Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39F05BA0014711EFA9A61950017001B1.roa
File: 39F05BA0014711EFA9A61950017001B1.roa (raw, json)
Hash identifier: FMjAHh708ejHEPbfN2YUx7N7cUnl6BNmqGa82uVYrCI=
Subject key identifier: 43:51:FB:54:49:86:A3:39:85:AE:74:09:0C:4F:95:C8:9A:F6:DC:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 842C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39F05BA0014711EFA9A61950017001B1.roa
Signing time: Tue 23 Apr 2024 07:58:10 +0000
ROA not before: Tue 23 Apr 2024 07:58:06 +0000
ROA not after: Sat 11 May 2024 07:58:06 +0000
asID: 9009
IP address blocks: 45.192.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33836 (0x842c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 07:58:06 2024 GMT
Not After : May 11 07:58:06 2024 GMT
Subject: CN=66276a12-e772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:3d:17:52:20:68:20:28:61:d6:76:29:5c:
cd:fd:ef:55:32:b6:52:a7:91:0e:fa:96:e5:33:47:
a6:be:eb:c3:72:0e:48:ce:ed:51:3c:52:6d:7c:c9:
21:0b:8d:be:9d:37:de:0a:79:81:e1:83:9e:69:44:
0a:39:78:98:6d:f3:83:77:b8:05:58:86:b2:ad:cd:
bb:ee:9f:1b:bc:02:4e:5c:12:e4:b5:39:cb:99:1e:
be:bc:36:77:53:f3:26:cb:47:e6:bd:69:64:52:d7:
18:40:38:5d:13:15:6f:e8:6d:1c:83:b8:cb:e5:b7:
40:60:46:13:36:55:ef:7c:7b:77:0f:02:a9:a4:1f:
44:b8:f8:04:f4:6f:ad:bb:36:c9:76:a8:04:1e:62:
29:1d:71:b0:50:81:58:96:05:a2:2e:f1:49:8d:f4:
7b:ae:68:eb:bf:94:31:5d:3c:69:a3:bf:0f:47:43:
ce:cf:f8:71:d5:af:f2:f1:87:92:0d:5d:bd:90:d0:
84:fa:4a:87:53:d1:e7:e8:5c:0f:c9:bb:1b:83:b7:
c0:da:56:75:aa:54:52:13:0b:85:38:a1:0b:70:3e:
56:e7:6a:60:ab:54:35:d1:ba:d2:5e:9b:c6:4b:31:
b4:6b:0b:a2:e5:97:a4:a4:5b:4d:b4:98:29:ef:92:
ae:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:51:FB:54:49:86:A3:39:85:AE:74:09:0C:4F:95:C8:9A:F6:DC:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39F05BA0014711EFA9A61950017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.148.0/22
Signature Algorithm: sha256WithRSAEncryption
75:cd:9c:aa:e6:3e:d2:bd:e2:2b:84:5c:e3:d2:41:2a:d6:2f:
d9:28:63:ed:98:4f:f7:65:11:24:52:6d:2e:d8:89:89:e7:d2:
fb:e9:28:a7:a3:45:60:a3:ff:59:6f:e3:63:a9:2d:9f:14:c3:
c6:89:5f:7a:52:e5:8f:6c:92:78:d1:6e:ed:16:e8:e3:ae:c2:
a0:5f:d8:47:49:08:64:65:9d:da:08:08:6e:d6:ec:0b:63:c0:
8d:d9:e9:0a:8e:0f:0f:3f:49:62:bf:1f:1b:c4:7e:e7:ff:31:
33:bd:64:8e:de:59:ba:f3:9f:f0:11:18:7a:56:f5:31:1d:76:
92:b0:76:08:c0:f0:1f:0e:7c:06:c1:5d:cb:66:5f:be:a9:c5:
c0:c8:1e:08:b6:b4:cf:5e:a9:36:b8:eb:ef:a4:13:67:82:ec:
4a:3c:6b:48:4a:a8:7a:93:4d:ba:aa:be:40:83:bd:99:32:52:
42:38:3b:1d:37:96:2f:79:a5:da:c5:b6:12:0a:c9:d9:64:25:
52:c2:ee:6a:c5:0b:ff:2b:33:c4:8c:c6:db:05:55:e1:f4:fc:
c2:34:99:2a:cd:e2:df:2d:de:f7:47:ec:b2:4a:5d:60:65:5d:
78:d0:0c:b7:2c:a3:39:c6:c5:46:06:0c:2e:df:ef:fb:89:c9:
03:9f:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:07 2024 by rpki-client on console-fra.rpki-client.org