Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3426F548F86F11EE95B97C33017001B1.roa
File: 3426F548F86F11EE95B97C33017001B1.roa (raw, json)
Hash identifier: V9jy8aqa6RME1vh6eBFZB1HiUMNezI+EnzWf994Xuj4=
Subject key identifier: FB:DC:7B:19:92:26:B6:86:00:40:5B:34:83:4C:23:21:63:58:E9:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 823F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3426F548F86F11EE95B97C33017001B1.roa
Signing time: Fri 12 Apr 2024 01:51:40 +0000
ROA not before: Fri 12 Apr 2024 01:51:36 +0000
ROA not after: Tue 22 Apr 2025 01:51:36 +0000
asID: 18233
IP address blocks: 45.200.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33343 (0x823f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 01:51:36 2024 GMT
Not After : Apr 22 01:51:36 2025 GMT
Subject: CN=661893ab-dabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:29:16:af:33:5e:fc:f5:d7:85:8e:11:07:
1b:ca:6a:05:13:a6:6f:25:4f:4a:25:81:86:d3:78:
ce:38:4c:14:79:ab:81:a4:64:87:f9:cc:db:ae:e3:
68:6e:a1:54:fa:a9:dc:12:55:4e:df:d6:01:ac:1a:
54:dc:5d:33:cc:3a:b2:be:c2:0d:a5:d5:e5:ba:b1:
a7:f3:30:d5:f8:d6:17:20:93:33:88:1c:80:e9:f3:
53:0b:9d:7b:23:36:67:a5:e1:be:ae:38:33:c2:d9:
3b:1e:c6:cc:a7:9a:ae:e8:16:0e:3a:2e:c0:38:fd:
05:62:3a:9b:fe:48:9b:0c:a4:b6:92:bd:af:0a:e4:
01:a7:8a:9c:69:58:5f:d4:bc:90:6c:2f:ef:31:69:
29:6b:03:e9:5b:29:5d:77:50:2b:d8:1a:76:11:40:
dd:6c:f4:ea:61:7a:d0:7a:cf:15:e4:e5:bc:c5:cd:
6a:20:45:c8:47:c7:83:f0:87:b2:76:fb:09:d5:ad:
aa:26:5b:18:4a:a9:21:00:01:6e:e9:44:de:ab:22:
81:f8:23:1a:ed:f9:c5:e9:0e:97:c5:e0:4b:d1:dc:
f0:f9:07:41:7c:fb:cd:d4:ab:2b:84:98:d4:9a:5e:
2e:64:50:7e:8e:f2:1d:10:73:98:1c:47:57:24:0a:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DC:7B:19:92:26:B6:86:00:40:5B:34:83:4C:23:21:63:58:E9:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3426F548F86F11EE95B97C33017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.6.0/23
Signature Algorithm: sha256WithRSAEncryption
47:d3:11:b5:12:12:d6:fc:7e:ec:5d:03:ec:36:d2:a4:b1:22:
77:06:a8:78:c8:8c:17:3c:7e:a1:eb:1f:da:92:01:e4:a2:dc:
1b:49:85:9a:f9:47:69:22:b6:96:6d:f0:81:d6:b1:61:4e:5f:
be:a3:c5:c3:19:63:e1:c0:3d:2e:c4:f7:52:f7:36:b3:53:7d:
de:e6:b6:02:c4:23:91:e8:0a:b6:a8:ea:1a:d7:25:bb:fd:41:
a3:5a:07:82:43:bd:6f:a8:b8:f0:3c:2e:ca:59:9b:5a:c4:6e:
ce:9d:55:2c:45:0e:e9:1c:98:af:04:4f:d4:2c:d9:63:2c:18:
da:0a:ea:fa:2c:4e:c8:c1:73:09:c1:86:c5:01:60:13:0b:32:
d0:f9:ef:d6:96:be:3e:bd:0a:f7:5e:2a:77:2c:5e:44:eb:38:
60:33:f4:4e:00:9e:61:ea:e7:69:eb:01:dc:43:44:07:9c:87:
07:fb:66:5c:10:a8:91:3c:bb:ab:d9:35:4c:08:51:fe:05:03:
24:f2:ac:40:b9:2a:9b:27:a4:24:23:22:59:7c:5d:40:c9:cc:
32:da:c5:dd:84:97:99:f1:05:ba:65:f6:5e:d8:59:be:55:4d:
ae:f4:63:73:5e:44:cb:50:66:d0:ae:41:0a:db:51:74:00:03:
95:05:ae:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:24 2024 by rpki-client on console-fra.rpki-client.org