Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FFF24DA3DF611EE83E36B5B4AD9E6FC.roa
File: 0FFF24DA3DF611EE83E36B5B4AD9E6FC.roa (raw, json)
Hash identifier: f3fKBwCBECmsyvBZAdr0Q8LTVrTJZiLoUsAViEvYJvE=
Subject key identifier: D7:26:20:6C:91:5B:20:5B:46:E1:3A:32:9F:0D:9C:B0:E9:23:06:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 367B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FFF24DA3DF611EE83E36B5B4AD9E6FC.roa
Signing time: Fri 18 Aug 2023 18:35:53 +0000
ROA not before: Fri 18 Aug 2023 18:35:50 +0000
ROA not after: Wed 21 Aug 2024 18:35:50 +0000
asID: 133012
IP address blocks: 45.199.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13947 (0x367b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 18 18:35:50 2023 GMT
Not After : Aug 21 18:35:50 2024 GMT
Subject: CN=64dfba09-152c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:df:19:61:3e:31:5d:66:79:3d:26:1c:37:
60:86:cb:c0:ff:ab:af:6e:71:c6:91:08:eb:dd:7e:
00:3d:ac:a1:e0:85:44:68:1d:78:a1:fd:e7:68:54:
dc:52:78:3b:66:2d:8c:0b:8f:32:aa:19:89:21:bc:
b7:f4:1b:25:17:51:fe:7d:0f:d4:85:e4:60:db:c4:
33:e2:db:11:2b:a0:d2:23:6e:16:11:16:b1:43:f7:
fc:5f:c6:19:79:b0:c7:39:fb:9d:73:d4:55:ed:84:
bd:5a:1d:7b:5d:28:8b:e7:c1:49:4f:ca:d9:92:93:
a3:62:ee:42:32:48:8a:e6:f7:88:03:80:78:5b:98:
81:16:ec:0c:0e:66:24:b6:72:fd:6b:82:9e:41:c7:
c7:66:dc:47:78:95:5a:62:fc:e2:9f:d6:8d:08:0e:
e5:ad:2d:86:9a:c9:fa:94:5f:95:3a:a0:d3:bd:c9:
aa:eb:8f:68:c8:11:02:f0:5d:a4:68:ee:94:e9:3a:
90:c3:7c:17:3b:22:e1:ac:c8:46:46:9c:24:b6:0b:
20:3a:ce:0b:18:90:7a:98:52:32:58:ae:09:b1:bf:
f8:b4:83:23:83:e1:5c:0c:73:ca:2c:65:4d:8e:d4:
e2:78:ca:72:93:1b:cc:bb:6f:1c:3a:9d:24:7d:f1:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:26:20:6C:91:5B:20:5B:46:E1:3A:32:9F:0D:9C:B0:E9:23:06:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FFF24DA3DF611EE83E36B5B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.182.0/24
Signature Algorithm: sha256WithRSAEncryption
93:9c:dd:b5:11:3e:c0:56:03:6f:e8:98:15:d8:4a:39:f9:c6:
5f:3b:cc:73:5f:6b:ef:76:3f:53:60:c3:e0:b3:90:51:56:6d:
ba:e6:e2:5e:f4:f2:12:2e:2d:a8:86:76:d7:e5:b0:42:ba:87:
ef:5d:88:4d:87:73:d6:de:ed:d6:84:b0:87:38:5f:d2:37:92:
be:4a:8c:07:a9:26:9e:52:4f:40:fe:da:3c:bb:04:99:7d:6d:
b9:1e:ff:a8:58:84:bc:69:cc:c5:40:74:76:c8:fc:36:ca:7f:
11:8a:fd:e3:36:7e:de:a3:eb:4a:b5:6f:bb:45:97:30:c2:7e:
49:43:0a:3e:89:ac:f1:9b:1b:8d:82:ad:41:b1:29:08:b6:10:
3a:28:77:29:69:9a:4c:53:ef:8a:87:2a:76:56:83:52:18:df:
e8:08:51:36:49:cb:48:0b:f2:ac:6d:aa:15:b3:1d:79:b6:ea:
e2:e0:ba:81:18:b7:e6:8b:a3:ef:e5:a3:a2:9b:6b:c1:9c:48:
fc:a2:e3:7a:53:e3:af:f5:01:27:95:f6:67:bf:ee:a6:aa:20:
f2:00:e1:39:c6:63:c5:cd:56:14:4c:34:50:19:43:e2:e8:d0:
9c:c7:ed:af:5f:d9:4f:fd:5d:28:e3:7a:6e:d3:2c:ec:51:72:
d4:80:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:48 2024 by rpki-client on console-ams.rpki-client.org