Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B2295B6088311EFBAAA0E45017001B1.roa
File: 5B2295B6088311EFBAAA0E45017001B1.roa (raw, json)
Hash identifier: E7CrHwEbwhYCsCf5myQj25qVxLprKMmTuuPj47JRLvs=
Subject key identifier: 30:2F:59:0F:6E:AE:5D:5E:E7:40:5D:E8:A5:49:8F:74:82:F7:38:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 874C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B2295B6088311EFBAAA0E45017001B1.roa
Signing time: Thu 02 May 2024 12:56:14 +0000
ROA not before: Thu 02 May 2024 12:56:10 +0000
ROA not after: Thu 23 May 2024 12:56:10 +0000
asID: 54467
IP address blocks: 45.204.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34636 (0x874c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 12:56:10 2024 GMT
Not After : May 23 12:56:10 2024 GMT
Subject: CN=66338d6d-bd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:11:46:bf:cc:9e:a1:79:e9:88:01:e0:78:
7a:77:2c:9d:3b:73:0c:37:fe:6a:eb:f1:1e:57:55:
33:40:bd:40:83:3d:8d:26:ff:34:bb:fa:1a:b7:fc:
2f:55:0c:da:3b:a6:2d:ad:57:f6:62:18:a6:58:48:
c3:96:81:f1:e0:96:98:f3:d6:9f:66:26:3f:06:5e:
6d:54:31:bc:a8:38:2b:e9:28:fa:ed:e8:f2:06:b5:
c2:83:25:b6:8a:83:91:44:9d:4e:5f:71:1c:9d:17:
f4:30:75:2c:94:a0:1f:1f:47:05:37:59:84:fb:87:
b2:f7:37:d7:cc:2b:8f:2e:d4:f0:b9:4c:b6:1d:df:
83:6b:b7:08:a0:53:1e:be:16:13:72:d7:81:48:58:
7c:a9:70:88:da:b1:1a:22:93:58:7e:7b:89:f5:40:
99:6c:20:ee:c4:33:f8:eb:e9:8c:b1:91:04:0b:a1:
d6:56:ec:ae:50:2b:8e:b6:d9:0b:05:76:07:97:67:
64:86:80:67:fc:c4:d7:d5:4d:d4:e2:8b:15:05:b5:
69:e2:a1:75:d6:5a:cd:ed:9c:58:8d:89:0e:fa:fe:
12:80:07:31:1a:3f:96:3a:02:f0:73:c3:85:c8:29:
a2:d3:62:dd:51:97:31:40:e4:27:1e:b0:e3:e6:48:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2F:59:0F:6E:AE:5D:5E:E7:40:5D:E8:A5:49:8F:74:82:F7:38:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B2295B6088311EFBAAA0E45017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.112.0/20
Signature Algorithm: sha256WithRSAEncryption
42:17:e9:50:6e:1d:b5:b2:0b:1c:07:a3:86:d3:c8:1a:45:64:
cb:4d:0d:78:3d:22:e0:c4:27:92:f4:98:90:72:bd:4d:58:1b:
58:44:ec:d1:69:ed:30:33:34:44:61:91:a5:ee:57:87:4f:24:
c1:1c:07:90:5c:1d:db:c5:0d:e3:7d:cc:34:3d:9a:00:dc:75:
f9:66:b0:24:da:2b:20:d3:85:0d:ca:c4:21:fb:4c:81:e9:d8:
54:67:ef:14:89:bf:18:33:ee:45:e7:52:6e:98:02:c7:dc:36:
f0:f1:f9:b3:b0:07:26:61:bf:e8:f3:06:a0:31:a8:6a:c4:96:
75:f9:57:93:0a:4a:e2:a8:e8:cf:3f:57:78:aa:c8:a8:92:9b:
1f:93:0d:7b:17:20:a1:04:96:85:94:7e:f0:29:e0:e4:97:2a:
78:42:45:97:29:95:4b:8c:ee:5b:ed:dd:6b:eb:08:ab:06:f7:
61:b7:fc:4b:c1:c8:e5:7a:d5:fd:8e:8f:3a:6f:48:d5:47:5e:
f1:b4:a1:72:00:0b:70:b7:09:86:0e:38:1f:fd:20:22:e4:36:
7d:43:a4:84:d3:2a:29:43:04:e3:fd:22:42:f9:05:4c:f5:ca:
ec:cf:d8:3d:9c:03:0a:cd:a2:5c:f0:5f:e8:1e:e0:2a:5d:43:
cd:9a:af:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:16 2024 by rpki-client on console-fra.rpki-client.org