Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E14A3F7A5F1511EF9988F58A762E951A.roa
File: E14A3F7A5F1511EF9988F58A762E951A.roa (raw, json)
Hash identifier: tkM2NWfifPCYGhSbJXiBmKxtQO3ySz6K8sSZlln7wiM=
Subject key identifier: 05:A6:0E:26:76:17:04:DD:3B:61:23:02:61:BA:EF:DD:39:BA:40:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA5A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E14A3F7A5F1511EF9988F58A762E951A.roa
Signing time: Tue 20 Aug 2024 17:01:45 +0000
ROA not before: Tue 20 Aug 2024 17:01:42 +0000
ROA not after: Sun 01 Dec 2024 17:01:42 +0000
asID: 5065
IP address blocks: 156.229.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43610 (0xaa5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 17:01:42 2024 GMT
Not After : Dec 1 17:01:42 2024 GMT
Subject: CN=66c4cbf9-528c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:7a:c3:dc:12:61:bf:1b:e4:fe:22:0d:44:
7e:52:5e:fa:8a:81:4e:78:dd:ee:8b:ed:d6:28:73:
ac:3e:fd:fd:20:5a:0a:e6:57:d4:f9:5d:18:6a:51:
b2:e4:3a:e8:6c:65:88:57:77:3f:13:c3:1f:c7:c3:
06:f7:6e:77:5d:eb:39:a9:64:3d:9f:be:28:77:87:
3e:45:e6:62:60:c9:b9:9f:53:46:50:80:73:19:c8:
4b:9d:ac:41:70:39:20:96:ab:f3:2f:9b:e9:8d:94:
9b:48:c8:eb:24:fb:82:5d:5d:c2:02:1b:f5:12:37:
3a:35:f7:a5:fd:92:a3:e0:c1:b3:30:8d:f5:e3:7b:
ce:fa:40:1b:5c:53:55:a6:f2:73:2b:42:62:9d:ef:
bb:02:1c:c7:1a:24:20:bc:21:8b:60:7f:41:37:e8:
6d:92:86:47:19:fe:3b:ee:4f:11:9c:f9:3f:28:a3:
40:6a:07:3f:f9:c8:9c:ff:74:09:d5:68:c9:ea:8f:
90:8a:c6:50:52:21:95:87:6c:6c:e3:19:1e:39:66:
de:6d:6f:f6:23:b2:66:9c:d3:0d:fc:21:8c:07:0e:
4d:fe:d8:c2:99:7c:7c:18:8a:c1:27:ba:87:f3:4f:
d8:1c:fb:e6:a4:7d:11:6c:c8:b7:ef:fa:57:7a:ef:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A6:0E:26:76:17:04:DD:3B:61:23:02:61:BA:EF:DD:39:BA:40:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E14A3F7A5F1511EF9988F58A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.53.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e3:12:c5:ec:b3:db:8a:01:d6:86:fe:cf:f1:f0:69:24:2f:
1f:db:6c:4d:87:5f:99:6f:7b:af:dc:d8:29:ce:70:d3:b4:83:
1b:07:4a:f0:d5:5c:1f:67:fc:d7:bd:4e:24:e5:c2:75:5f:55:
b9:5b:ce:ed:0c:6d:74:6b:3d:b9:4e:b8:af:a0:63:c0:04:61:
e0:f4:80:a0:86:a7:2f:f5:05:cf:a7:1e:27:24:96:60:e1:0c:
2e:85:37:23:db:cc:cb:a1:0b:20:41:1a:ef:3f:2f:27:d9:75:
00:8b:7e:5f:68:95:5d:79:23:5b:44:b7:4e:dd:3b:2c:53:a7:
e3:cf:fd:d5:9d:1d:7b:f6:84:b1:30:58:b4:f0:d1:52:f4:61:
d1:5d:55:fc:08:7d:03:f9:c6:50:b4:2d:f3:c1:fb:55:11:92:
4d:7e:4f:89:3e:25:26:dd:2f:78:bb:f2:a2:a6:87:4f:1c:40:
9d:99:47:0c:70:cb:42:74:c8:74:8b:e1:14:b6:f9:22:7a:2c:
1c:c3:4c:8d:b2:c2:e2:be:dc:cb:3e:db:7f:29:4c:50:d7:80:
b9:f1:73:28:0a:0e:77:6b:ce:88:f7:eb:da:cb:ab:e3:f8:e4:
6e:9e:44:bb:d0:ff:9c:3d:aa:6c:cd:9e:17:94:b2:7d:29:79:
48:27:27:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:51 2024 by rpki-client on console-fra.rpki-client.org