Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A9E7E1827E111EFA490B7F87CDC24C2.roa
File: 3A9E7E1827E111EFA490B7F87CDC24C2.roa (raw, json)
Hash identifier: +v7NRjCc2JkNtmeeB1u4lIGVqC5fz2dW3Rq8TcdRIso=
Subject key identifier: AD:B6:4E:82:3E:61:54:F2:03:B0:81:AA:D7:19:C0:51:CB:B1:C4:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 90B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A9E7E1827E111EFA490B7F87CDC24C2.roa
Signing time: Tue 11 Jun 2024 10:56:18 +0000
ROA not before: Tue 11 Jun 2024 10:56:14 +0000
ROA not after: Mon 12 May 2025 10:56:14 +0000
asID: 140951
IP address blocks: 45.198.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37048 (0x90b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 10:56:14 2024 GMT
Not After : May 12 10:56:14 2025 GMT
Subject: CN=66682d52-31a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:d5:70:f4:d8:3e:cb:61:90:b4:31:9b:b3:
69:6e:97:69:cd:23:0e:f4:3f:2e:19:d0:04:d9:d1:
c8:07:11:4f:60:5c:03:3d:a0:4b:eb:f1:98:96:70:
33:14:2c:df:9f:ce:3a:da:97:66:b2:db:0e:b1:65:
81:4c:6c:1f:50:19:ee:bc:a7:eb:e6:1f:5a:9d:49:
78:89:a8:2e:9b:d6:25:66:dd:99:d0:f4:c4:2e:30:
b2:f3:26:57:7d:50:fd:a9:c8:4f:76:9c:96:34:e2:
f2:c3:0d:46:ec:3a:50:ca:fe:c7:a2:53:5a:7a:d6:
12:b5:04:7f:41:2e:f9:1f:6a:25:1d:f9:61:1b:a5:
3a:41:ff:8d:e4:fa:ed:90:01:2a:4d:4d:96:9e:f1:
a3:55:6f:b4:c9:33:81:d0:9f:02:02:6e:80:e4:5c:
76:ce:3e:82:32:4a:3a:ef:4e:63:db:1a:0d:cb:22:
72:2c:a0:97:61:c0:09:99:71:7b:8c:e5:8e:94:71:
4c:2b:3d:b7:20:8d:76:ae:68:2e:7c:8e:a6:ba:10:
be:58:d3:51:cb:fd:d8:ef:f7:7c:38:c5:b2:41:00:
e9:27:8e:1f:97:43:33:0f:2a:50:6d:a8:df:59:27:
bb:df:31:5b:73:76:df:75:e3:be:9a:b3:60:be:ff:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B6:4E:82:3E:61:54:F2:03:B0:81:AA:D7:19:C0:51:CB:B1:C4:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A9E7E1827E111EFA490B7F87CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.2.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fa:19:9f:dd:7b:a4:be:b7:45:23:6b:24:c6:ff:31:db:55:
5c:7b:f3:2f:42:81:cd:1e:9d:26:82:a3:88:54:26:78:bb:f8:
1d:e3:14:7d:ad:c1:bb:b9:07:9f:b2:2b:de:e2:64:05:69:93:
51:a5:a1:e7:26:bc:0a:ac:ab:20:9f:a2:36:27:20:ac:23:55:
8c:e3:2d:d4:22:1e:42:45:0d:15:89:bc:c7:26:f6:d8:1a:97:
70:53:30:6d:6b:d8:ec:f0:be:13:a6:28:c9:a0:80:e3:50:c8:
91:1a:19:e3:90:e0:2d:0a:2c:86:7d:25:2b:83:09:61:c1:bd:
c9:2f:4d:e5:11:76:76:47:c6:11:82:f7:83:fa:83:8d:0b:e8:
b1:0b:5e:6c:57:34:0d:ad:96:3b:e2:d6:81:98:ed:a5:d7:e4:
46:dc:6b:c6:65:cd:67:84:da:7e:28:e7:99:b0:f1:19:d0:95:
e2:c6:8b:da:ed:ca:f3:b5:f9:a4:28:f3:84:b5:1b:64:d9:b7:
a4:05:03:6a:70:21:24:84:8a:af:d4:e1:72:02:22:d9:6e:ae:
2b:75:2c:e5:9e:3b:41:37:c5:70:0b:7e:80:2b:b8:bc:04:a0:
94:ff:c8:ae:9d:6c:3a:6f:04:1e:2b:37:51:ba:ed:1d:3f:88:
9f:19:4e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:00 2024 by rpki-client on console-ams.rpki-client.org