Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE2F380104911EE8726BE634AD9E6FC.roa
File: 1EE2F380104911EE8726BE634AD9E6FC.roa (raw, json)
Hash identifier: FdirTS6b4yoKm+lAvMijxD7W1GTK/5Vd1P6c53z9ZgU=
Subject key identifier: 36:62:41:1F:E9:E0:F2:AF:C4:04:80:5D:69:01:FE:63:2E:88:B9:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2CC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE2F380104911EE8726BE634AD9E6FC.roa
Signing time: Wed 21 Jun 2023 15:34:33 +0000
ROA not before: Wed 21 Jun 2023 15:34:30 +0000
ROA not after: Tue 25 Jun 2024 15:34:30 +0000
asID: 137184
IP address blocks: 45.207.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11461 (0x2cc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 15:34:30 2023 GMT
Not After : Jun 25 15:34:30 2024 GMT
Subject: CN=64931889-4ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:65:44:06:ab:2c:4d:30:e3:07:be:60:ad:
a3:32:ee:8e:ba:24:19:63:e4:55:27:6b:3d:21:82:
8b:b5:1a:7c:84:8e:2c:cc:65:f0:fd:94:76:9c:f5:
37:c9:41:b4:55:55:8f:3b:77:49:75:1b:8e:5c:43:
ab:b3:19:d0:d0:f2:96:07:8c:42:c1:29:0a:d9:2f:
84:d2:6a:94:24:ab:ff:36:02:0d:bc:ca:88:22:d4:
7d:ca:3b:c5:85:cf:38:67:7a:32:86:8e:ca:31:2a:
e6:92:71:ed:a9:2d:17:08:40:26:f4:78:9e:25:38:
29:3f:ca:d3:67:1a:6b:9c:d6:bb:f5:dd:6b:bb:fa:
8d:a5:b1:35:d1:b6:0b:95:c2:09:32:b8:57:e5:18:
8e:d6:b7:36:14:fc:c7:21:68:32:da:d7:d4:e4:a7:
73:d2:ff:73:41:38:3d:55:b8:6e:cf:a4:09:32:8e:
b7:7a:7b:87:f4:33:1c:cd:92:1a:a5:4c:51:ae:27:
e2:e5:4f:61:fd:22:3e:b9:b5:12:8e:fd:4e:b6:ad:
57:57:de:c3:a5:bc:65:6b:3a:9d:fb:52:0f:24:eb:
e5:be:ae:20:71:99:e1:ad:01:60:0c:f8:ce:10:f7:
73:29:7f:cd:b3:10:95:bf:6c:c6:b5:f8:50:36:f8:
9e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:41:1F:E9:E0:F2:AF:C4:04:80:5D:69:01:FE:63:2E:88:B9:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EE2F380104911EE8726BE634AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.169.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:a5:e7:4e:eb:df:c7:a5:e2:5c:8c:f6:87:c3:04:d2:cb:31:
9d:88:aa:21:f3:d6:59:e0:25:02:09:47:a3:bc:81:f2:c9:eb:
d0:d8:8f:65:2d:77:b0:26:c6:84:c8:45:2e:5c:12:cd:1e:80:
77:a4:ad:0e:0c:8e:4b:4d:90:30:8f:cf:02:7d:8f:cf:0f:54:
a8:cf:50:72:1b:20:84:ff:41:85:e1:0f:a4:28:05:12:f5:bd:
6a:d0:33:12:88:44:8a:0e:eb:4f:12:4e:6d:c7:1a:d3:f6:4f:
eb:dc:5f:ab:6b:fe:b4:37:6c:42:55:fd:bf:38:7f:66:0b:4b:
85:04:98:b4:bc:2d:83:61:3a:93:45:6d:7e:2f:01:18:e8:cf:
c6:5e:82:76:1a:47:93:88:58:2d:66:87:f4:d7:5d:59:e9:7e:
a2:b5:49:51:d1:c9:62:e4:66:86:b0:45:be:9f:1a:3a:5b:81:
bb:65:13:36:4b:aa:f9:c4:4d:fd:13:dc:c9:d1:80:bb:a0:ec:
40:69:07:96:91:13:8e:06:ce:ee:8b:07:2f:bb:ba:fc:99:1c:
f0:13:33:a3:c6:aa:14:30:b3:8a:d0:d7:ec:72:02:89:8a:25:
c9:92:82:ce:d2:71:c3:e0:ed:9d:0a:ca:b8:09:97:6b:55:8a:
58:4e:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:49 2024 by rpki-client on console-ams.rpki-client.org