Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5509E9EA62D11EEA388699C775412E6.roa
File: E5509E9EA62D11EEA388699C775412E6.roa (raw, json)
Hash identifier: MoGYXtiD0VMqDXSDML1pyoi+nzyFBR3MYg7wmp4YitU=
Subject key identifier: 18:73:C3:DB:88:89:84:95:26:51:DA:74:2F:A6:E5:19:DE:81:9C:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5955
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5509E9EA62D11EEA388699C775412E6.roa
Signing time: Fri 29 Dec 2023 09:37:35 +0000
ROA not before: Fri 29 Dec 2023 09:37:31 +0000
ROA not after: Mon 04 Nov 2024 09:37:31 +0000
asID: 5065
IP address blocks: 156.229.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22869 (0x5955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 29 09:37:31 2023 GMT
Not After : Nov 4 09:37:31 2024 GMT
Subject: CN=658e935e-6236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:f2:35:9d:3d:f9:10:4a:67:cc:6b:ea:0d:
61:34:1e:75:e1:88:70:92:30:f7:8b:52:38:93:a0:
67:56:cd:11:20:48:b5:9e:73:a4:15:03:5b:e9:b8:
3b:e5:07:92:73:42:04:a9:4d:3d:5f:64:3d:c5:6f:
66:0e:cd:ec:ff:2e:d9:d3:45:13:5b:c4:04:d1:7d:
19:35:46:ab:62:19:c0:25:de:0c:34:88:21:56:83:
30:2e:51:9b:85:d6:c8:f9:27:a0:ee:2b:13:96:bb:
1d:d6:b0:46:07:ca:34:ec:6a:f8:bb:7b:30:e5:12:
f1:65:e3:fe:f5:a5:e8:c5:56:29:7b:78:ef:16:65:
95:e4:50:3f:95:43:56:2e:cf:4c:41:10:de:74:4f:
70:2a:3f:47:8a:59:ff:50:29:de:60:e6:ee:d6:90:
a9:8e:e9:b7:8b:47:0a:c8:7c:ef:64:a4:3a:1f:44:
50:b6:09:06:74:c4:c6:31:f9:ff:ca:e0:87:a2:88:
8b:ff:f3:73:3e:40:3d:87:f6:48:30:58:08:8a:d2:
66:86:53:8f:72:8b:e3:e3:50:f1:44:f4:47:dc:f9:
7b:00:e3:0b:e1:73:5e:12:29:7c:72:50:0d:dd:5f:
b8:c6:f8:b2:d6:fc:30:4f:da:f4:f4:5d:db:9f:b7:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:73:C3:DB:88:89:84:95:26:51:DA:74:2F:A6:E5:19:DE:81:9C:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5509E9EA62D11EEA388699C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.58.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:8b:b7:21:06:4f:97:66:58:eb:57:6b:6f:db:4d:4c:e2:3b:
84:e8:58:09:c5:f4:6b:65:0d:12:38:fe:fb:a9:37:58:69:f5:
49:b2:eb:c5:36:a0:a0:78:c1:89:3f:96:7e:b0:1d:96:14:40:
2d:16:7d:67:6e:57:52:8d:3d:64:bd:3c:ee:ed:57:5e:4a:33:
7c:89:b0:5a:67:73:2e:d3:65:9a:d0:7c:54:e7:13:b5:55:a7:
5c:d4:c6:8b:d9:0f:1b:88:de:3d:3e:33:79:3c:35:42:48:ac:
5b:d7:e5:04:8d:42:df:13:75:cd:c4:f0:00:07:9b:c2:6c:7a:
34:e7:86:91:f9:1b:9c:01:80:e2:34:82:63:f3:0f:8c:e4:24:
fc:be:f6:9b:d5:24:88:5a:24:10:93:98:c4:b4:7c:fe:e6:16:
27:87:bf:94:35:b6:48:e9:65:cf:9c:b6:45:b7:01:86:ce:fc:
e8:5d:68:19:ee:e6:40:ba:65:6f:49:dd:11:e1:3c:c2:ab:36:
71:c0:72:a9:ef:0a:8f:c5:97:7c:8c:8e:7a:7e:96:40:06:a3:
6d:8c:ca:47:6d:68:71:0b:02:6e:bb:8f:b2:29:79:4b:a9:99:
54:c7:e2:2f:a1:a1:72:e7:b4:62:64:a9:74:90:de:08:e9:ef:
8e:1f:d4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:25 2024 by rpki-client on console-fra.rpki-client.org