Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55A530A21F0911EF98F10EF17CDC24C2.roa
File: 55A530A21F0911EF98F10EF17CDC24C2.roa (raw, json)
Hash identifier: MORyGMnsD5IuEAWGfSpAguHaW9RSsEle3RAhAW8RGOY=
Subject key identifier: 0A:C3:CD:8C:60:77:34:5D:30:AF:A5:08:CB:D3:7D:89:8C:5C:61:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8DF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55A530A21F0911EF98F10EF17CDC24C2.roa
Signing time: Fri 31 May 2024 04:50:42 +0000
ROA not before: Fri 31 May 2024 04:50:39 +0000
ROA not after: Wed 04 Jun 2025 04:50:39 +0000
asID: 201411
IP address blocks: 45.195.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36339 (0x8df3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 04:50:39 2024 GMT
Not After : Jun 4 04:50:39 2025 GMT
Subject: CN=66595722-467f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:04:7c:74:4b:0d:b2:1d:32:06:7b:86:fc:
47:5d:2c:08:89:13:db:4a:c5:d8:3f:35:65:72:60:
b3:6c:58:7b:67:24:16:de:bd:55:32:3a:03:f2:16:
54:c5:ed:ff:1d:96:01:57:5a:d3:4c:82:6c:47:4b:
26:7c:3e:c3:98:25:ed:30:c3:5f:18:45:a5:c7:df:
11:fc:97:9b:a0:b2:09:ce:48:bc:f6:d5:03:c8:57:
44:3c:bb:ef:1b:e4:da:42:4a:cc:65:df:91:4d:b5:
0b:23:6d:64:4f:b6:f5:1b:ac:25:1e:65:f8:20:76:
62:b4:7e:07:3d:b6:6e:9b:15:04:9b:97:60:7a:ff:
4a:c5:96:11:7e:0a:e8:1f:39:3f:0a:4e:84:70:14:
ae:6e:34:60:fe:08:0e:1f:2e:1d:76:e3:d4:90:1e:
fd:b1:ce:6a:b6:cb:6e:d1:49:1c:14:05:18:3f:a8:
c1:9a:c2:91:69:0d:64:43:46:05:80:71:87:83:07:
b0:b1:03:0e:33:73:3b:2c:ab:3b:bd:33:ad:a9:f9:
ed:21:02:b4:a2:0e:e2:fd:d0:38:1a:d3:b2:a6:37:
c4:0a:bb:42:60:3d:5c:48:24:22:86:c1:09:e0:ba:
a5:14:f5:b8:15:d0:ea:4d:87:c7:9c:bb:ec:2d:13:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C3:CD:8C:60:77:34:5D:30:AF:A5:08:CB:D3:7D:89:8C:5C:61:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/55A530A21F0911EF98F10EF17CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7d:d0:26:ad:19:fd:aa:65:21:69:71:b6:de:f9:94:b4:d9:
52:d0:58:df:ea:75:7a:d3:c2:d6:18:62:9a:ad:45:98:0e:5a:
c5:d5:30:f2:e7:70:fd:2b:46:75:00:f7:1b:18:7b:ae:55:93:
c9:0a:05:38:e7:5f:72:ae:8b:18:16:c5:8f:4d:6e:d7:21:3c:
b1:5a:7b:7b:cb:99:4c:72:13:f8:9b:78:3f:f9:06:4e:1c:af:
81:f2:1f:47:f8:4f:08:92:c2:e4:e9:65:26:10:94:1e:16:16:
d4:62:ad:a2:65:06:2a:20:3d:c2:35:a5:b7:7c:ce:f5:f2:df:
a0:7a:e6:97:51:6c:b2:7a:19:b6:d8:64:31:bd:00:b1:e9:7c:
01:bf:b2:04:46:00:17:22:0e:e1:39:10:54:fb:e6:f8:7b:11:
c9:3d:57:ca:3a:7c:77:74:02:49:b9:5f:60:9b:77:09:76:d6:
c0:91:d9:ce:09:52:f2:5e:8f:13:6e:bf:be:01:ec:5b:15:7d:
f9:38:e5:b7:b2:dd:7f:7c:0a:37:71:0b:70:10:3f:2e:c0:04:
04:cb:b9:e5:73:7f:f2:97:bf:41:f6:cc:9b:77:da:16:87:77:
8f:32:95:48:78:2c:03:6b:fe:0a:5d:6c:49:fa:5a:6d:d4:85:
f2:58:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:10:38 2024 by rpki-client on console-ams.rpki-client.org