Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B4B580A4BF011EEB15C0D5B4AD9E6FC.roa
File: 2B4B580A4BF011EEB15C0D5B4AD9E6FC.roa (raw, json)
Hash identifier: TGaqOOdjUfQfoSfGt0tASOx1XHTVOQOSnKFFVg1sr3E=
Subject key identifier: 23:E8:25:6F:67:84:1D:27:B9:42:5B:38:C3:14:58:B9:37:9E:06:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3801
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B4B580A4BF011EEB15C0D5B4AD9E6FC.roa
Signing time: Tue 05 Sep 2023 13:28:59 +0000
ROA not before: Tue 05 Sep 2023 13:28:55 +0000
ROA not after: Fri 24 May 2024 13:28:55 +0000
asID: 131178
IP address blocks: 45.201.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14337 (0x3801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 5 13:28:55 2023 GMT
Not After : May 24 13:28:55 2024 GMT
Subject: CN=64f72d1a-095c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:92:79:db:bd:e6:65:41:77:cc:ba:70:99:
b7:15:99:67:fc:be:e2:4e:b9:d1:db:59:7b:82:50:
aa:67:52:b6:d0:a7:06:c8:70:9f:f0:70:ef:d8:4f:
62:2b:77:33:0e:18:01:6f:b4:1b:eb:09:10:c8:05:
59:1a:2b:47:d9:1b:7d:51:fd:1f:df:c2:93:0b:f1:
1c:1c:f3:35:c1:15:43:2c:03:1c:c1:00:b9:7e:c0:
43:c1:2e:2a:27:55:c7:c6:77:51:85:66:7f:36:12:
51:9c:5d:83:74:d8:07:69:7a:34:03:f2:c9:8b:35:
69:d4:fb:fb:24:e5:76:ff:c9:27:fc:07:b5:a4:b8:
30:74:ea:9c:53:9a:bf:b7:bd:fc:6d:9f:f5:c8:36:
0b:5d:a5:03:6a:70:9a:c4:4e:6a:c1:0b:d8:91:ea:
fa:07:60:a0:2f:0f:fc:9a:80:8d:98:ba:94:38:f0:
83:c7:7b:a9:a1:cb:56:ae:79:07:87:07:07:5d:04:
4e:fd:10:a8:85:be:2e:a2:1d:85:e8:be:dd:45:c8:
4a:52:eb:d1:04:2a:db:b7:91:f0:b9:e6:53:b6:87:
ca:3e:23:87:69:e6:44:ad:cf:c8:2a:21:22:fe:a2:
0e:8f:d0:ad:38:72:f3:d8:f7:78:79:38:e6:63:63:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E8:25:6F:67:84:1D:27:B9:42:5B:38:C3:14:58:B9:37:9E:06:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B4B580A4BF011EEB15C0D5B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.163.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ce:39:80:94:c2:19:8a:06:39:ce:f8:88:ce:93:eb:8c:12:
0e:f8:fc:41:d0:73:be:42:3a:9b:ab:8d:98:4b:ec:8e:28:28:
88:ef:6b:c6:28:04:63:39:ef:c6:a8:88:07:ed:d1:cc:df:c3:
0b:0a:96:c3:34:65:74:70:b6:c6:cb:f7:23:db:db:f5:ec:41:
04:7a:f1:86:8d:2e:8d:00:5e:79:d3:38:99:7f:7f:01:b1:f1:
ef:85:1b:85:e6:40:e6:d0:9d:01:19:bf:af:e0:f5:ac:b3:b1:
aa:70:69:d5:c4:7a:fc:e7:93:98:5f:c4:30:1e:72:6f:f6:2d:
9e:07:db:c3:23:5c:d1:b8:08:2f:61:c0:d2:f1:31:65:e3:9b:
92:e4:69:a4:ab:ff:8a:9a:53:57:e9:3f:b3:71:48:ac:6f:1f:
f6:d7:67:60:ab:56:ef:5a:0a:a7:a4:89:7d:49:eb:82:77:84:
36:de:64:80:13:ed:8f:9f:16:02:ad:37:e3:de:60:3d:94:cd:
be:21:60:97:cc:d7:ea:a4:c8:19:f5:1f:0a:5d:24:c1:5c:c7:
e7:2d:e2:ef:30:02:14:26:58:46:ea:07:e8:0b:30:b8:30:ae:
dc:1d:19:61:c4:a2:44:67:e9:f6:a1:0a:f9:7c:a0:6d:c6:e9:
8f:c6:91:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:41:20 2024 by rpki-client on console-ams.rpki-client.org