Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2221015E24A211EF9E5E7AF97CDC24C2.roa
File: 2221015E24A211EF9E5E7AF97CDC24C2.roa (raw, json)
Hash identifier: ux8jMy5F6zeZwzdMNvDAWtxnXLvNpiVn3ub2QW084IM=
Subject key identifier: 76:A2:86:FD:02:C4:7D:55:7A:EA:33:B9:CB:96:75:06:F4:23:53:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8FCC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2221015E24A211EF9E5E7AF97CDC24C2.roa
Signing time: Fri 07 Jun 2024 07:47:05 +0000
ROA not before: Fri 07 Jun 2024 07:47:02 +0000
ROA not after: Sat 07 Jun 2025 07:47:02 +0000
asID: 55020
IP address blocks: 45.204.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36812 (0x8fcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 07:47:02 2024 GMT
Not After : Jun 7 07:47:02 2025 GMT
Subject: CN=6662baf9-bdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:95:7e:8d:57:bc:93:28:1b:1e:65:17:f3:57:
12:80:f4:12:46:a9:d5:5b:d2:ee:ea:e2:95:d6:90:
f4:cd:b9:52:15:5d:9b:84:15:2d:83:e3:18:fb:99:
71:ab:5c:c6:ef:7a:3d:8c:07:52:33:99:8f:84:63:
b3:43:01:d8:2c:fd:33:1c:38:d1:2d:ef:b6:e3:85:
38:c5:84:ef:b7:17:8c:92:2d:d1:4e:cd:d8:ad:1a:
20:b5:93:f2:c1:5e:1d:8a:43:62:84:ce:ee:1c:2b:
cf:ec:56:be:06:ef:70:fd:35:bc:6f:7b:12:9e:d1:
72:80:ad:c7:bd:5d:53:7d:e2:ea:d3:32:a6:1f:66:
61:f1:93:5c:53:9c:a9:5b:61:ea:ac:6b:b5:be:ed:
fa:0b:af:c8:4f:35:43:4a:89:65:ed:96:ff:fc:f2:
71:f2:ad:10:c8:f2:7a:67:02:99:bd:7c:76:22:1d:
91:d2:3c:6f:e4:24:12:9c:7b:6f:9a:3a:22:9b:f8:
99:85:8c:3b:9b:18:dc:48:1b:28:f6:84:f8:89:46:
09:4d:07:55:cf:56:34:fc:33:9b:74:fc:a7:94:fe:
95:ec:09:bc:76:3a:ee:b1:41:6b:d1:7e:71:00:a8:
a9:ff:65:3b:09:0a:d4:e3:57:2c:7e:49:80:8c:20:
36:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A2:86:FD:02:C4:7D:55:7A:EA:33:B9:CB:96:75:06:F4:23:53:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2221015E24A211EF9E5E7AF97CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.4.0/22
Signature Algorithm: sha256WithRSAEncryption
18:74:bc:0b:07:e7:04:5e:fe:f6:9a:38:52:ab:8b:c9:8a:fc:
9a:7d:34:1e:4c:f2:2e:27:3b:3d:ab:2a:d2:14:ac:6c:67:75:
c3:8d:26:e1:6f:bf:df:49:98:13:37:19:8a:71:bc:2e:cb:2f:
3e:0d:b5:46:9f:0b:10:4c:d3:d5:de:8d:f0:0b:a1:11:3d:ef:
be:eb:4b:46:67:f1:3b:28:43:3b:0b:3f:22:08:7e:39:1a:8b:
8f:b9:b2:72:93:35:43:5a:51:df:c3:22:5f:ea:15:6c:68:fa:
e7:12:b8:18:f4:72:ea:7c:7d:8e:66:7b:03:70:52:6f:47:23:
be:fa:a1:05:0f:f4:78:6a:17:07:d1:80:9d:a1:d7:3a:dc:91:
47:2c:94:b2:8b:b3:2c:5f:ac:d3:9e:ac:b0:5a:4c:ad:bd:99:
9c:fd:ee:a8:c4:2c:01:6e:ac:22:79:90:24:8c:1d:f7:b2:7f:
23:ea:cf:f5:36:ba:53:19:9c:6a:8c:ee:e1:d1:c5:21:33:e8:
be:16:55:1c:49:f4:ca:75:a6:8f:a5:98:b2:cb:ae:c7:ce:16:
2f:58:f1:fe:8d:f3:2a:70:da:09:a2:e1:09:8d:8f:0b:e9:c6:
c9:bf:aa:ec:44:74:70:37:08:36:8f:01:07:80:a0:f8:cb:6a:
36:48:26:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:22 2024 by rpki-client on console-ams.rpki-client.org