Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CCD8124E8F111EDA6E29D574AD9E6FC.roa
File: 2CCD8124E8F111EDA6E29D574AD9E6FC.roa (raw, json)
Hash identifier: ZN3ZpR9IAi5DaUEwzOXEcnaKvFcB+QiZMum7UibVWO0=
Subject key identifier: DD:88:A8:62:79:AB:A2:D0:C8:6A:4D:0A:95:93:E7:27:7D:DA:6B:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 1F60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CCD8124E8F111EDA6E29D574AD9E6FC.roa
Signing time: Tue 02 May 2023 13:56:45 +0000
ROA not before: Wed 09 Aug 2023 13:56:42 +0000
ROA not after: Mon 05 Aug 2024 13:56:42 +0000
asID: 60446
IP address blocks: 45.195.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8032 (0x1f60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 9 13:56:42 2023 GMT
Not After : Aug 5 13:56:42 2024 GMT
Subject: CN=6451169d-505b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4a:7d:42:aa:91:36:7b:e8:dc:0a:a2:3f:b7:
4e:26:77:14:43:fb:9f:3e:b3:36:4a:2c:2d:d6:9e:
c4:fd:1c:72:be:56:80:28:41:17:64:71:39:b2:6c:
0e:59:9b:60:e5:3e:fc:64:91:5a:67:51:78:d6:f5:
d3:ea:d1:7c:d5:f3:27:43:51:7e:c7:33:8c:5d:12:
82:23:4e:5d:4a:eb:95:35:f1:8d:f4:b6:e4:51:b6:
64:46:12:10:4e:73:2d:61:88:05:cf:7e:db:a0:24:
3e:3d:48:d4:6e:b1:3e:ce:5f:fc:f9:79:5f:fc:18:
0a:f3:32:3e:96:28:00:19:f8:d3:07:0e:bd:2f:54:
59:ea:72:16:df:f6:09:8e:d3:64:ab:19:54:c5:39:
14:5d:4d:21:03:7f:5a:d1:38:e2:21:7b:fc:71:d5:
8b:3f:ac:e7:f2:0e:95:fe:df:11:f2:e9:94:3a:f3:
06:18:81:3d:19:71:1b:05:64:97:ea:ac:4b:bc:25:
a5:d4:af:0f:98:c9:b0:92:f3:64:17:fd:67:28:84:
37:fb:0c:ac:53:3d:00:30:85:1b:fc:77:29:20:25:
00:4f:1d:31:5d:1f:40:9e:e9:05:f8:ba:c4:35:3c:
8e:7e:ba:fb:e2:81:f5:e4:3e:02:af:0b:f0:d8:c4:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:88:A8:62:79:AB:A2:D0:C8:6A:4D:0A:95:93:E7:27:7D:DA:6B:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CCD8124E8F111EDA6E29D574AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.77.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7f:19:3b:62:24:e7:e6:63:cb:53:8f:44:ed:e5:4c:36:0e:
86:e7:d9:0d:18:54:60:76:c2:4d:2e:a4:5d:bf:94:fa:ea:42:
c6:ce:11:fe:b3:c0:f5:bc:bf:14:5b:26:4a:c6:4f:b1:83:89:
eb:58:6f:e3:4e:0a:47:e1:e2:98:f7:f7:b4:0c:24:fe:a6:0a:
27:7f:fe:6d:6f:e7:57:e0:37:9e:52:f0:f4:57:e3:03:d6:97:
93:3d:11:fe:d7:61:05:06:1f:c5:96:6a:f6:b6:1c:23:37:b2:
0f:fd:ce:84:9c:7d:c2:11:50:2f:e3:ed:6f:16:8d:ff:f6:5d:
d2:c0:15:60:4e:40:b3:3e:59:23:76:11:2f:18:28:c2:53:58:
9e:9e:e6:ce:89:62:b3:b1:2f:a1:13:87:4e:b6:bd:70:11:ba:
cc:ff:ae:f5:2f:01:bc:e3:ec:83:dc:05:94:45:30:07:8d:4e:
a1:85:ca:67:55:46:4b:20:3f:99:0a:a6:9e:8f:0e:6a:94:bf:
16:d4:64:af:c6:97:55:c5:80:2c:76:59:71:3c:85:d8:e5:0c:
c7:30:07:4f:81:52:1c:13:16:24:ae:ca:81:5c:a2:e0:de:c5:
27:18:02:60:77:82:17:af:fd:fc:7d:ae:ed:28:d6:6f:c1:7e:
87:d9:64:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:50 2024 by rpki-client on console-ams.rpki-client.org