Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB15C1C2F7BB11EEBE673D06017001B1.roa
File: DB15C1C2F7BB11EEBE673D06017001B1.roa (raw, json)
Hash identifier: G8IPe/7tgerm9IQHmVV7evCGOHoEvreVGxYG1dD0Z+I=
Subject key identifier: E9:71:CA:BC:A5:7D:E4:89:06:0D:DF:A6:6C:54:51:02:04:C3:8D:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8226
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB15C1C2F7BB11EEBE673D06017001B1.roa
Signing time: Thu 11 Apr 2024 04:27:50 +0000
ROA not before: Thu 11 Apr 2024 04:27:47 +0000
ROA not after: Mon 13 May 2024 04:27:47 +0000
asID: 23470
IP address blocks: 45.194.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33318 (0x8226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 04:27:47 2024 GMT
Not After : May 13 04:27:47 2024 GMT
Subject: CN=661766c6-4726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:a7:c5:ba:1e:3e:8d:cb:51:2f:4c:f1:01:
82:4d:2e:85:a5:0a:7d:dd:c3:8e:e4:a3:90:9b:7b:
cd:3c:4e:0d:00:d5:23:d0:e6:c6:f5:e0:37:b1:54:
1c:39:be:70:35:cd:67:6f:85:6c:38:3d:92:af:19:
b7:87:84:d4:97:78:82:2d:7e:75:e8:6c:5c:40:03:
08:39:8a:70:db:49:cb:c7:48:71:72:41:01:2c:df:
7a:6a:9b:d8:b0:76:b7:03:f2:44:db:aa:9e:a3:7d:
a3:45:e6:94:73:cb:e8:64:13:b5:0d:38:a0:51:c4:
d1:de:a3:ca:46:02:a7:9c:e4:9e:83:ae:11:d7:26:
d9:02:a3:97:22:13:56:5f:1f:6f:1e:d0:94:24:24:
6e:b3:91:92:d8:be:57:c9:8c:6c:f1:04:c7:e6:6f:
34:4d:30:24:ad:29:e4:dc:53:e4:b0:a7:24:3c:46:
af:52:6a:c4:4e:21:bf:93:38:78:1d:e6:ba:91:f8:
84:12:f0:61:72:c0:10:8d:61:2c:a1:21:2d:2d:8d:
02:c4:a9:f5:9f:19:14:10:2a:e2:83:90:e4:ec:56:
05:41:e1:8b:12:d7:0d:5a:d9:b5:be:28:6a:69:62:
16:a2:83:c7:73:a5:30:37:79:37:93:03:fe:1b:39:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:71:CA:BC:A5:7D:E4:89:06:0D:DF:A6:6C:54:51:02:04:C3:8D:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB15C1C2F7BB11EEBE673D06017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.29.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c9:ee:a3:7c:9f:7b:8a:c6:d9:fa:41:9a:f1:fc:e5:13:0d:
1b:30:4b:88:c5:40:fa:59:21:cb:99:6d:38:eb:41:25:06:ed:
4e:a8:11:43:4f:04:24:03:34:17:b6:79:fe:4d:a6:c4:60:2f:
47:fc:45:c9:f0:07:1c:cd:1d:c0:fc:f3:70:d7:b5:a0:98:14:
6a:d6:b7:d3:b7:81:7d:22:35:1a:e4:e8:97:33:6c:e8:d5:61:
7d:59:d5:4a:20:47:63:3b:a5:86:8d:e5:3e:3b:9b:af:ac:c1:
c6:05:7e:fc:4a:db:02:bf:18:1e:fd:89:7d:73:9d:40:2b:b2:
45:2c:7e:8a:16:6e:57:46:ce:7c:85:e3:83:0c:25:4f:ed:68:
8d:c8:b2:98:02:86:29:74:27:91:fa:01:92:ee:fe:8f:e6:0d:
11:a1:d9:c5:3b:67:98:f1:ba:fe:3f:77:d9:9f:b1:59:6d:26:
da:0b:5a:3b:67:82:cd:9f:90:28:3f:b0:c3:c7:56:19:7e:38:
3a:48:69:11:25:ba:84:12:fc:5e:8f:57:18:e3:97:49:d7:c4:
97:b4:3f:44:e1:0b:71:9b:6e:5f:81:d3:d2:f7:41:37:15:ba:
5b:27:3e:2e:c1:99:85:39:67:b4:86:74:8d:bf:ec:fa:1d:1c:
de:e9:9c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:04:21 2024 by rpki-client on console-fra.rpki-client.org