Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/486ADD28157911EE9C974A224AD9E6FC.roa
File: 486ADD28157911EE9C974A224AD9E6FC.roa (raw, json)
Hash identifier: evtzeRnuHWL2hDRwK3LeUowcwO0EXVdvftKWd6cI13I=
Subject key identifier: AC:A0:46:E3:B2:DE:8A:86:54:E4:42:C6:77:83:17:D7:39:6D:B4:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2DF8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/486ADD28157911EE9C974A224AD9E6FC.roa
Signing time: Wed 28 Jun 2023 06:01:55 +0000
ROA not before: Wed 28 Jun 2023 06:01:51 +0000
ROA not after: Tue 29 Oct 2024 06:01:51 +0000
asID: 135607
IP address blocks: 45.194.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11768 (0x2df8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 06:01:51 2023 GMT
Not After : Oct 29 06:01:51 2024 GMT
Subject: CN=649bccd2-f067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:79:a3:4c:27:fd:f5:f7:ae:d3:e5:64:4b:7e:
d1:d3:5a:3b:ae:b6:ca:92:a4:32:81:33:d2:81:4f:
0c:1e:fb:2f:4f:86:e8:e9:f9:ed:6f:1c:90:81:97:
bd:99:37:63:7c:7f:7c:d7:5b:51:37:c4:0b:af:51:
91:e9:5e:b1:aa:14:14:3e:ed:44:98:75:94:70:4d:
cc:21:c9:dc:16:62:2a:8d:88:de:19:a9:11:e1:8d:
ce:f8:90:ba:11:1c:aa:81:1e:d3:b9:3d:de:8e:f5:
11:63:ec:92:e2:7f:f4:7a:ef:28:8b:3f:e4:ac:58:
da:29:5a:d6:6c:66:58:95:5d:af:3f:98:6e:a2:fb:
19:43:5e:1b:81:18:47:d7:93:89:ce:01:47:7a:2b:
72:93:0d:96:c6:36:06:58:42:48:4d:63:f8:2a:fe:
97:8d:17:80:d8:77:99:0e:08:df:67:35:15:89:5e:
1d:fb:6d:ee:f1:5d:56:72:48:e9:92:4a:6b:fd:2b:
77:02:94:64:f2:17:3a:eb:8e:d4:d4:ea:02:21:f8:
3c:87:b9:cd:e7:f0:9f:f2:2c:da:05:7a:d5:a8:f3:
fa:59:a4:00:8a:a9:7e:aa:57:51:7c:02:a0:c1:76:
ca:20:a0:a5:a0:3d:2a:25:ca:bb:19:18:5c:24:36:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A0:46:E3:B2:DE:8A:86:54:E4:42:C6:77:83:17:D7:39:6D:B4:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/486ADD28157911EE9C974A224AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:7b:b7:b1:4d:00:9f:0f:2f:04:64:4a:65:33:13:77:47:cb:
de:c0:f0:20:41:6f:c3:7d:24:22:c3:43:b2:47:d7:4b:88:0f:
1a:a4:f7:cc:e2:b5:d6:57:64:9b:da:5b:96:f3:39:92:af:3d:
06:e9:ec:bb:cb:d8:4e:2f:93:56:4a:c3:be:5c:12:9c:dc:0e:
b2:c0:a4:87:a7:a7:03:71:54:2f:93:3c:e9:de:96:05:84:64:
44:c7:b8:89:bc:8e:78:35:6a:33:b0:ea:4b:e8:e8:74:3b:18:
e0:7b:f6:ad:a8:bb:1c:9e:74:5e:5d:dd:18:d2:2d:2c:ac:43:
8d:57:89:d1:fd:8b:9e:00:7c:f5:c7:75:f7:21:c9:3f:0a:76:
80:7b:c7:37:49:09:7d:ec:61:3e:63:ab:a1:6d:23:c6:19:96:
8a:bd:33:9b:3c:39:a2:7c:25:ad:42:44:24:da:53:82:1d:31:
2f:54:a7:4a:93:1c:62:ec:f7:bf:0f:b2:36:2b:b7:f2:c5:f8:
68:95:64:20:86:cd:bc:ca:7b:1f:6b:f1:e8:87:df:b5:17:af:
99:ef:54:c9:89:93:7e:f0:c6:e0:20:31:b3:f3:f0:37:27:95:
df:71:bf:27:b1:b4:21:b1:24:d2:b7:b8:17:0c:47:46:47:cf:
05:66:e8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:05 2024 by rpki-client on console-ams.rpki-client.org