Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B4EC02C27E111EFA98D8CF87CDC24C2.roa
File: 1B4EC02C27E111EFA98D8CF87CDC24C2.roa (raw, json)
Hash identifier: 5QYTG1rl3gkmDyQ0ZJkW8lPIYiKnsNYo+aueCxTQGK8=
Subject key identifier: AB:63:0D:50:2B:1A:46:A6:68:30:4A:43:1F:29:10:6D:72:38:1E:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 90B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B4EC02C27E111EFA98D8CF87CDC24C2.roa
Signing time: Tue 11 Jun 2024 10:55:25 +0000
ROA not before: Tue 11 Jun 2024 10:55:21 +0000
ROA not after: Mon 12 May 2025 10:55:21 +0000
asID: 140951
IP address blocks: 45.206.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37046 (0x90b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 10:55:21 2024 GMT
Not After : May 12 10:55:21 2025 GMT
Subject: CN=66682d1d-0b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:3c:85:70:64:ce:11:ca:12:ac:b6:55:dd:
a9:09:56:24:17:22:5e:a2:65:b1:92:fb:46:f5:57:
d0:c0:0a:85:24:29:f0:cb:49:1e:eb:5e:0f:95:a3:
40:21:0d:68:38:78:ed:f1:65:47:fb:ec:41:b2:f5:
63:9a:77:ae:62:bc:04:4f:75:0c:32:42:f7:d6:51:
c8:03:e3:03:b6:2b:3b:8e:e4:b8:85:42:46:5a:15:
fe:3f:9c:31:31:db:1c:50:04:76:ab:d1:d9:dd:30:
96:43:72:ac:0d:53:07:dd:fe:d7:19:7a:5b:a0:4b:
ec:ca:3f:97:4a:9e:12:fa:9e:69:f5:99:03:65:c9:
ef:80:2b:ad:12:78:1e:3a:a0:1b:fa:17:76:dd:a0:
04:2d:10:4a:52:af:db:67:d9:8c:b4:f9:18:86:12:
2b:d0:39:53:66:ae:e3:68:d7:da:0b:7a:98:26:34:
c2:bc:68:34:63:cd:c2:c1:80:1f:b4:ad:8e:30:af:
d8:6d:88:bb:2c:aa:dc:1a:3d:55:d0:79:37:a2:bb:
d9:21:4e:35:68:78:ac:04:a9:09:d3:5c:66:89:7d:
e6:33:91:49:b4:38:ba:1d:ff:d2:75:b1:7b:35:73:
a9:1e:3c:98:2e:21:96:b3:6f:46:8e:76:74:5b:d5:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:63:0D:50:2B:1A:46:A6:68:30:4A:43:1F:29:10:6D:72:38:1E:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B4EC02C27E111EFA98D8CF87CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d2:81:07:c2:2f:cd:fe:3a:f3:62:3b:e5:3b:01:68:68:7a:
95:18:64:39:07:b6:be:0a:00:44:2f:84:cf:ee:bc:33:e0:28:
62:cb:e5:79:18:2e:b8:e9:a5:f3:b8:8a:b8:19:b3:2b:e9:b9:
a9:a4:cf:28:05:2f:fb:85:8e:49:80:25:a2:f8:fd:c5:60:0d:
5c:66:d8:ff:7f:bc:b6:7e:bf:e6:1f:aa:2b:3b:e2:4e:c5:8d:
7a:9a:e4:63:4d:85:85:e0:8f:1f:5d:68:cd:9a:90:db:09:9a:
7a:a2:5c:2c:d6:ce:c3:b0:2a:df:b8:e0:87:d5:cb:b6:6d:69:
1e:8d:5e:71:66:e2:90:c3:0b:51:8e:c7:d6:f3:72:86:20:3a:
fe:df:47:17:6f:63:7d:8d:d0:11:64:91:0f:71:88:a8:38:8b:
6a:72:fb:54:36:fb:73:80:c6:9d:36:5f:65:d7:22:71:6d:69:
7e:ff:dc:92:b4:e8:c9:1a:1f:69:f2:24:85:a3:a5:d3:ba:44:
75:30:a9:05:08:98:ae:68:b3:7b:d3:ed:e6:bd:2d:ae:6a:0a:
0b:bf:71:70:84:b5:e3:15:9b:21:a9:bd:91:09:8b:0b:fe:65:
57:6a:47:9f:01:cf:8c:f8:6b:4c:2d:40:22:20:d7:c6:62:d2:
d0:83:a6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:21 2024 by rpki-client on console-ams.rpki-client.org