Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16995A16FD5111EEA0C97E08017001B1.roa
File: 16995A16FD5111EEA0C97E08017001B1.roa (raw, json)
Hash identifier: 4S0fJzvS7Ijox+uOh8rdpmdnT4x8h3BoXSlmtaioKNM=
Subject key identifier: CB:EA:4C:3B:62:95:1F:01:2E:23:5A:93:5E:E7:56:0A:E7:F6:AB:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8361
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16995A16FD5111EEA0C97E08017001B1.roa
Signing time: Thu 18 Apr 2024 06:58:41 +0000
ROA not before: Thu 18 Apr 2024 06:58:37 +0000
ROA not after: Fri 26 Apr 2024 06:58:37 +0000
asID: 39600
IP address blocks: 45.204.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 06:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33633 (0x8361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 06:58:37 2024 GMT
Not After : Apr 26 06:58:37 2024 GMT
Subject: CN=6620c4a1-650f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:fa:b6:93:88:4e:1d:41:91:0a:8a:5d:3d:
3e:b5:0e:db:4e:b8:e6:ca:82:92:c7:2c:28:9c:68:
0e:27:12:c1:d7:56:ef:73:48:19:a5:7c:dc:fd:f4:
f8:40:84:98:4a:f0:83:52:db:4f:15:d6:1a:3a:55:
bf:18:47:f6:c1:86:94:f5:35:fb:0b:a2:31:66:c4:
39:fc:82:03:81:14:04:ca:f3:02:7b:c1:11:6f:0d:
06:4f:45:d4:1d:cd:1f:e5:f8:10:07:0f:98:08:a9:
a1:65:74:c3:11:e8:ce:57:f5:06:d9:21:ae:31:b4:
6e:b0:91:93:8f:bd:c7:73:52:34:a7:a2:ac:97:c0:
2b:ad:4a:fb:f8:d0:51:f7:f1:ab:8e:74:da:ad:5c:
72:7a:94:b2:81:d3:49:a8:a7:b0:08:c2:43:33:90:
0a:73:4d:ab:ad:ed:bd:92:34:30:a4:b7:4e:bc:5a:
d9:6b:cf:f2:0c:74:50:08:8f:c6:95:50:55:d5:0a:
e7:4b:4a:2e:fe:e7:45:d6:9c:d2:c3:b0:74:19:38:
d5:4c:1f:9e:b3:76:4b:fa:20:37:f2:8a:8c:b5:19:
87:f7:50:88:f5:a6:2a:c6:2c:bc:5f:db:b5:e7:1e:
4b:f6:4d:b9:20:06:6b:15:7a:b8:b7:0a:0c:30:52:
17:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EA:4C:3B:62:95:1F:01:2E:23:5A:93:5E:E7:56:0A:E7:F6:AB:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16995A16FD5111EEA0C97E08017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:b3:d6:ed:46:e3:5f:18:d5:c5:e3:29:5b:9e:29:0f:81:e8:
f8:59:4e:30:b8:06:fc:0a:41:bf:7b:14:10:16:1e:a0:f5:ac:
e9:d9:57:39:99:9f:6f:5f:4b:3a:24:71:f8:24:ef:42:29:46:
af:2e:a1:89:57:d1:ce:d4:35:cc:c3:6c:bb:37:a2:23:ec:7e:
e1:f8:3d:13:23:40:0f:d8:fe:e7:1e:0c:3b:19:1e:e9:0f:73:
b9:38:63:6f:6f:d0:73:a7:ad:23:25:10:44:ab:90:db:0d:27:
a2:8b:d0:ae:e0:f8:0b:a3:1e:db:b3:5a:e0:e9:21:a2:54:57:
51:be:ee:4e:c6:4d:1d:bf:e0:2d:49:5c:8e:b4:d1:18:9d:3f:
09:84:46:4b:0b:a0:fb:aa:26:e2:27:b2:2e:49:50:ac:b3:76:
b4:c0:b2:a6:72:72:5f:3e:58:d3:f4:e2:e9:9a:5d:63:e1:aa:
81:e2:99:34:45:27:ed:f7:c9:6b:71:fa:3e:ae:e2:fe:82:fa:
20:e7:f0:ae:8d:21:9f:44:79:b3:4f:cc:36:0a:b3:aa:f6:01:
c8:c6:9a:b8:80:f5:b2:bc:f7:86:fe:e7:2d:08:5c:0f:81:a4:
e0:54:d0:5e:8f:f9:8e:4b:ca:ad:34:14:92:77:f7:f1:94:cf:
f3:5d:2e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:42 2024 by rpki-client on console-fra.rpki-client.org