Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36C7841A22EB11EF82CE25417DDC24C2.roa
File: 36C7841A22EB11EF82CE25417DDC24C2.roa (raw, json)
Hash identifier: rNq36AYToRkhsQccgHwDsRyvgNeUIvnjGY/XqWZMxMk=
Subject key identifier: BF:D6:6D:7B:E3:60:57:17:1D:73:87:7E:C9:19:E2:7A:7F:E8:20:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8F17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36C7841A22EB11EF82CE25417DDC24C2.roa
Signing time: Wed 05 Jun 2024 03:25:10 +0000
ROA not before: Wed 05 Jun 2024 03:25:06 +0000
ROA not after: Sat 24 May 2025 03:25:06 +0000
asID: 38901
IP address blocks: 45.201.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36631 (0x8f17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 03:25:06 2024 GMT
Not After : May 24 03:25:06 2025 GMT
Subject: CN=665fda96-c508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:2e:ed:ab:1d:48:a5:52:1d:9b:4a:ff:12:
2a:ef:1c:ce:55:48:61:0c:8d:00:6d:bd:50:6c:a9:
a2:8d:6b:f1:16:77:57:ff:51:4d:d5:a0:77:43:ea:
d3:ff:f2:9f:e2:8a:0a:0d:b0:a6:58:9b:30:26:5a:
0e:31:db:b5:a6:5f:8f:36:23:a9:0a:7d:14:19:4b:
83:77:6a:1e:8c:8e:93:c7:33:80:91:16:95:5a:dc:
f1:00:f4:a2:74:03:98:14:03:83:d3:f4:38:17:5f:
e7:83:2b:2e:1f:20:a9:f2:ab:4c:0b:ca:0e:1e:b5:
e1:e0:0c:30:a2:13:7c:1f:08:8f:fa:52:ac:31:c1:
b3:39:dc:67:44:6a:14:90:01:96:eb:35:a9:04:91:
25:16:38:12:56:f2:c3:71:49:37:20:60:a3:3c:99:
29:7f:0d:bb:9e:ad:14:82:ea:51:dd:1b:86:b4:75:
86:82:09:ec:57:a8:a3:2c:c1:8a:d9:02:06:84:c9:
9c:18:12:cd:d4:42:66:34:5b:b4:87:20:02:4d:67:
f5:81:27:89:10:c4:16:0d:06:c6:29:bb:88:5f:da:
f0:63:50:3c:1d:6b:9e:b5:22:61:ae:f0:b9:29:96:
13:84:d7:5b:84:9f:ba:67:7b:d8:c2:ce:7c:e6:89:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D6:6D:7B:E3:60:57:17:1D:73:87:7E:C9:19:E2:7A:7F:E8:20:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36C7841A22EB11EF82CE25417DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.143.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c9:d9:5d:37:cf:39:b7:21:d6:73:7f:e4:fd:3a:b6:24:83:
e2:a3:72:cb:ca:36:14:a9:a8:50:00:35:cb:e2:20:60:9c:a0:
8e:d0:eb:51:03:80:e6:42:02:cc:d6:86:38:14:0d:2f:82:9a:
e9:0c:ec:34:6f:22:ae:57:cf:48:77:c2:66:f6:b6:b0:c6:b2:
cb:66:5b:42:93:15:6f:b5:46:79:b5:72:ce:0f:4a:56:eb:78:
64:15:ad:98:bc:43:1d:a6:6f:88:82:d6:49:a3:33:47:26:a5:
0e:01:6e:11:e1:a3:fa:c8:df:75:b3:1f:9d:df:a9:94:fc:62:
c5:71:52:70:98:05:0c:b4:bd:d6:01:57:51:84:98:6e:5b:51:
14:a4:c4:6a:3a:3e:0f:a9:01:e6:60:19:96:f1:a7:6f:b6:c6:
bd:2f:c5:16:36:cf:59:4a:6d:d7:a2:7b:4a:eb:cf:c3:3c:f9:
98:02:d2:96:d7:cf:66:8c:b5:81:16:da:54:d2:d8:5b:8e:17:
33:4f:e2:5a:6f:ac:d7:1e:84:de:40:3a:85:ad:3d:c4:e1:74:
e2:20:0f:58:68:0b:7e:59:65:12:cc:48:83:95:38:b3:77:a5:
6c:ff:0e:d0:b8:0f:cd:94:ca:ea:75:a4:40:07:e3:8f:c7:56:
d5:ae:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:11:59 2024 by rpki-client on console-ams.rpki-client.org