Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F90F299A141F11EFBBEF876B017001B1.roa
File: F90F299A141F11EFBBEF876B017001B1.roa (raw, json)
Hash identifier: 4Wg8NQQ/1OiSTKrZQP0vQyD2UBdPrf40wuxRdbiIg4c=
Subject key identifier: 4B:20:F7:98:D9:37:A9:F5:73:C2:DB:7B:9C:EB:22:6C:22:75:20:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8AA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F90F299A141F11EFBBEF876B017001B1.roa
Signing time: Fri 17 May 2024 07:35:03 +0000
ROA not before: Fri 17 May 2024 07:34:59 +0000
ROA not after: Thu 04 Jul 2024 07:34:59 +0000
asID: 44559
IP address blocks: 156.225.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35495 (0x8aa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 07:34:59 2024 GMT
Not After : Jul 4 07:34:59 2024 GMT
Subject: CN=664708a7-4f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:b9:0d:8d:ae:a8:da:4c:6c:5a:f9:85:b1:
d2:ea:4c:b4:93:64:97:6f:77:da:f1:b4:39:7d:a4:
36:8b:dd:e5:d9:bb:41:9c:bc:ff:ba:35:1e:51:78:
2c:ce:0e:91:28:8a:e1:16:e6:ed:fa:0f:4b:eb:6f:
34:17:76:ac:16:f1:c9:2d:bb:0c:69:e6:5d:d5:08:
47:5f:78:92:ed:e2:9d:68:3b:6c:a7:8d:44:38:b0:
9b:e2:67:e4:9f:3d:7f:8a:02:31:ff:16:c3:a4:43:
57:b8:e2:03:1c:3a:d6:2f:f3:70:3f:4f:ea:e5:48:
04:54:7d:1d:25:8b:84:9a:13:e9:b7:7d:a3:bf:22:
b3:0a:a1:4d:fa:a6:c3:29:c8:d2:2c:7e:05:c0:0f:
cb:9d:b4:40:10:f3:a7:86:1a:6c:0b:72:b7:0f:6a:
7c:a5:74:22:27:eb:18:09:2e:f6:c9:6f:bd:76:c9:
1c:b4:66:03:96:d5:7c:ee:c1:5b:7c:b8:f2:e8:00:
01:24:b7:68:0f:2a:5a:c0:ea:16:64:7a:55:53:f2:
93:07:69:80:32:ac:fc:f8:49:ea:91:99:c7:f5:1d:
03:d1:bf:b3:30:58:9a:3d:48:83:83:68:9f:e3:9a:
85:02:9c:a5:74:a3:83:48:d5:4f:98:a4:fc:15:fb:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:20:F7:98:D9:37:A9:F5:73:C2:DB:7B:9C:EB:22:6C:22:75:20:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F90F299A141F11EFBBEF876B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.5.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1a:ba:47:db:e8:d7:c7:86:97:51:c9:4e:b1:bf:d3:cf:86:
03:37:62:a3:f9:7c:e1:da:0c:c6:12:57:a9:2a:a7:a9:87:49:
ba:43:a9:17:cf:25:74:55:d4:2e:49:c4:a1:48:cf:e9:72:43:
12:3b:0c:f7:03:85:0a:a3:c8:21:76:ef:b5:24:67:f3:67:4c:
a0:c7:c4:c9:c1:2d:1e:8e:34:31:92:8f:89:bd:d9:b4:1b:82:
51:45:a8:d8:4d:8d:c9:30:a0:7a:9a:31:ab:86:32:31:1b:06:
02:21:55:2b:f3:eb:74:e9:23:14:3b:5f:44:db:2a:a7:cf:68:
d3:b8:70:8f:de:a9:cc:1a:0f:37:cc:4a:4d:ae:c2:16:db:4d:
aa:91:54:14:d8:5c:4c:18:ab:32:1c:20:0a:0a:26:4f:27:52:
d1:f0:57:d8:6a:1e:b9:69:70:58:3f:80:d0:70:8e:ea:ae:ff:
3b:d4:61:7d:d3:9a:b0:48:33:a7:9c:af:f0:8b:08:e1:6a:d9:
d8:83:cb:56:0c:41:c6:5e:02:2d:e9:fc:9e:ab:5a:0b:e7:f7:
cf:d4:1a:fb:5e:86:58:3a:07:f3:68:f7:d1:50:59:09:c2:93:
52:d8:7e:0d:d0:75:81:cf:8d:08:7c:6e:51:bf:9f:fb:e5:9c:
bc:c5:fe:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:27 2024 by rpki-client on console-fra.rpki-client.org