Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4278217C050D11EE9E89B9734AD9E6FC.roa
File: 4278217C050D11EE9E89B9734AD9E6FC.roa (raw, json)
Hash identifier: RMd9RBnv+UrG/+AqsCWdzIE/NmPm9wCgVXL+m5JzAbU=
Subject key identifier: 6F:26:A3:6F:69:20:F7:55:23:E8:47:23:62:B5:5D:18:E1:91:C1:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2A0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4278217C050D11EE9E89B9734AD9E6FC.roa
Signing time: Wed 07 Jun 2023 08:28:20 +0000
ROA not before: Wed 07 Jun 2023 08:28:17 +0000
ROA not after: Mon 30 Dec 2024 08:28:17 +0000
asID: 984
IP address blocks: 45.202.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10763 (0x2a0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 08:28:17 2023 GMT
Not After : Dec 30 08:28:17 2024 GMT
Subject: CN=64803fa4-f4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:c4:97:a5:84:fc:f7:0a:d2:f8:ef:2e:62:
46:52:7b:ef:bd:6e:e9:fa:67:d5:6d:63:69:b1:24:
79:6e:ac:92:b6:6c:25:62:fe:f5:a4:9e:ec:5e:d4:
74:06:24:ff:a4:ae:54:6d:b1:91:64:6d:1a:60:9b:
c3:6b:7b:4c:ae:5d:ea:5a:38:9c:d5:2d:63:40:28:
44:69:9b:56:c4:dc:ec:ab:84:0d:a8:77:00:a0:c6:
b0:93:c2:98:e2:3b:1b:95:68:08:c8:38:0d:c1:79:
30:dd:90:50:ca:33:d3:4b:e2:8f:0a:84:1d:71:88:
1c:d5:99:e5:11:a1:63:e7:24:1a:a2:d2:44:7d:f7:
91:92:54:d5:72:33:ae:16:a9:92:4b:86:f5:74:8e:
4e:03:a3:3d:ab:21:6f:b2:38:17:84:66:4c:01:79:
20:26:56:2c:d6:01:8f:47:86:69:21:45:0b:92:41:
34:d9:20:4e:3e:46:3d:6b:a1:db:51:63:22:35:20:
c8:c0:f9:c7:ef:3a:e7:de:90:5a:2e:9e:f4:4a:1b:
73:ad:07:c4:d6:fa:27:9a:fd:4e:62:13:48:54:07:
50:79:d1:a9:07:f9:18:7b:e5:b5:38:d1:c9:15:97:
5f:9b:94:42:0b:59:e7:a0:ab:4e:c4:85:3c:62:96:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:26:A3:6F:69:20:F7:55:23:E8:47:23:62:B5:5D:18:E1:91:C1:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4278217C050D11EE9E89B9734AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:e3:45:e7:c6:9a:2e:db:19:69:85:93:1f:41:63:c2:27:7d:
43:66:18:ad:9a:0b:06:6b:f1:c5:68:1a:54:3f:e2:c7:68:09:
b0:4d:38:8c:bd:fb:66:ff:66:11:b5:4b:4a:75:70:82:f1:34:
9e:dd:a0:61:b4:81:6d:37:f6:9f:e0:93:b4:56:76:8d:bc:53:
74:c8:44:90:8e:87:d2:76:73:1d:b2:be:fa:0e:af:01:6f:bb:
30:d3:ee:59:2c:3c:65:82:5d:e7:be:9e:75:3b:24:24:49:2f:
05:06:14:a1:22:7d:17:80:eb:b7:27:42:d8:7f:23:82:f3:16:
e6:06:6f:f8:d2:50:98:de:ad:5d:e0:2c:a4:c2:1b:75:bb:56:
b5:c0:8d:d0:63:bf:8d:2b:d3:38:6b:ce:79:11:8a:97:14:e3:
e0:41:71:cc:d5:bf:08:e6:b2:d9:cc:b6:50:4f:fc:ba:73:ac:
fb:82:24:1a:e3:6b:e8:56:50:13:3e:75:02:a2:6e:9f:c5:f2:
02:1c:a9:d3:ff:66:b1:3f:0b:f6:e3:a9:42:c0:cc:a5:45:0f:
f5:6a:92:1e:a7:f1:3a:b3:17:aa:d9:f2:33:8e:11:fd:cd:1d:
0b:8b:c1:85:78:9b:c1:a3:af:09:d0:6e:ce:45:20:5c:bf:56:
a1:dc:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:07 2024 by rpki-client on console-fra.rpki-client.org