0:31:17:ab:c3:3a:8e:14:d9:3e:97:d2:e7:
33:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5C:71:78:CE:F0:AA:17:0A:AD:B3:F4:56:B4:BA:AB:8F:6D:5B:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAB23058F00011EEA2B4F78F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.29.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a8:0c:d4:1b:76:79:e7:04:ef:c5:9d:05:41:d6:a7:b3:09:
3e:30:ea:47:d6:ea:de:96:c6:ce:7f:1c:57:66:fa:78:b0:f4:
49:1a:31:f0:67:e4:83:76:b2:ca:b9:fc:7e:ec:99:9b:8d:a3:
00:e3:3e:31:5b:3c:a6:06:71:9a:a9:9c:06:36:6a:65:01:4a:
0d:9c:7e:fa:d1:fb:c0:ea:3b:a2:02:fa:dc:fb:5a:b6:cc:86:
3d:d5:0a:cc:68:68:17:76:2a:db:59:5f:33:fa:cc:cc:42:e2:
14:66:48:1c:6e:c9:5a:69:b7:6b:7e:04:ad:23:63:04:cd:dc:
e9:c1:31:0b:5f:18:21:a9:a3:31:af:59:a6:e0:b5:22:a1:8b:
3d:7b:53:c2:91:c0:37:12:ee:db:4d:37:17:78:6b:37:b9:19:
b9:ab:a4:23:a0:91:98:43:9f:6c:11:f7:44:41:b9:ca:b2:51:
33:97:a9:a9:cc:81:5c:f7:4a:36:cd:ca:ca:6c:77:a5:83:d7:
26:62:64:50:56:d0:d1:43:98:af:1a:1a:fd:8d:f2:6e:8f:3f:
b0:ff:7d:3e:4c:d7:19:3d:ac:c3:9d:f5:bf:b5:06:16:5b:fd:
e2:6a:ee:e3:b8:42:0a:e2:b8:ac:4e:00:73:cf:52:ac:47:00:
c2:bd:a3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org