Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075F068EFE1B11EEAB3FB0F5007001B1.roa
File: 075F068EFE1B11EEAB3FB0F5007001B1.roa (raw, json)
Hash identifier: MKn5wA29vKNZIbv6GFv4qc+cs2fBuQ6/dEny24pRsHE=
Subject key identifier: A7:A4:32:68:BD:F9:24:00:37:2F:56:72:55:5A:9B:8A:94:E7:8D:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 837E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075F068EFE1B11EEAB3FB0F5007001B1.roa
Signing time: Fri 19 Apr 2024 07:04:14 +0000
ROA not before: Fri 19 Apr 2024 07:04:10 +0000
ROA not after: Wed 22 May 2024 07:04:10 +0000
asID: 20473
IP address blocks: 45.194.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33662 (0x837e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 07:04:10 2024 GMT
Not After : May 22 07:04:10 2024 GMT
Subject: CN=6622176e-0369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:50:b3:7b:03:b8:d0:71:fd:04:ef:b5:51:
f8:5b:c9:bb:06:88:d4:bf:e9:3a:16:8e:74:34:29:
c1:0f:a2:b9:99:6b:8b:74:09:52:86:c3:3f:dc:0f:
a4:ba:2f:79:f0:80:a7:a7:8c:d1:03:9f:bc:7a:a6:
25:bc:b2:54:7a:50:b7:74:35:d4:dd:74:19:8a:ce:
7b:76:81:94:54:7c:a8:7d:35:1d:5a:77:86:ac:a9:
bd:b5:5b:1d:67:bf:77:c2:17:df:0c:24:df:f9:c9:
46:29:89:8d:0e:4a:38:86:aa:96:4d:b5:29:c5:5f:
8d:a5:0f:dc:8b:9b:20:d7:cf:91:00:4b:18:17:61:
8d:a5:16:1e:fb:98:94:35:d2:d5:ff:ed:c9:27:cb:
ed:10:ed:19:79:ab:e2:6d:d6:56:5e:d7:37:01:78:
54:5d:a4:cb:7a:7f:1f:22:5d:c5:2c:0e:5a:9f:55:
ce:8d:41:40:ba:fb:f6:e7:91:9a:12:eb:d1:06:d5:
87:b1:31:7f:59:2a:db:a1:d2:69:ff:99:c3:07:80:
c1:4d:0a:55:87:fb:b2:a3:ce:7d:bb:ed:ba:e5:0f:
a6:e1:13:a7:9c:14:20:40:10:4c:e3:e8:bd:d5:df:
e8:a2:92:21:86:a0:14:6a:91:69:60:c5:28:3c:9d:
dd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A4:32:68:BD:F9:24:00:37:2F:56:72:55:5A:9B:8A:94:E7:8D:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075F068EFE1B11EEAB3FB0F5007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.116.0/22
Signature Algorithm: sha256WithRSAEncryption
47:c0:67:86:c6:7d:33:2a:aa:7a:cf:27:44:0f:3b:22:01:d9:
b8:50:ee:ac:f3:18:2c:52:57:f1:6f:bf:4f:c5:af:74:2c:9e:
f1:81:94:97:80:2b:35:c9:2c:75:6b:92:cb:1e:99:06:cf:87:
f5:78:c1:57:e2:15:d9:f2:68:6a:99:70:45:22:8a:ab:ee:9f:
bf:1c:b2:0a:15:e3:36:1d:fc:61:87:6d:21:9d:be:e2:c5:ce:
ad:b9:6a:c5:76:11:95:6f:ba:87:92:48:91:ab:ec:f6:8f:b8:
82:75:96:2b:6a:0e:02:30:25:41:f6:41:6f:cf:37:f5:39:41:
41:a6:2b:a6:fd:c4:e4:92:17:19:62:cc:1f:3c:3f:60:2d:20:
31:1c:9f:b5:ad:59:33:48:c7:83:75:8e:48:e4:84:3a:bb:5c:
e2:7e:2c:3e:f0:a0:f5:b2:6c:02:1e:e7:19:b3:ee:01:53:1c:
16:3d:34:4f:48:62:17:89:4a:76:da:6a:ae:89:11:7a:6b:9c:
b9:06:0a:bc:35:29:e6:9e:37:02:65:aa:83:f0:b0:8c:2a:46:
cf:9f:cd:4a:67:96:a8:0d:e7:ff:5b:7e:04:79:eb:ed:9a:2c:
25:ef:80:b9:32:2e:ea:87:a9:c3:38:f2:29:e3:fe:f3:89:9c:
08:1b:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:11:55 2024 by rpki-client on console-fra.rpki-client.org