Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00F448CEFD3811EE99E16F3C017001B1.roa
File: 00F448CEFD3811EE99E16F3C017001B1.roa (raw, json)
Hash identifier: GBGb1vN+3Qr7YeTAo7/tFjr2yJ7rH8FjyUigMi4BITY=
Subject key identifier: 0E:EA:F2:7F:1A:08:8E:0C:2F:94:F4:A7:2E:BD:25:73:75:D1:E0:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8327
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00F448CEFD3811EE99E16F3C017001B1.roa
Signing time: Thu 18 Apr 2024 03:59:07 +0000
ROA not before: Thu 18 Apr 2024 03:59:03 +0000
ROA not after: Sat 27 Apr 2024 03:59:03 +0000
asID: 7018
IP address blocks: 45.203.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33575 (0x8327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 03:59:03 2024 GMT
Not After : Apr 27 03:59:03 2024 GMT
Subject: CN=66209a8b-8406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:9f:6d:de:24:cd:19:3d:59:8c:17:39:5a:
e8:66:32:eb:c4:c6:e6:08:3e:86:ec:28:31:dc:54:
ec:ae:47:b9:34:2b:68:5f:5b:54:66:0a:9e:b5:db:
85:af:0d:6b:4a:72:f9:42:76:7e:66:7e:90:3f:5c:
5a:13:b8:36:52:fa:30:b8:ec:d6:82:5f:4c:95:11:
c1:10:2d:87:1d:9b:ba:dc:d1:04:44:3c:a7:db:12:
56:3c:9c:a0:eb:86:11:3e:51:4d:03:73:e9:08:08:
3c:ea:2e:ba:97:e8:4c:4f:0c:74:da:64:12:be:19:
27:e9:21:d5:82:c5:a3:8d:c6:50:a2:18:25:9c:e2:
cb:9c:77:18:b8:33:f6:fb:d6:8b:46:d2:74:7a:88:
92:e7:e4:7f:f2:85:3a:0b:31:ec:8f:dd:67:13:53:
8f:9c:0b:dd:a2:40:0f:52:1a:12:27:8f:09:60:39:
1c:70:15:47:6a:07:e3:db:b5:b4:c6:50:1e:5f:ab:
90:90:4c:bb:f0:4f:f0:de:50:8b:76:b4:07:da:2a:
51:4f:07:06:5b:a8:a4:57:52:da:c6:f5:98:eb:b7:
b0:7b:ad:97:1a:64:dc:1e:5a:ca:2b:bb:d8:34:3c:
38:36:4f:cd:22:2c:a7:f7:6d:bf:9e:a5:57:0f:34:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EA:F2:7F:1A:08:8E:0C:2F:94:F4:A7:2E:BD:25:73:75:D1:E0:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00F448CEFD3811EE99E16F3C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.48.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:06:fb:3d:bb:90:e6:e8:ab:0a:58:50:ca:fc:3d:10:c2:12:
01:39:16:5a:86:22:bb:6a:11:0e:ee:6f:17:80:26:f3:78:dc:
51:8f:2b:28:06:95:30:5c:41:e8:4a:9d:26:7e:a0:6f:03:2b:
2a:e8:8a:00:86:c0:e9:76:ea:a4:f6:6c:b0:8e:5a:da:c9:0b:
b5:1f:f1:72:dd:3c:f9:76:73:a8:2c:2b:ad:39:ec:31:67:fe:
3f:7a:08:1b:32:02:f0:5c:e1:07:b7:ea:ec:e0:ca:74:f3:91:
87:7a:82:38:41:c2:b1:4b:52:ef:1e:9e:b6:f0:02:7a:59:a0:
e2:66:19:9f:87:c3:61:6e:f6:a4:e0:1e:32:5a:bf:89:58:02:
0d:f7:d7:c8:04:ca:5d:33:17:17:cf:24:b2:8e:fa:73:d0:c3:
95:8e:ad:b1:d4:4b:00:37:0d:99:f4:15:5d:19:ec:11:8c:a0:
b1:aa:ab:bf:40:d0:ad:dc:61:2a:51:6a:dc:bf:b6:49:82:8f:
5b:65:4d:e4:f4:09:4c:d5:ec:8d:86:87:1d:9e:88:c0:75:fe:
ec:71:b8:ca:4a:42:c0:e4:e2:17:b6:60:de:86:50:54:ed:b8:
49:d7:16:8e:70:75:dc:25:de:8f:b7:5a:82:b7:d0:e1:a3:0d:
8f:2d:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:41 2024 by rpki-client on console-fra.rpki-client.org