Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2266B4A00A5F11EE826C84754AD9E6FC.roa
File: 2266B4A00A5F11EE826C84754AD9E6FC.roa (raw, json)
Hash identifier: MbXSARNcFU0qMCqXUb6fg0U2SJxdPXC8s+TvB5K/wOs=
Subject key identifier: 22:B2:88:28:E9:B5:A0:0E:3C:99:E8:78:22:A1:0E:0B:50:04:5B:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2C2F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2266B4A00A5F11EE826C84754AD9E6FC.roa
Signing time: Wed 14 Jun 2023 02:57:01 +0000
ROA not before: Wed 14 Jun 2023 02:56:58 +0000
ROA not after: Sat 25 May 2024 02:56:58 +0000
asID: 55020
IP address blocks: 45.204.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11311 (0x2c2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 02:56:58 2023 GMT
Not After : May 25 02:56:58 2024 GMT
Subject: CN=64892c7d-a54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:99:2d:3d:ab:4b:b1:a1:0a:78:1a:8e:71:
80:21:f3:af:1a:4e:a9:be:10:3c:b5:a3:31:4c:de:
43:e3:12:23:13:09:6a:65:15:c5:8b:83:9f:0e:cb:
94:21:bb:1e:1b:da:e7:27:ea:15:ae:e0:ec:df:ab:
00:38:9c:79:da:31:69:8a:6e:1d:60:32:55:e4:0d:
c8:b5:8c:51:62:54:10:59:d5:29:ef:cd:b2:dd:4e:
62:85:b2:c8:b4:29:c2:a3:ec:4b:79:9c:d2:89:22:
61:55:31:59:a3:99:2d:1f:4e:2d:2b:f7:e6:42:82:
39:f2:89:86:0b:ed:7e:96:47:d2:08:7d:e8:ba:1f:
22:5f:de:40:c1:fe:5b:18:4c:2e:e5:b3:7c:4a:0c:
d1:0f:ef:f2:3d:23:9f:ee:16:42:13:c1:37:d2:26:
8c:2e:d3:d1:7b:ba:e7:85:96:9a:3d:af:87:65:78:
95:36:5a:47:9d:1a:4d:7f:1d:73:18:3c:8a:b1:38:
68:70:14:32:f6:93:e0:64:ee:df:7e:8c:39:88:58:
19:d9:da:b2:87:8c:50:13:68:a0:45:c8:a7:b7:36:
30:a2:15:5e:57:66:f1:2b:62:73:58:cd:2e:49:c1:
f7:ca:b4:bf:4c:19:a0:26:c5:b9:c2:cf:43:98:4d:
c0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B2:88:28:E9:B5:A0:0E:3C:99:E8:78:22:A1:0E:0B:50:04:5B:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2266B4A00A5F11EE826C84754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.4.0/23
Signature Algorithm: sha256WithRSAEncryption
81:e8:90:65:98:72:61:93:c8:85:d3:63:18:48:99:70:40:44:
30:4b:1c:73:2d:a5:84:8e:c9:48:84:20:c2:ed:e1:16:a1:41:
da:00:89:62:83:7a:55:51:e6:f4:32:df:cd:9d:ac:ef:26:f7:
05:9a:ef:b2:58:a7:dc:96:2d:16:e1:ba:24:08:a3:cd:19:7a:
d7:83:0f:49:4b:38:1f:e8:75:e8:ef:ec:ff:23:b0:7a:d3:7f:
94:c9:31:09:33:c1:a9:b4:83:2d:67:e2:00:4f:00:27:06:e2:
09:92:4e:b4:65:76:39:84:d7:f0:f0:07:33:24:f0:0d:38:55:
8c:49:5b:b6:0b:a8:bf:b4:b0:9b:82:64:be:86:91:08:0f:91:
7e:dc:b3:99:43:4d:e6:86:4b:54:47:e7:08:ec:1d:67:a9:e9:
63:72:3c:4e:8f:9a:44:0e:56:85:66:ef:2a:67:d1:5a:90:4c:
6c:c4:17:c0:5c:e0:88:ab:af:71:85:30:a4:6e:cd:f1:74:77:
20:ca:54:6f:29:ac:de:6b:ff:e7:49:9b:d0:69:12:36:2a:ce:
49:b5:99:97:df:27:15:2c:b9:c3:47:d2:1c:d9:c9:61:5e:e2:
7d:d2:0e:7c:ac:6b:e9:15:f7:a8:e0:69:e9:cb:d2:4e:32:cf:
6b:99:bd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:05 2024 by rpki-client on console-fra.rpki-client.org