Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/337C5BE4FE1C11EE94ECE8FC007001B1.roa
File: 337C5BE4FE1C11EE94ECE8FC007001B1.roa (raw, json)
Hash identifier: GwK81ylWecSa4JIPv3nNTNXpPOl8/PTIdtkqrE/4L2I=
Subject key identifier: 3F:7F:20:D4:68:F9:AF:C0:06:75:7D:F2:E6:1A:3D:9B:7D:D0:63:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8382
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/337C5BE4FE1C11EE94ECE8FC007001B1.roa
Signing time: Fri 19 Apr 2024 07:12:37 +0000
ROA not before: Fri 19 Apr 2024 07:12:34 +0000
ROA not after: Fri 10 May 2024 07:12:34 +0000
asID: 142062
IP address blocks: 45.192.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33666 (0x8382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 07:12:34 2024 GMT
Not After : May 10 07:12:34 2024 GMT
Subject: CN=66221965-9c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:47:49:39:e3:d0:91:17:87:02:14:66:9c:
b7:9f:83:27:27:53:14:1f:2c:b9:1a:11:e6:7d:21:
dc:8b:73:ce:bf:f5:d5:4c:14:7a:8f:cf:55:08:eb:
f4:89:11:76:e2:ad:b7:c3:c4:20:14:1d:69:ec:4c:
2d:a3:82:e4:cc:06:5b:ee:47:a5:a8:c1:a2:11:73:
9c:3b:97:4f:17:75:1a:43:0a:cd:3e:c9:04:45:b8:
9e:fa:d8:ea:e3:42:c6:a8:ae:e7:d0:51:ac:9c:84:
2b:80:c6:ef:2b:55:59:f5:cc:66:38:b8:cc:13:de:
1f:83:d9:c0:36:48:7f:d7:06:99:4b:8d:69:07:43:
3c:ed:e5:7f:9c:74:55:e2:bd:a2:63:2c:59:3b:d5:
65:99:e1:5f:0d:83:33:92:37:9c:c6:45:87:91:49:
69:e4:cc:5a:78:c8:d2:b0:33:c8:34:1a:a9:d2:34:
58:6e:86:96:a5:f5:63:a9:0e:9d:df:24:8c:2b:41:
f4:75:55:c8:88:a8:f5:33:fb:96:32:c5:05:7e:59:
36:2c:40:d2:d4:5b:93:de:71:40:5b:b4:70:5a:8e:
6b:43:42:a4:5c:e8:6b:9e:e3:9a:c9:8f:f0:5c:5f:
37:64:92:81:91:91:e2:24:96:f6:0a:69:16:a8:60:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7F:20:D4:68:F9:AF:C0:06:75:7D:F2:E6:1A:3D:9B:7D:D0:63:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/337C5BE4FE1C11EE94ECE8FC007001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.0.0/19
Signature Algorithm: sha256WithRSAEncryption
57:15:be:92:de:a3:32:3a:63:4e:22:51:11:8b:7d:bc:e8:20:
0f:d3:00:f5:06:94:3b:4b:0a:22:2f:02:57:7c:ed:de:4e:92:
a6:22:b4:d6:03:71:fc:4e:a2:23:c0:c5:22:59:a1:df:d6:1d:
4a:e1:30:87:9b:76:12:c7:57:3f:cd:71:4e:2b:4c:3f:3a:6c:
3d:9b:77:41:e8:80:4c:03:e1:94:59:88:ee:5c:d6:8e:dd:de:
a8:3e:b4:56:c7:86:18:4c:b8:d5:56:37:1e:db:0d:e5:55:a7:
45:0a:8a:83:01:b7:84:eb:8a:97:af:6b:f0:12:a4:92:fe:1d:
1b:0b:14:94:45:77:56:3c:dd:38:94:2d:48:15:b8:6a:66:d6:
57:d4:a8:a9:da:d8:84:ba:ac:39:6c:84:2c:cb:37:94:f7:ce:
e3:d6:5f:16:39:5e:ff:26:e1:52:a9:b1:a6:32:34:e4:0b:18:
69:93:f9:1f:ac:25:3d:22:c5:f8:86:83:68:c2:93:3a:7c:bb:
75:1b:b7:58:a0:e1:e0:39:ec:6c:dd:a2:36:83:6e:b0:8c:40:
ff:e4:2f:51:bd:0d:99:5c:c5:ca:11:06:21:d4:ad:4e:5c:94:
e7:62:c2:8f:04:f4:90:1f:fb:a0:02:77:65:6d:df:40:a3:2a:
d2:41:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:06 2024 by rpki-client on console-fra.rpki-client.org