Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28167BFC05BD11EEA779CB0D4AD9E6FC.roa
File: 28167BFC05BD11EEA779CB0D4AD9E6FC.roa (raw, json)
Hash identifier: igCqjHgRb982Jnulpf1TlAZRUlYCMpTY4UbjEqVeUq8=
Subject key identifier: 20:00:C0:3B:15:29:DF:21:87:81:0F:B6:65:53:EA:F3:15:06:F2:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2A10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28167BFC05BD11EEA779CB0D4AD9E6FC.roa
Signing time: Thu 08 Jun 2023 05:27:27 +0000
ROA not before: Thu 08 Jun 2023 05:27:23 +0000
ROA not after: Mon 30 Dec 2024 05:27:23 +0000
asID: 984
IP address blocks: 45.202.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10768 (0x2a10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 8 05:27:23 2023 GMT
Not After : Dec 30 05:27:23 2024 GMT
Subject: CN=648166bf-1bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:9e:12:92:36:9d:4a:cc:5f:06:08:77:fa:
03:f9:b3:ec:f7:da:99:6b:e5:6d:53:8f:52:9c:20:
4f:57:1c:9f:04:af:6b:d0:12:da:15:0c:b6:9d:6f:
1c:98:38:74:6b:41:a1:f1:f6:f1:ef:ca:bd:e8:07:
a7:30:7b:db:14:b2:ab:11:4f:ab:d8:0d:fa:0e:00:
10:6d:02:e1:fd:d5:90:db:3b:21:b5:0f:a9:8d:c6:
b6:e1:46:5b:b7:e7:a7:a0:0a:7a:bd:a5:c4:7c:7c:
7f:48:7e:90:8d:ed:13:fe:ab:3a:b7:b5:77:59:87:
10:60:8d:ef:2f:76:33:05:72:a2:97:0d:70:ab:25:
98:0c:27:a2:26:b8:cb:94:20:27:81:77:3f:fc:ed:
3d:15:5c:37:e4:4b:1e:41:70:76:de:81:06:42:cb:
4b:46:af:5c:cd:06:aa:52:0b:63:91:82:8a:2d:63:
fc:9c:3d:92:60:3a:ab:12:22:11:66:de:88:b0:34:
65:07:e2:fe:49:ec:82:cf:c3:32:d3:8f:da:e1:43:
20:f5:4a:e8:88:bd:9d:97:f1:2c:f5:5b:60:03:3f:
8d:41:b7:3d:42:72:0c:0a:27:b4:74:6a:d0:de:81:
50:32:bd:45:04:b7:74:0a:92:fb:f3:92:eb:a8:d7:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:00:C0:3B:15:29:DF:21:87:81:0F:B6:65:53:EA:F3:15:06:F2:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28167BFC05BD11EEA779CB0D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a9:b0:e6:47:d3:90:ed:a7:00:88:4a:62:4e:fd:3e:13:7a:8a:
e6:b6:1e:3d:d4:1e:5b:ae:9a:f7:86:cb:58:fb:06:ca:28:e5:
b5:18:83:7f:b2:38:c0:24:b9:e9:dd:85:99:4e:a0:fe:58:c2:
69:55:47:3d:d2:a6:63:37:ec:b9:1d:1e:f0:64:f5:7c:45:48:
6c:b7:24:7a:58:dc:46:ee:03:b4:43:5f:87:79:1c:89:c7:2b:
ad:49:b3:3b:2a:28:a7:e3:13:c9:80:62:97:99:54:cf:63:23:
c2:81:29:89:37:0f:ab:30:f0:4e:a7:05:58:5b:7d:77:12:9b:
4d:be:c8:d1:75:45:8e:e4:1c:08:62:c1:96:8f:d6:6e:5c:fe:
bf:ac:ca:36:b7:10:7d:b9:30:6e:77:24:3b:43:b5:a4:38:7b:
c7:12:1f:6f:31:4f:9b:80:30:0a:00:7e:88:2e:15:f9:d2:71:
ff:3b:65:b3:55:5e:a7:8f:0c:fd:c5:2c:5c:d4:a9:a9:94:b6:
e6:35:1b:6f:66:1f:bb:a2:6e:37:57:ec:fe:d2:56:16:f9:88:
df:0e:f3:69:8e:9c:a9:8e:ae:20:96:8f:e9:59:1c:0d:72:c3:
25:24:e0:a6:c5:0e:89:b5:b5:4c:3c:6c:91:60:27:b0:13:5a:
30:2b:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:50 2024 by rpki-client on console-ams.rpki-client.org