Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04B96C90B80611EEBA9674A8775412E6.roa
File: 04B96C90B80611EEBA9674A8775412E6.roa (raw, json)
Hash identifier: jlLrvzBnknMmiOtYlANGIzte81Ixl0kvug4pC6qB9Ss=
Subject key identifier: 9A:FE:ED:DC:D3:3B:5A:D0:12:A7:71:35:F3:C2:81:7C:98:3D:EE:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 6434
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04B96C90B80611EEBA9674A8775412E6.roa
Signing time: Sun 21 Jan 2024 02:37:28 +0000
ROA not before: Sun 21 Jan 2024 02:37:25 +0000
ROA not after: Thu 08 Aug 2024 02:37:25 +0000
asID: 133861
IP address blocks: 45.207.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25652 (0x6434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 02:37:25 2024 GMT
Not After : Aug 8 02:37:25 2024 GMT
Subject: CN=65ac8368-455d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:a7:1f:dd:56:4e:5b:0c:1a:e7:ee:dc:25:
9b:13:5d:0c:65:bd:64:e6:4c:71:95:1d:e4:54:b9:
d9:6f:ab:fe:73:b2:9c:4b:14:e9:57:6d:5f:b2:85:
05:9f:3e:e3:a0:68:a9:54:11:4b:4a:01:f2:59:2a:
cc:c4:3b:4e:4c:89:84:95:b5:4c:a9:f9:77:8e:f1:
5d:75:22:f9:ad:a7:f8:11:85:d3:be:64:17:c3:0c:
85:62:48:b1:ef:4e:2c:4c:bd:24:41:8a:f9:15:b6:
5b:78:5a:4d:e9:a0:0c:99:cd:af:3f:3f:c0:97:e4:
ed:8d:b8:5b:1f:ba:e2:f0:6d:92:34:f0:ad:26:10:
63:b7:bc:0b:2f:fb:00:25:b9:43:25:f2:a0:bd:4a:
5d:ca:0d:55:7f:96:63:06:51:2d:4b:26:30:a0:dd:
1c:87:73:ad:5f:a6:0a:3a:ad:d5:16:5a:20:66:53:
86:06:a8:b0:dd:63:b4:39:d7:ff:28:45:83:4b:72:
65:eb:30:0a:24:af:39:f6:8b:f4:a8:bc:95:6a:38:
6b:38:e8:34:3c:eb:52:a9:2c:24:39:25:f8:e6:19:
67:2a:56:13:7b:4c:93:7e:a0:78:cb:d6:d5:5d:92:
86:7c:7a:c9:30:71:47:6e:47:e2:20:bd:9a:b8:93:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FE:ED:DC:D3:3B:5A:D0:12:A7:71:35:F3:C2:81:7C:98:3D:EE:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04B96C90B80611EEBA9674A8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.48.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5c:33:74:26:44:80:60:cd:88:a0:da:60:88:77:0c:05:90:
45:82:2e:aa:6b:e1:b3:85:1d:74:b6:fd:65:f1:68:f6:6e:4d:
81:aa:8a:b2:f7:24:4f:07:3a:d0:3a:c2:84:9b:48:ab:f6:ad:
39:6b:e9:39:72:92:f2:a8:8e:bf:96:d3:3c:ea:72:bc:57:80:
cd:12:aa:5b:4b:cb:ac:f6:2d:13:47:e7:64:a4:22:d6:0c:ee:
09:30:8b:98:cd:28:e8:89:73:55:1c:b0:f8:c5:e7:a0:ec:7e:
05:bd:15:4d:27:6c:1c:43:58:a5:38:65:d0:d1:6f:5f:85:85:
0f:76:7f:f0:36:7e:47:c1:e6:0a:06:19:9d:0b:43:59:78:85:
d9:89:3e:cb:cb:68:93:4d:53:48:3e:4b:84:12:7b:00:95:e1:
8b:60:fe:3d:45:e6:20:20:65:af:eb:a4:07:da:78:2f:ca:c5:
57:30:19:0d:fe:d3:68:2e:ef:4d:fe:d7:d3:8b:4a:3d:5c:96:
5e:78:47:16:8c:db:a9:5f:63:d3:61:5b:52:59:e5:58:6d:cc:
e9:4a:76:b7:9a:92:69:7e:72:ce:34:52:d7:7a:0d:b8:cc:31:
a6:4e:ea:73:ae:be:02:78:b1:48:52:f8:31:15:57:ad:1d:40:
30:73:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:03 2024 by rpki-client on console-fra.rpki-client.org