Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0C0BF040DC811EF88EB4339017001B1.roa
File: A0C0BF040DC811EF88EB4339017001B1.roa (raw, json)
Hash identifier: 4fBhPJ6Jcy8aprB4mocY6BN56uEYpJT0i7jk3EeSw9o=
Subject key identifier: F7:7A:45:8C:E5:45:51:B5:87:B2:62:B1:03:21:51:F8:6B:6A:45:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 88E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0C0BF040DC811EF88EB4339017001B1.roa
Signing time: Thu 09 May 2024 05:54:42 +0000
ROA not before: Thu 09 May 2024 05:54:38 +0000
ROA not after: Thu 29 May 2025 05:54:38 +0000
asID: 140224
IP address blocks: 45.194.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35049 (0x88e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 05:54:38 2024 GMT
Not After : May 29 05:54:38 2025 GMT
Subject: CN=663c6521-c633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:66:75:a6:56:ea:c6:87:7c:6a:19:63:53:
52:e7:47:87:c4:21:b7:f3:9c:7f:c3:a2:01:b0:e9:
26:d1:f8:e0:ca:a6:98:84:93:3a:26:5b:22:5b:47:
50:49:0d:f7:b0:72:7a:52:de:4c:99:3e:f5:da:37:
62:47:05:ec:dd:73:83:cc:6a:50:78:1c:b7:29:70:
46:a5:82:c8:99:24:f9:bf:2a:4a:9e:dc:40:ee:8f:
ab:2c:65:60:68:db:43:ca:53:3f:48:12:2f:35:93:
84:fa:f3:8e:59:2c:da:f0:6d:ba:3e:cc:09:dd:29:
b0:50:34:2b:f5:87:dd:a7:d0:63:98:7d:68:9b:b1:
0e:17:6e:e2:dc:79:88:ad:a0:ec:0e:87:db:c5:68:
15:5b:0a:aa:87:c4:7d:c2:bb:62:99:ad:ad:82:d4:
04:11:39:d1:bc:44:7b:33:2e:2b:c6:69:75:bd:9f:
c0:d3:55:9d:a7:0b:c2:31:68:a7:86:ab:97:13:8f:
af:bc:e9:86:48:6c:9b:59:bc:67:89:73:f6:7e:85:
26:a9:db:6e:31:8f:b9:46:39:c0:ef:5f:89:17:39:
c1:06:6f:7c:9e:96:5d:67:ba:60:db:5d:1c:92:4b:
7d:2e:52:f9:4e:8c:da:cc:92:46:15:ec:84:58:43:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7A:45:8C:E5:45:51:B5:87:B2:62:B1:03:21:51:F8:6B:6A:45:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0C0BF040DC811EF88EB4339017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/21
Signature Algorithm: sha256WithRSAEncryption
17:6e:e1:92:37:c8:99:06:d9:58:f6:9b:c2:d1:d2:53:03:a5:
1f:8c:1d:71:a0:88:c9:f3:51:f3:52:dc:62:1c:94:99:ed:35:
a4:b4:b4:30:ea:7d:b2:6f:d8:26:42:0d:1f:d9:64:8d:f5:b9:
3c:6c:6e:a8:b2:53:45:83:33:0d:3a:86:6e:9e:98:18:45:a5:
ea:7f:e6:44:fe:b6:92:01:8e:23:ef:cf:ca:97:7c:b8:dc:cc:
c5:cd:21:53:20:f5:dc:ca:0d:20:7b:b4:95:ea:ab:75:74:78:
d0:b3:26:54:ac:fd:59:96:fd:32:0f:99:13:7d:e3:b0:68:69:
3b:3f:7b:61:4e:d3:83:4b:4a:dd:7e:a2:4a:92:34:05:1c:c4:
72:29:31:3e:e3:49:da:09:4a:81:67:69:88:e3:d0:4f:60:17:
72:a2:ff:eb:cf:7e:e9:6d:2c:8d:d1:1d:67:aa:64:53:14:32:
6d:eb:00:70:f3:08:4d:3b:26:8b:77:cf:e5:14:99:91:31:7b:
9a:37:9b:bf:67:46:c0:9d:bd:f5:8f:7c:b9:38:76:e1:8d:b8:
9e:f2:b7:29:a5:3f:b3:7a:67:69:34:4a:46:63:93:fc:1d:5e:
da:de:e3:f6:62:2e:e6:f3:93:41:4d:34:1e:bc:4e:ab:4b:09:
e7:aa:40:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:45:25 2024 by rpki-client on console-fra.rpki-client.org