Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04BB579A157B11EE9DF2B1284AD9E6FC.roa
File: 04BB579A157B11EE9DF2B1284AD9E6FC.roa (raw, json)
Hash identifier: RH8ykc7EPTackTOEm7ZDYeVRGECulOzzC4ppA5fZKas=
Subject key identifier: EF:D3:CA:39:4E:BF:87:A6:4D:50:21:B0:BA:4D:2C:F6:B1:B2:33:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2E00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04BB579A157B11EE9DF2B1284AD9E6FC.roa
Signing time: Wed 28 Jun 2023 06:14:20 +0000
ROA not before: Wed 28 Jun 2023 06:14:16 +0000
ROA not after: Mon 10 Jun 2024 06:14:16 +0000
asID: 3491
IP address blocks: 45.195.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11776 (0x2e00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 06:14:16 2023 GMT
Not After : Jun 10 06:14:16 2024 GMT
Subject: CN=649bcfbc-1939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:8d:c4:82:c3:87:4e:d6:03:b6:59:c0:dd:
99:78:96:70:7d:f4:13:15:54:3d:83:d9:1a:ee:e3:
7f:55:07:34:5e:e0:3f:f9:4b:d5:99:26:74:70:be:
c5:21:18:4c:c2:a5:09:13:a6:c0:a5:f6:ac:36:ea:
14:d7:83:37:4c:15:c9:bb:13:57:ed:d0:5f:6c:c7:
cf:a1:d2:df:ca:52:10:69:0b:25:9d:aa:3c:1b:99:
30:91:6c:af:71:b6:ab:74:bc:7b:bc:ff:f4:1d:48:
08:5e:aa:fe:be:a4:f9:aa:6c:59:65:cc:a6:4c:39:
e8:4f:1d:e4:88:f8:5f:dc:0c:fb:7f:35:91:ee:42:
e5:69:3a:ae:c7:e6:c1:f8:f0:c2:fd:46:80:7a:d2:
a7:63:b7:45:64:90:76:c5:df:fd:50:ce:47:67:55:
01:b6:0a:4d:d5:a5:cf:ef:53:52:0d:23:7c:99:2f:
68:af:ca:68:bc:41:3e:ef:ef:6d:a4:27:22:70:1e:
7a:44:d5:12:98:06:0c:cd:df:01:a2:29:1a:e2:7e:
ff:98:26:62:f0:64:39:79:16:c5:67:8a:fd:00:6f:
6f:c9:99:20:5a:a5:22:83:db:e0:7b:25:dd:81:fa:
0b:a1:c3:53:45:6e:19:e0:11:0d:69:72:60:52:9c:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D3:CA:39:4E:BF:87:A6:4D:50:21:B0:BA:4D:2C:F6:B1:B2:33:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04BB579A157B11EE9DF2B1284AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.74.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ef:0f:5b:f1:9d:78:57:71:f1:06:be:92:8d:d5:a6:7c:d0:
63:7e:1a:11:c4:f2:e4:79:49:54:b2:6c:c6:0c:03:0f:37:e1:
f6:62:07:45:ad:7f:71:73:44:3a:ab:7c:fa:ed:86:dc:7e:9d:
f6:f2:15:0a:9f:1d:b1:85:12:d5:5c:48:34:23:cb:44:dc:04:
ff:93:09:b8:39:ee:04:8a:ce:b9:f4:8b:19:90:2a:ae:ff:ee:
9e:e2:db:40:ee:b6:d2:a0:2f:62:60:90:20:ad:e8:e2:13:ba:
10:1d:03:f3:ca:62:c2:e7:3a:ba:a0:97:04:61:33:0a:8b:cc:
5f:64:92:26:2b:0e:3e:8b:ea:5a:bb:7b:85:65:8d:ea:e7:0b:
8e:34:57:91:fc:bf:d2:7b:14:b0:4c:8e:c7:8d:7e:cf:c8:98:
3f:c4:7c:77:7a:b0:03:18:cf:a8:2b:ce:5c:99:5e:66:4c:15:
45:69:9f:f3:8a:06:2a:8a:d8:d4:22:d2:43:39:f9:38:6e:7b:
ef:bf:ba:f4:7b:8c:e6:f8:a2:3c:98:0b:17:cd:09:09:04:d1:
79:43:01:1e:14:87:c2:c9:27:ac:98:7a:ba:3b:3d:1c:db:68:
09:3f:fc:64:f6:6e:8d:a6:26:39:6c:51:a2:5b:2c:5c:95:93:
e3:67:c8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:48 2024 by rpki-client on console-ams.rpki-client.org