Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A807BF4135011EFAE13134E017001B1.roa
File: 1A807BF4135011EFAE13134E017001B1.roa (raw, json)
Hash identifier: Ko23W1mmcknV8DdDypafM1sibgXg0x5i8H2eAIxxL10=
Subject key identifier: D7:04:31:FA:7F:E9:08:7F:0F:C3:35:7E:EC:58:48:7E:F4:07:17:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8A90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A807BF4135011EFAE13134E017001B1.roa
Signing time: Thu 16 May 2024 06:47:04 +0000
ROA not before: Thu 16 May 2024 06:47:00 +0000
ROA not after: Tue 03 Jun 2025 06:47:00 +0000
asID: 41095
IP address blocks: 45.198.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35472 (0x8a90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 06:47:00 2024 GMT
Not After : Jun 3 06:47:00 2025 GMT
Subject: CN=6645abe7-f3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:f3:24:75:e5:da:c9:9a:99:a7:fa:7c:6f:
7b:23:ee:02:78:4a:48:ff:41:74:2f:e1:36:fc:3d:
f7:c2:65:bf:9d:e7:49:2f:47:c1:2c:3b:19:11:fd:
f1:85:47:7b:4d:38:64:46:9b:c4:c9:f0:45:98:1e:
bf:06:a0:06:2f:f1:11:57:e6:3d:48:67:d3:d7:a5:
31:70:d7:c2:53:dc:b7:7b:c3:1a:a7:09:aa:66:94:
23:eb:f7:96:e9:70:f0:98:07:9a:c3:66:d3:48:b8:
a9:0c:24:ed:7a:09:f0:5a:89:26:71:e8:c8:e9:52:
33:03:99:25:21:b3:78:19:9d:aa:2b:66:cb:4b:0a:
f8:64:76:fd:11:5c:1a:3e:ee:39:8e:bb:d4:9a:dc:
ef:d4:28:a5:9e:a1:bf:40:4e:e8:03:03:df:6c:a0:
b4:a6:d9:be:f6:e5:59:17:e5:13:d9:e8:c6:fc:aa:
27:71:15:db:20:c5:e4:c0:7d:ee:92:3d:f2:4b:95:
3f:4b:30:f1:90:c0:6a:2f:b4:3f:90:c0:b9:4c:71:
4c:3f:32:4d:66:c9:9b:50:48:b3:16:eb:79:49:f6:
4d:71:d4:22:61:9e:88:cc:94:79:84:73:be:cd:ff:
f8:f4:84:3c:ab:fa:93:dd:6c:ad:d9:15:68:91:3c:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:04:31:FA:7F:E9:08:7F:0F:C3:35:7E:EC:58:48:7E:F4:07:17:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A807BF4135011EFAE13134E017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.2.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:30:a6:23:ee:34:ba:ae:89:6b:79:61:ce:4e:cc:0b:cf:be:
73:dc:21:cf:ad:78:50:90:fa:a5:bd:2a:dd:0a:a4:a6:6b:0d:
19:a1:58:ae:7c:41:b4:64:ad:2f:45:0d:f7:41:23:b3:86:c4:
8e:bf:7a:44:4d:07:1a:e2:8e:51:8c:29:41:68:d1:a9:64:8a:
a5:f1:54:a2:ce:af:c8:a6:71:aa:99:a1:4a:9d:bf:33:22:34:
26:d8:eb:51:09:cf:dc:79:78:f4:7e:f3:2b:09:a8:5b:79:0b:
0e:04:e8:38:4e:9d:1d:8a:20:05:c2:ad:0b:e9:87:c7:22:d2:
20:b7:b4:89:72:64:34:a6:10:24:34:91:ab:22:d6:4b:1c:5b:
1b:b1:f9:11:ff:c7:51:e3:df:35:33:8a:97:90:56:5f:4b:e8:
be:43:21:1c:a9:5a:c3:e9:15:17:1c:d9:01:0e:0f:a4:56:1c:
72:f8:97:ef:a4:80:c9:3d:57:0b:b5:c2:34:31:70:cf:88:20:
2d:8e:4d:47:11:a3:e7:cf:2e:dc:4b:e0:b1:d0:b1:49:94:3a:
18:03:df:ae:d7:d6:6f:8f:43:5b:71:e2:fb:0b:63:69:4c:bf:
d4:f7:40:a5:a8:35:da:eb:25:66:11:8b:5c:86:c7:c3:d2:0d:
d3:65:a6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:11:56 2024 by rpki-client on console-ams.rpki-client.org