Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40B91B88DB9111EE81DB3D76775412E6.roa
File: 40B91B88DB9111EE81DB3D76775412E6.roa (raw, json)
Hash identifier: XDO+WopC03sFhGxP5Met9qn+YiH1owbfW34Ok+9KzRg=
Subject key identifier: 9E:24:BC:2B:84:E3:AA:E6:FA:55:C2:45:39:07:ED:29:74:C3:41:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7B6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40B91B88DB9111EE81DB3D76775412E6.roa
Signing time: Wed 06 Mar 2024 08:12:20 +0000
ROA not before: Wed 06 Mar 2024 08:12:14 +0000
ROA not after: Mon 20 Jan 2025 08:12:14 +0000
asID: 135097
IP address blocks: 45.195.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31595 (0x7b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 6 08:12:14 2024 GMT
Not After : Jan 20 08:12:14 2025 GMT
Subject: CN=65e82564-cedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:91:e0:47:66:c3:15:d6:06:c3:67:ff:84:
99:d8:f0:53:22:91:2f:8a:95:61:bf:bc:f2:0a:6c:
9c:36:73:f6:23:b5:ba:ef:d8:22:b3:eb:a7:a3:e2:
f8:82:a5:17:be:09:01:80:89:f0:39:cb:b5:0e:c7:
85:8c:7a:6c:b4:0b:ff:2f:ed:6c:67:e0:e7:3e:15:
d3:47:2d:a1:b0:ab:b5:51:48:9d:3b:da:09:92:e3:
0d:d9:54:71:f2:ec:8d:b3:73:c6:2b:59:b7:49:5e:
53:48:3a:a1:bc:22:cd:3d:a8:f4:ca:34:d1:9f:cc:
e7:7c:67:19:cc:95:f3:48:5d:e0:b1:23:c5:40:d3:
9f:9d:be:61:83:8b:4c:3f:40:8c:ac:9e:50:3c:44:
11:16:bc:62:89:8c:1c:67:0b:36:1d:70:39:34:a0:
a0:fa:14:a8:c2:ff:c5:a0:2e:bf:62:41:e7:7a:b8:
7a:b3:55:24:f7:46:f6:2d:f1:0f:51:5e:c1:a1:55:
f7:01:0d:8c:d0:05:ba:3e:1d:15:61:76:08:7b:f9:
93:0b:04:3f:f6:0c:b0:87:d7:30:e5:ab:05:33:9b:
f1:a0:7b:de:92:20:1b:3d:e7:cc:7d:04:18:af:c4:
cd:1e:b7:e3:6a:c8:22:c7:cf:5a:ff:d1:6c:09:e5:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:24:BC:2B:84:E3:AA:E6:FA:55:C2:45:39:07:ED:29:74:C3:41:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40B91B88DB9111EE81DB3D76775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.140.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:30:a0:d8:de:dc:b9:ff:f0:9f:6a:52:16:22:bf:d7:5c:3c:
a9:d7:fc:0c:08:99:39:93:54:76:4d:21:1b:24:98:0b:00:f3:
c3:e1:ab:43:78:0a:d7:25:ab:32:1c:9a:7d:6d:92:7b:43:c5:
73:d6:87:2c:b4:45:68:87:71:42:ca:20:c4:b6:7e:fd:02:3a:
7b:c3:12:3e:15:73:97:e6:0d:17:5e:df:18:67:9a:cf:ce:3f:
10:ae:ec:3b:ac:bd:4b:91:f8:00:80:ae:d9:24:96:d6:16:2e:
c8:3e:ce:2a:bb:66:f1:f5:32:56:1f:4b:54:ef:5e:25:d9:09:
44:1c:6f:44:57:73:ba:28:3e:9a:5d:a5:29:dc:79:8c:b8:96:
e5:9d:05:73:aa:22:db:15:20:57:60:8a:8a:0c:82:02:5c:c6:
54:f6:f8:93:d0:56:fa:c6:6e:bf:0a:0b:d4:98:ee:28:a7:70:
3b:5a:90:64:1b:30:73:90:74:a5:68:30:d8:cf:38:0b:cf:ee:
f1:0f:82:bf:df:2c:a1:47:a2:e4:dd:2f:1b:51:b8:29:59:c7:
9e:57:f3:b2:1b:b0:87:74:5c:d6:8e:ae:9e:6d:5b:1d:98:d3:
1f:fe:1a:48:65:82:56:be:c0:ce:d9:55:f2:5f:68:92:30:ad:
99:d6:4f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:15 2024 by rpki-client on console-fra.rpki-client.org