Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0042ED1CBA9511EE81023AC8775412E6.roa
File: 0042ED1CBA9511EE81023AC8775412E6.roa (raw, json)
Hash identifier: isBz5aUhXUwyc8LjnJUadk00A6YBISdlhfyYAhEcAHM=
Subject key identifier: 9D:70:2E:0F:1F:76:B0:85:10:70:94:46:13:DE:26:5B:99:56:68:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 6549
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0042ED1CBA9511EE81023AC8775412E6.roa
Signing time: Wed 24 Jan 2024 08:46:01 +0000
ROA not before: Wed 24 Jan 2024 08:45:58 +0000
ROA not after: Sun 26 Jan 2025 08:45:58 +0000
asID: 137443
IP address blocks: 45.195.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25929 (0x6549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 08:45:58 2024 GMT
Not After : Jan 26 08:45:58 2025 GMT
Subject: CN=65b0ce49-7bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:0e:ec:a9:80:ab:0f:23:4d:5a:fb:2d:02:
c0:a6:95:4d:6d:02:85:0a:36:23:d2:9d:59:20:2d:
2a:a3:7c:f5:ff:7d:ba:00:ac:ea:13:9d:6d:79:c3:
6c:a5:18:34:09:97:71:a7:97:54:5a:f2:84:7c:c1:
a2:bf:e7:d1:2c:92:cb:fc:17:46:87:17:0a:75:7f:
81:49:9a:ae:f1:03:e8:0d:91:39:93:59:4e:9f:8d:
6f:f1:01:04:c2:29:f7:a4:77:f0:37:74:68:7a:b1:
86:0d:5c:d2:19:42:4d:42:3e:4c:db:57:22:02:04:
d6:bb:f7:bb:e2:19:ad:60:a9:7f:f1:81:5b:08:27:
c4:90:9b:39:61:d9:d4:b2:7c:1d:16:08:db:10:00:
c4:61:57:f6:df:95:d6:3d:de:cb:dd:a4:e6:fd:33:
85:e1:8f:f7:75:3c:6f:0f:6b:da:39:77:75:25:6e:
8b:64:97:e0:36:7c:9a:a2:9d:58:31:1b:eb:2b:0b:
76:b5:bf:b0:d8:11:d5:37:a4:00:21:ed:1a:10:4a:
75:10:1a:34:cc:1f:bd:70:b7:1f:fd:0c:96:ee:53:
a6:b9:26:a2:70:56:33:37:1a:14:13:84:3b:c0:ee:
2b:9c:d9:d0:ec:e7:03:ec:13:ce:0f:32:8d:30:62:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:70:2E:0F:1F:76:B0:85:10:70:94:46:13:DE:26:5B:99:56:68:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0042ED1CBA9511EE81023AC8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.198.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ed:33:b3:dc:44:11:72:0a:89:d2:dc:4c:41:a6:d8:45:e5:
62:0c:67:a5:f4:5b:98:12:81:89:0d:b4:0d:da:09:86:48:72:
d3:cc:91:05:e6:f6:d3:70:72:9b:1c:ef:9a:60:f8:6e:af:54:
33:d8:33:8d:0d:a8:8e:b7:9f:34:3f:2c:42:93:a6:60:71:2a:
8c:9e:3e:8a:9e:4d:12:02:45:cb:0a:1c:5f:ab:34:64:35:8d:
97:59:4f:99:d3:c7:12:6a:9a:49:e2:57:9b:37:ab:8c:33:be:
b0:5d:e3:02:4d:d7:79:88:ed:51:08:b5:f8:8a:8c:3d:98:db:
49:49:7a:7a:fd:49:49:2c:61:fe:8b:f2:fc:45:9a:ef:a3:9a:
6b:cc:73:d6:21:2f:15:1d:2e:a6:a5:58:44:c5:4e:14:b1:15:
1c:91:7f:23:df:0e:10:aa:8d:b8:a0:7f:8c:d9:ce:58:f4:60:
3c:8e:53:ae:3d:e4:17:e2:f6:18:be:da:83:1e:3d:41:ab:d8:
ce:e7:5c:ef:ec:2a:34:10:39:2d:a8:51:1f:bd:1f:04:25:bb:
95:19:75:46:d3:ad:61:25:e3:fe:c2:8d:dc:51:78:47:f0:20:
2f:49:ac:6d:3b:f5:b4:05:1d:78:fe:68:ec:92:b1:de:cf:6f:
d0:ca:ab:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:47 2024 by rpki-client on console-fra.rpki-client.org