Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A9121AA7EC811EE8158338A4AD9E6FC.roa
File: 2A9121AA7EC811EE8158338A4AD9E6FC.roa (raw, json)
Hash identifier: I1FHiQ20dk5A/gO1oHc2SDiMNfudYjGl8sKOjfW13YY=
Subject key identifier: 50:18:30:32:8B:D2:15:22:34:7B:C2:9C:52:BB:C4:2D:14:DB:F8:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 452D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A9121AA7EC811EE8158338A4AD9E6FC.roa
Signing time: Thu 09 Nov 2023 06:21:07 +0000
ROA not before: Thu 09 Nov 2023 06:21:03 +0000
ROA not after: Thu 07 Nov 2024 06:21:03 +0000
asID: 133847
IP address blocks: 45.200.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17709 (0x452d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 06:21:03 2023 GMT
Not After : Nov 7 06:21:03 2024 GMT
Subject: CN=654c7a53-8227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:54:21:c6:12:2f:a6:cb:b8:88:51:24:fe:
4e:d8:f6:f1:c4:e8:51:c5:f9:61:25:33:75:c8:be:
a1:2d:31:12:3d:ee:ab:ca:1f:27:d7:55:0d:42:18:
18:fe:f1:64:d4:20:24:2f:0e:16:e4:83:43:d2:3a:
3b:c0:0f:b6:d3:60:39:c9:a9:07:d1:9c:ad:a5:4a:
1f:aa:e0:44:3b:61:73:12:87:34:1a:4a:5a:a1:40:
a9:69:d2:69:c6:1e:12:c4:fe:c0:1d:ac:81:d4:32:
6a:39:1f:88:b3:e6:03:1e:97:b3:41:b2:fc:cf:b5:
2a:d4:61:3e:93:60:f3:c9:bf:91:24:ae:8b:2a:20:
8b:fd:b1:d3:fd:22:38:2a:1e:7a:c8:07:68:0c:16:
c7:4e:7b:f2:6c:0c:0b:52:3f:f8:4d:1f:ba:cb:c8:
76:e3:b5:9c:35:84:8c:39:79:68:98:e5:f4:c7:1b:
5a:47:61:86:44:ef:92:7e:60:f7:ad:88:e7:2f:9d:
2e:c5:06:d0:6d:c6:b3:c9:6e:34:1d:f3:37:63:7a:
f9:cb:a6:38:8d:a7:ab:4a:2a:58:f4:75:27:3b:db:
b0:13:c0:5f:ff:b1:4d:b9:e9:83:d1:6e:93:85:28:
94:ab:8f:e6:27:ef:fd:29:ca:bd:64:89:44:08:65:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:18:30:32:8B:D2:15:22:34:7B:C2:9C:52:BB:C4:2D:14:DB:F8:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A9121AA7EC811EE8158338A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.64.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7f:83:b4:6a:fd:f9:7a:ac:5e:83:a3:38:e6:07:b3:e5:fa:
e6:46:6d:88:74:d9:81:8e:ff:93:03:9f:a7:e5:24:f4:89:73:
1c:7b:ac:37:09:e1:f9:1d:3e:54:41:32:7a:c0:44:17:7e:ed:
6f:37:04:69:ff:80:a5:95:af:3d:74:dc:10:e3:ef:47:bd:bb:
8a:a6:d5:ae:df:71:e1:c3:04:20:7c:94:c2:e5:82:c6:9b:7c:
55:37:b4:1d:82:0b:91:24:2c:b7:c6:7b:e9:fe:aa:63:7b:dd:
5d:8e:d3:4b:d7:7b:7a:aa:6e:61:4f:30:42:a9:65:8f:03:9c:
3b:6c:f1:2c:5f:fe:8b:7b:5b:69:b7:3c:3c:58:ca:af:4f:c3:
67:31:72:ef:32:11:a6:c8:09:43:ef:15:95:38:11:73:20:aa:
a0:00:eb:5f:47:6b:39:a5:b3:2c:f8:67:84:0d:c6:7b:7f:48:
28:56:3d:92:2a:19:6f:0d:80:36:64:ab:c7:1d:01:95:7d:51:
fe:fe:31:86:b9:94:75:f0:d6:30:40:65:d6:0d:bc:9c:84:7b:
7c:2a:8a:b0:4f:16:87:70:19:a2:f9:a4:b5:25:69:ed:37:07:
2f:f8:20:80:8b:ca:b9:c0:fb:04:8c:fc:8b:f4:78:83:ed:95:
4d:52:0d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:06 2024 by rpki-client on console-fra.rpki-client.org