Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21F662F008FB11EE83752C384AD9E6FC.roa
File: 21F662F008FB11EE83752C384AD9E6FC.roa (raw, json)
Hash identifier: 63bgjxDWqgCvKn9aLce+JyPVdfW0p/pTIFZEOMz64/M=
Subject key identifier: FD:F7:12:FA:DA:F6:1A:1D:7B:01:37:A9:2A:32:04:57:DC:EC:2C:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2B45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21F662F008FB11EE83752C384AD9E6FC.roa
Signing time: Mon 12 Jun 2023 08:28:39 +0000
ROA not before: Mon 12 Jun 2023 08:28:36 +0000
ROA not after: Sat 25 May 2024 08:28:36 +0000
asID: 131178
IP address blocks: 45.201.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11077 (0x2b45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 08:28:36 2023 GMT
Not After : May 25 08:28:36 2024 GMT
Subject: CN=6486d737-c0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:c7:a5:cc:be:d0:28:d8:86:94:ae:ba:e5:
32:18:12:4a:2e:55:48:8f:df:18:8d:e6:f1:70:a8:
7c:05:19:ce:2d:d9:8b:d9:9e:57:8c:7e:8a:6d:36:
17:19:91:43:11:e1:bf:c4:be:a9:2f:62:ea:f8:33:
af:56:d1:40:2a:1c:e5:c3:7e:96:b9:52:6c:44:2d:
d2:56:5b:4a:cd:fe:18:1c:1f:cf:d8:cb:3a:6f:5d:
f1:fe:85:fb:68:f9:29:e2:f2:33:10:eb:7e:98:21:
ba:da:03:4b:4f:da:bb:0d:f2:67:e7:59:2e:bf:59:
74:4c:82:73:5a:35:ab:37:cb:b6:6d:1e:08:a3:0a:
a3:f6:ce:b6:56:c1:aa:d1:9c:4a:0b:fe:b8:21:b7:
c6:bd:0f:79:1a:6c:c0:c1:83:4d:99:25:4d:eb:53:
54:c5:8b:a7:1c:d3:9c:cf:ae:3f:d9:38:5e:3e:28:
60:d9:dc:9a:3c:b7:35:b4:aa:30:9c:d4:93:ab:03:
9a:95:0f:60:8f:d6:3d:a6:bd:2c:b4:5d:b8:ce:8d:
21:f4:f6:e8:87:df:33:b7:75:e9:8d:54:6d:91:c0:
d0:47:8c:75:53:fc:ba:92:83:49:05:be:a4:71:f7:
8d:87:ce:00:5d:61:c3:36:e1:38:65:89:a8:d1:5d:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:12:FA:DA:F6:1A:1D:7B:01:37:A9:2A:32:04:57:DC:EC:2C:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21F662F008FB11EE83752C384AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.204.0/24
Signature Algorithm: sha256WithRSAEncryption
99:be:2e:01:fd:cf:84:cc:4c:34:e0:ca:7f:4d:b0:49:18:e8:
1e:08:26:10:88:1e:70:de:0d:15:5f:2d:e0:3c:65:7a:8a:f4:
a2:0c:b4:37:1a:0c:d2:41:02:4a:c2:b1:c9:82:93:92:f5:83:
33:b7:57:4c:37:b3:1f:91:05:ee:08:83:b1:4d:09:e1:cc:92:
a5:34:d1:da:b5:d4:3b:ff:b3:a8:a1:89:32:7a:bf:00:7f:dc:
cb:8d:2a:58:31:60:bb:04:3a:4e:c2:57:62:a7:b1:51:24:4f:
2b:56:4b:a1:48:8f:f8:b7:f4:42:45:c3:78:c0:32:b3:54:da:
94:66:39:48:99:74:08:7e:75:ad:5c:f4:cb:4f:b1:59:74:af:
58:4d:3a:13:58:ba:ea:03:54:f8:3d:99:b0:0e:44:df:d7:bc:
1b:e4:94:95:5d:ba:cc:7d:a5:0d:b8:cb:75:8d:c2:09:d2:02:
84:1f:82:ad:aa:69:ff:65:7a:87:ff:99:6c:be:c7:ae:fb:e1:
f8:5f:74:1b:be:54:ce:0b:69:43:93:a9:25:56:40:84:fa:c4:
b5:5b:60:91:48:af:a3:06:7a:47:14:5f:e3:af:10:b5:29:b1:
bf:3a:39:a3:26:75:f0:04:0d:a1:ec:25:c5:72:0e:d2:19:40:
e4:a2:dd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:30:11 2024 by rpki-client on console-fra.rpki-client.org