Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E42514A0269911EE953542704AD9E6FC.roa
File: E42514A0269911EE953542704AD9E6FC.roa (raw, json)
Hash identifier: XeyxboAURtEjt8Zx94rFbAhxc49cXOBuyJyyrLXyc+Y=
Subject key identifier: E4:DC:0D:AA:58:45:52:17:05:80:0A:10:FB:81:4E:3F:C2:C1:0D:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 30FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E42514A0269911EE953542704AD9E6FC.roa
Signing time: Thu 20 Jul 2023 01:08:10 +0000
ROA not before: Thu 20 Jul 2023 01:08:06 +0000
ROA not after: Thu 13 Jun 2024 01:08:06 +0000
asID: 5065
IP address blocks: 156.235.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12538 (0x30fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 01:08:06 2023 GMT
Not After : Jun 13 01:08:06 2024 GMT
Subject: CN=64b888f9-15e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:d5:53:e8:de:4b:4b:be:ba:14:7f:f0:01:
62:1a:6e:a6:b8:c7:6d:1d:e9:15:4e:9d:4b:36:ed:
ca:a4:ad:3a:94:d7:b6:c9:20:b3:eb:72:f6:8b:b0:
15:4c:d1:08:0d:3d:69:95:e5:ba:62:6f:9a:10:de:
19:0f:9b:30:d7:f1:da:84:70:f9:72:1c:48:a1:1d:
5b:ff:94:3b:1e:f9:4c:e4:94:df:16:ba:f1:dc:f8:
4d:00:2c:f9:62:e8:fa:39:cd:74:f8:cc:7b:60:4d:
3e:b6:82:75:7a:32:2d:be:3a:a6:87:dd:d7:68:f2:
c0:41:b4:67:cd:47:ac:4d:47:2a:60:4d:03:7b:5b:
d9:19:8d:74:b0:3f:eb:f3:9d:45:7f:f8:e7:6a:db:
4d:2b:77:1c:1e:02:a5:fe:a2:f0:df:92:75:d2:75:
0e:98:75:f0:29:c2:2b:85:fb:64:41:35:fe:14:93:
54:a6:e7:de:50:dc:76:8f:cb:ea:0a:df:43:e1:8b:
a0:be:77:c1:07:13:0e:c1:7b:48:65:89:05:9b:27:
81:ee:9a:91:d3:75:94:7a:e0:b7:fe:f5:5c:0d:2d:
e1:bd:e0:f4:04:a0:b8:10:5b:92:5a:d6:4e:96:a0:
87:58:d1:5f:9d:6f:27:0a:d2:70:65:91:e8:fc:38:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DC:0D:AA:58:45:52:17:05:80:0A:10:FB:81:4E:3F:C2:C1:0D:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E42514A0269911EE953542704AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.20.0/22
Signature Algorithm: sha256WithRSAEncryption
21:8d:36:e8:98:26:78:00:bf:e1:96:2b:95:8e:c6:91:e9:94:
fd:ae:af:b9:54:72:20:bb:1c:aa:76:40:8a:4a:87:72:2b:24:
7d:f8:cf:bf:50:2b:6c:e1:9d:6c:de:27:8a:d4:26:fc:af:0d:
2f:ed:38:f1:69:04:63:79:72:31:b1:9d:a1:3d:65:12:00:47:
70:a9:c8:2a:f4:c1:15:d6:25:f3:3d:ac:3d:17:ca:98:ae:ff:
14:5b:e0:0b:3b:9a:62:42:e1:6a:83:29:2f:8d:8e:bf:1f:ff:
52:d4:5b:1d:e9:08:17:bb:f0:7f:67:07:0a:f4:71:93:ed:16:
3a:fd:6d:b5:8c:d5:0d:47:39:6f:96:11:7c:ff:86:5d:f8:2a:
7d:e3:c1:8d:d5:35:9f:cc:0f:78:a8:6d:32:ff:cf:59:47:38:
b7:9a:d4:d1:f8:94:99:3f:cf:00:d3:0f:8f:52:67:64:01:8c:
69:c1:8d:f1:a5:e8:d8:e9:14:ef:7d:50:d0:38:47:f6:cd:5a:
2f:e8:7b:13:f1:51:2e:63:fc:ce:e2:89:7c:9a:d2:72:48:11:
dd:39:09:6e:7b:20:4e:94:7e:e6:bf:3d:4f:fc:04:da:c2:43:
99:e9:f1:90:bd:50:a7:b4:3f:1d:b5:06:8e:7d:3b:a7:ce:54:
0a:51:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:25 2024 by rpki-client on console-fra.rpki-client.org