Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/497CC93833A611EE9F498B7A4AD9E6FC.roa
File: 497CC93833A611EE9F498B7A4AD9E6FC.roa (raw, json)
Hash identifier: moDmhaCkp5//Sn+LuGs6qaDjsq7CTyw2BWHYK88qw9w=
Subject key identifier: 8D:79:7E:EB:CE:7B:B2:EB:E2:15:18:1F:5E:47:CB:FB:37:A7:8D:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3383
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/497CC93833A611EE9F498B7A4AD9E6FC.roa
Signing time: Sat 05 Aug 2023 15:39:38 +0000
ROA not before: Sat 05 Aug 2023 15:39:35 +0000
ROA not after: Fri 24 May 2024 15:39:35 +0000
asID: 38901
IP address blocks: 45.201.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13187 (0x3383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 5 15:39:35 2023 GMT
Not After : May 24 15:39:35 2024 GMT
Subject: CN=64ce6d3a-6e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:92:f7:9a:ab:7a:b7:bd:61:de:d6:fa:d0:ac:
33:2e:1f:da:a3:92:7f:c9:39:10:51:2c:b5:fc:67:
a3:aa:c0:88:43:53:94:a4:80:b7:d1:ce:f1:e1:94:
08:2e:05:5b:eb:29:68:6c:e5:58:5d:01:5e:b4:d7:
15:eb:8b:58:3e:f4:f7:ac:3c:81:de:9f:56:01:03:
ff:e8:36:44:9a:d0:99:e0:bf:fe:64:8e:ac:69:0e:
e2:e1:9c:68:0d:ae:75:97:1e:6a:83:43:00:33:69:
9e:16:e8:ac:ff:3f:48:0b:37:5f:8f:65:b1:51:54:
cb:58:49:bb:15:3a:00:d3:e2:3a:95:8a:f5:03:f9:
c3:ed:d6:a3:da:7f:cb:64:49:d1:fa:e5:75:ef:00:
09:36:a8:72:b1:42:82:3c:90:12:7d:0e:11:fa:47:
35:91:6e:af:23:da:c2:5b:8b:af:5b:a4:ba:ff:3e:
06:7a:e3:09:0a:08:ef:87:1f:a9:ea:cb:ab:9c:b4:
61:34:6d:90:31:ed:95:93:50:ce:f8:7c:12:40:39:
af:7f:49:3b:a6:69:8f:59:0d:10:20:e2:73:60:5f:
bb:01:b0:9e:a4:ba:79:be:59:70:20:ed:a5:23:d2:
a9:86:0a:9f:23:50:77:b9:44:c7:e0:d9:be:d7:44:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:79:7E:EB:CE:7B:B2:EB:E2:15:18:1F:5E:47:CB:FB:37:A7:8D:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/497CC93833A611EE9F498B7A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.143.0/24
Signature Algorithm: sha256WithRSAEncryption
97:fa:85:c7:b7:ee:4a:e8:f6:21:2b:6b:42:54:4f:49:83:99:
49:66:ba:66:cb:6a:da:8a:91:1a:d7:2d:d1:63:79:d3:75:0e:
ce:79:05:22:64:b3:f6:34:ba:a7:b6:15:ce:95:dd:f4:3b:94:
3e:5a:78:5c:55:da:2b:13:d2:11:30:05:30:6a:a6:ad:70:66:
a2:2a:37:2f:12:bd:7a:e2:fa:86:11:11:0d:b6:44:c7:90:e9:
23:e4:2f:04:5c:c0:54:b6:a0:e4:02:cd:78:8c:a2:94:e6:a5:
bf:38:81:ea:b2:3e:14:0e:3e:33:b7:05:2a:02:42:3c:89:91:
48:65:19:1b:d3:0d:5a:0d:01:ae:e0:dc:da:c4:ea:7f:6f:5c:
0a:1b:0e:ff:81:54:d7:c6:1f:bf:3d:d2:f5:18:d3:64:21:81:
f0:df:05:d6:35:ca:84:b6:00:fc:85:29:37:b6:e0:83:45:d6:
66:fb:d4:0d:1f:09:d3:e4:3d:09:1b:1c:5f:87:68:92:fa:62:
19:c1:53:30:10:87:08:15:0f:9f:8a:ea:82:da:6d:21:02:6c:
dc:fa:95:f4:8e:08:f5:78:41:c1:3a:52:6e:4e:19:44:9f:bd:
eb:da:91:c8:d9:fc:66:a0:31:96:bc:90:a1:82:da:9c:f1:2c:
94:fe:cd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org