Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/072B6B5A8DD011EEAD82E4694AD9E6FC.roa
File: 072B6B5A8DD011EEAD82E4694AD9E6FC.roa (raw, json)
Hash identifier: NUE0Qvhqg5EzEjpRlMohb2JhnW68tMQswolITuwtBAk=
Subject key identifier: 64:D1:3B:D0:E4:30:D3:B0:31:D2:BE:01:BE:D8:CB:26:63:E8:FD:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4C4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/072B6B5A8DD011EEAD82E4694AD9E6FC.roa
Signing time: Tue 28 Nov 2023 09:25:11 +0000
ROA not before: Sat 03 Feb 2024 09:25:07 +0000
ROA not after: Thu 08 Aug 2024 09:25:07 +0000
asID: 133861
IP address blocks: 45.207.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19535 (0x4c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 3 09:25:07 2024 GMT
Not After : Aug 8 09:25:07 2024 GMT
Subject: CN=6565b1f7-13ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:7a:aa:14:21:de:53:00:17:5c:d9:53:9a:
12:fd:04:ac:4b:7c:2b:28:e3:41:51:ab:85:8e:48:
4a:cc:91:ee:4d:09:ee:04:dd:30:68:a9:61:cc:8f:
ff:1b:95:24:89:c4:3f:a9:d4:de:c0:59:e9:89:9f:
99:57:4d:31:02:b5:17:65:c0:0b:21:0b:5a:62:65:
29:06:1b:0e:5c:02:42:8f:02:9d:78:f5:4c:41:98:
3b:43:76:05:c3:71:10:4d:e2:26:1a:40:df:fc:8b:
ae:00:49:34:b6:25:07:d9:78:3f:7a:37:84:c7:74:
3d:d8:f5:5d:84:b8:21:00:e6:aa:48:3d:52:39:e4:
e0:ac:cc:28:0b:96:c7:8b:f2:0a:88:aa:7d:6f:2f:
2d:25:ea:11:d3:99:46:35:0c:36:fe:a6:9c:51:32:
e6:dd:9f:d7:e3:7e:5c:39:03:a1:64:1c:75:61:ea:
97:6e:37:1d:9e:d0:96:fb:d1:23:dd:3b:3b:cb:ab:
b4:78:25:5a:66:bb:35:96:0c:ca:38:ad:09:e7:65:
54:1e:bb:e2:a0:e2:f5:ae:e5:da:a1:a2:d1:9f:0e:
12:75:61:c3:09:4e:a2:4a:33:2e:a4:4b:17:39:25:
99:97:e6:4a:b3:39:b0:fe:42:c6:8b:d8:3f:99:85:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:3B:D0:E4:30:D3:B0:31:D2:BE:01:BE:D8:CB:26:63:E8:FD:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/072B6B5A8DD011EEAD82E4694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.37.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f4:b6:49:44:1a:de:56:c2:99:8c:96:2b:75:a2:d6:5d:86:
86:cb:63:31:ab:45:38:74:88:0f:af:0f:9b:3e:15:d8:4e:8c:
1e:f3:6d:fa:be:09:a1:45:fa:13:c8:8d:12:8d:9f:33:59:c1:
88:1c:c1:5c:74:ec:fc:c3:0b:a1:ad:39:4b:63:8c:c6:ea:fa:
de:98:d3:2b:f7:d1:2a:1a:4b:b9:1d:45:d2:aa:91:18:71:dd:
84:79:e8:4f:16:4e:85:e3:d8:6c:1a:43:12:87:ba:61:fe:cf:
01:02:e7:4c:c6:e6:90:e2:19:df:26:db:08:38:7b:fa:37:cc:
48:50:61:43:d7:ba:a7:26:e1:7c:b2:4b:a2:2c:26:61:67:fe:
07:46:8e:0d:7b:bf:39:ff:b7:b7:13:c7:ee:5a:49:ec:bd:7f:
c4:14:cf:8b:75:1f:b1:cc:f8:68:82:61:d7:cd:f4:53:2b:be:
ce:c9:9d:b9:54:25:80:4a:61:22:7c:40:8f:16:03:e6:6f:33:
8b:fb:e4:b0:8e:d9:50:ef:65:a2:0a:c2:df:40:62:cb:5d:7c:
e4:00:c0:b5:a5:0c:8f:da:6a:be:32:be:3a:c5:26:e1:a8:a4:
97:9e:a9:08:65:e0:53:a3:89:1d:d3:0f:a0:1c:b6:26:ad:2b:
e7:c6:33:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:48 2024 by rpki-client on console-ams.rpki-client.org