Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ED60EBCD9D011EEAD07DE87775412E6.roa
File: 1ED60EBCD9D011EEAD07DE87775412E6.roa (raw, json)
Hash identifier: npLxbUv2IQ9QtjJ8HSuUwXzDiMm0U5YKPfWqlnkFQFc=
Subject key identifier: F6:66:8A:92:47:88:B0:DD:05:4E:B2:7E:2C:69:77:6B:A5:45:AD:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7934
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ED60EBCD9D011EEAD07DE87775412E6.roa
Signing time: Mon 04 Mar 2024 02:37:19 +0000
ROA not before: Mon 04 Mar 2024 02:37:16 +0000
ROA not after: Wed 05 Mar 2025 02:37:16 +0000
asID: 138168
IP address blocks: 45.195.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31028 (0x7934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 02:37:16 2024 GMT
Not After : Mar 5 02:37:16 2025 GMT
Subject: CN=65e533df-c830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:97:8f:14:0f:91:29:e3:7e:de:44:2a:c3:94:
41:40:06:a6:08:47:ca:54:68:21:b7:66:7e:2a:63:
2f:96:1d:e8:24:9e:d9:ac:f4:0a:e7:0d:2d:bb:7d:
54:c2:5d:4c:2d:eb:d2:c0:fb:34:2c:16:d8:56:29:
96:d9:5c:5c:9b:11:fa:bd:81:65:5d:dc:0c:d5:00:
a6:99:73:3f:42:26:a9:17:b7:ca:85:9a:87:ff:c4:
cd:2c:e0:f6:b9:7a:71:65:12:6a:b4:a3:bd:78:16:
c0:22:2f:4a:c1:56:9f:39:97:50:2f:6a:cf:26:cd:
36:e7:50:bc:e3:b3:7d:94:84:9d:b6:64:53:04:bd:
20:2b:02:88:7f:b9:42:f3:d5:ff:d9:b1:c9:c6:09:
33:6e:6e:7a:c2:a7:d2:63:c4:68:c8:1f:9f:02:bd:
84:7c:7a:d1:d2:24:a1:42:c8:54:b2:7b:c4:eb:a9:
4b:00:2e:59:ac:e4:a1:91:7f:57:b0:bd:71:1e:7f:
ac:f6:83:91:76:6d:f6:07:5f:34:06:96:a2:7f:73:
3c:66:fc:b7:77:6f:82:d9:8d:f0:7f:13:eb:de:64:
d5:66:fa:32:23:83:45:61:5a:a8:69:9e:fc:92:0f:
b5:86:f3:88:6c:78:c3:32:21:a3:22:47:37:ad:74:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:66:8A:92:47:88:B0:DD:05:4E:B2:7E:2C:69:77:6B:A5:45:AD:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1ED60EBCD9D011EEAD07DE87775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.81.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:35:d9:95:13:4d:5a:de:42:0b:09:b8:70:6b:35:ad:99:0b:
cd:05:41:be:ca:26:64:7d:56:ce:9b:51:1d:8e:d3:0f:53:7c:
87:6b:7c:7e:8a:fd:3f:de:76:8f:8a:f9:d4:32:dd:ad:b5:86:
1c:b3:f5:f9:35:2d:bf:ad:3e:5f:8d:c5:a9:2a:90:bb:f5:db:
e5:08:51:33:ca:da:3f:09:66:c5:95:71:93:1f:25:ba:af:50:
d3:54:34:e0:e0:49:ec:62:ba:37:6d:f1:90:1a:22:71:47:b8:
82:12:b7:9e:fb:73:56:45:11:68:e2:3d:6e:0e:ac:18:52:6c:
77:fc:12:e0:7f:d0:28:08:0f:00:a4:48:4f:ec:45:45:1b:ab:
0b:f9:8d:92:c4:c5:6c:56:df:cb:39:23:33:66:08:4b:d8:87:
7f:7c:da:f6:98:ec:40:b1:c5:fd:95:60:e7:01:1b:b9:09:ee:
c0:0b:fc:dd:e6:64:41:f8:07:b5:56:14:0a:d5:67:e7:f9:08:
d2:14:15:c6:5a:30:41:80:54:36:22:bd:2a:fc:db:fa:ca:ef:
d5:56:b3:7f:c3:46:77:df:69:a5:88:3d:06:89:3a:ed:6b:f4:
05:5e:a2:76:d6:b2:43:97:f4:ca:d8:44:d9:69:df:7d:13:d5:
37:48:d1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:03:53 2024 by rpki-client on console-ams.rpki-client.org