Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2245819EC8DD11EE8E392FAF775412E6.roa
File: 2245819EC8DD11EE8E392FAF775412E6.roa (raw, json)
Hash identifier: jbGnlrCbMROj9mltbI/a203ceSOBcCYH/2UqPgSCiyE=
Subject key identifier: AE:0C:2B:F8:C0:64:BC:3F:04:BB:E3:38:D4:BF:2C:FA:62:EE:6E:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 6F20
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2245819EC8DD11EE8E392FAF775412E6.roa
Signing time: Sun 11 Feb 2024 12:57:38 +0000
ROA not before: Sun 11 Feb 2024 12:57:35 +0000
ROA not after: Sun 19 May 2024 12:57:35 +0000
asID: 397071
IP address blocks: 45.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28448 (0x6f20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 12:57:35 2024 GMT
Not After : May 19 12:57:35 2024 GMT
Subject: CN=65c8c442-4211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:16:98:56:4b:0b:82:01:a0:96:88:d2:51:
57:60:f8:10:0c:38:ad:e0:3a:e7:40:b2:68:5f:4d:
5d:ea:cb:c0:f1:76:2b:de:89:eb:de:04:b5:57:28:
1d:59:5c:3c:a1:dd:62:3f:84:13:7e:fa:77:59:51:
61:ac:61:2e:28:6f:ec:ed:d7:63:7d:c7:ee:01:84:
8f:f3:38:dd:55:96:d6:06:9a:3a:3e:02:0a:6f:34:
09:65:02:c8:18:15:8f:01:33:ff:f7:c0:ae:24:88:
3e:1a:62:cb:72:ad:dd:7b:9b:91:9f:a9:ff:32:3e:
d0:4b:4d:88:67:03:35:9d:89:63:be:7a:c7:de:3d:
df:18:cd:42:5a:0a:e4:ad:fd:92:d0:3d:02:a0:2a:
a4:04:09:da:f6:6b:44:d1:db:f5:c5:a6:af:21:a5:
1f:fc:cb:88:78:f7:26:3e:53:b6:90:8a:05:38:56:
9d:a5:d3:84:fa:56:c3:12:43:34:97:66:f7:c0:9c:
bf:2b:89:18:ea:3b:13:fc:d5:93:0a:af:0c:53:ae:
b4:34:63:46:b1:e9:d4:1b:72:28:10:74:5f:94:84:
62:4c:ce:27:07:28:14:c7:ff:e2:4e:31:81:c8:07:
97:94:06:05:4d:70:ad:ba:e4:32:4e:39:4b:38:3c:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0C:2B:F8:C0:64:BC:3F:04:BB:E3:38:D4:BF:2C:FA:62:EE:6E:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2245819EC8DD11EE8E392FAF775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1a:65:4a:05:d1:82:69:af:e5:2a:25:4f:0c:b3:19:db:99:
01:ca:5d:45:83:9b:73:21:c4:1e:49:f7:51:76:60:66:28:ff:
1b:89:df:ee:1b:e2:49:a4:8c:3b:68:13:f3:2f:0b:84:bf:74:
ef:35:e9:ad:11:05:4f:e3:ad:b2:41:21:ed:c8:56:85:af:27:
96:46:33:e2:bf:62:73:b2:5b:e6:c6:e1:71:aa:ec:17:3d:d7:
49:4d:b0:02:e6:d6:65:58:c5:6b:ce:8d:f9:23:f3:d4:de:14:
89:4b:72:33:92:22:82:a3:43:75:96:2d:f3:6b:86:6d:ca:64:
d4:c7:38:18:9c:4d:21:20:6c:cf:49:be:fa:64:6d:c5:e4:05:
11:77:42:58:88:0f:f9:0f:00:c1:c0:63:9e:18:b5:9b:cc:41:
8a:3e:47:76:c9:de:55:bf:e4:a7:25:dd:ba:d7:52:84:d8:20:
3b:c8:41:05:47:a4:27:96:82:dd:99:79:a1:6e:14:67:de:03:
f5:06:b7:95:99:fa:22:79:72:eb:01:57:48:12:f6:50:27:75:
b9:dc:69:3d:4b:3d:64:9c:5d:1c:33:d1:4d:33:ff:35:21:55:
ff:6a:4f:51:ae:f3:9f:1f:25:36:bb:e3:80:8c:27:e9:a8:8f:
b1:00:91:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:49 2024 by rpki-client on console-ams.rpki-client.org