Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AAC0C4C155611EEAD0800334AD9E6FC.roa
File: 4AAC0C4C155611EEAD0800334AD9E6FC.roa (raw, json)
Hash identifier: 423+wqn7IfmXbHCgdBru8ZzwV8QBzpCYmDVK9kM09RI=
Subject key identifier: 06:BA:4A:C7:D6:38:7A:85:F6:CC:20:8F:E7:F4:72:F5:F5:6D:6A:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AAC0C4C155611EEAD0800334AD9E6FC.roa
Signing time: Wed 28 Jun 2023 01:51:26 +0000
ROA not before: Wed 28 Jun 2023 01:51:22 +0000
ROA not after: Tue 07 May 2024 01:51:22 +0000
asID: 133929
IP address blocks: 45.200.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 01:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11590 (0x2d46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 01:51:22 2023 GMT
Not After : May 7 01:51:22 2024 GMT
Subject: CN=649b921e-1ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ff:06:ae:a1:91:fe:e5:39:0a:06:00:2d:9d:
fd:0e:a3:4e:16:b3:e3:d6:a3:a3:ae:26:4b:9e:17:
4d:04:3e:79:ff:9f:75:9f:b1:64:43:f2:bf:55:a4:
96:c3:b6:fa:ac:ab:cd:bb:84:27:a8:a4:84:7a:98:
e5:54:2e:4c:4c:d7:21:44:16:ab:e1:e2:ad:60:8e:
b8:f5:b3:82:16:29:8d:c6:89:95:4a:83:94:8b:c2:
dd:5c:64:38:1b:45:24:d4:dd:f6:18:16:fe:17:05:
20:07:c5:b1:13:31:01:73:8c:09:97:0c:8b:e2:70:
6b:28:40:d9:36:ee:98:55:c1:08:5f:38:0a:c8:fd:
e0:47:3c:b0:7a:40:db:d4:16:2e:96:c7:c9:82:dc:
cd:eb:60:eb:93:47:b3:fa:99:3f:8f:20:2f:39:3b:
9b:70:28:ca:b6:4b:b2:d3:3c:7e:35:cf:98:ce:a7:
63:f0:4f:4d:76:1a:9e:33:b0:11:38:bf:b9:a0:89:
52:44:3e:61:70:f9:5d:f2:d4:a5:b6:75:62:f4:35:
ed:6e:b3:16:08:d2:88:f1:d1:ad:56:9b:9c:7f:cf:
f7:1c:f7:1c:bf:d9:75:9f:0f:1a:b1:ca:06:10:ff:
a3:62:33:21:36:19:af:89:7f:60:14:e4:63:85:26:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BA:4A:C7:D6:38:7A:85:F6:CC:20:8F:E7:F4:72:F5:F5:6D:6A:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AAC0C4C155611EEAD0800334AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.104.0/23
Signature Algorithm: sha256WithRSAEncryption
54:3a:a4:b9:d5:c6:dd:a2:b7:50:51:ef:cb:ed:dd:03:11:7b:
60:8d:6d:95:55:f8:24:c9:4c:cb:a5:f1:b8:79:1a:69:ed:58:
a1:fa:9a:63:0a:8b:e6:5d:d6:f2:4a:50:28:37:3a:c4:3f:8a:
09:23:4a:c4:31:6d:c9:9c:60:57:34:67:ee:c1:1e:1e:ba:e9:
93:cd:a2:0a:1c:1a:33:63:e9:bb:22:44:5c:bf:87:f3:82:68:
c4:bd:78:6f:10:e1:b3:18:0a:d7:f4:25:86:b4:3c:ae:5c:97:
41:4d:af:82:b9:92:78:82:3e:cf:84:0f:a8:2c:63:e9:31:c4:
97:49:e5:b3:9b:71:62:44:85:1e:01:e6:85:d1:c3:08:c5:bb:
40:77:4c:8a:52:77:fc:16:71:31:72:d7:9b:e1:bb:d4:e5:5d:
9b:b5:99:16:c6:74:ac:5e:7b:65:e6:6d:04:7a:40:3f:1e:eb:
03:f9:2c:e1:a3:b0:2c:fc:24:0d:a2:b4:3c:7d:19:e1:bc:e4:
cc:2b:0c:d6:74:9f:18:04:f6:a5:27:bd:e5:82:34:68:fd:a0:
43:7e:1e:a1:da:c4:89:57:03:be:2b:93:04:a5:3c:5a:e9:aa:
ca:af:91:f9:a2:b8:1c:f0:46:5a:3d:33:1c:54:fc:5d:7b:7a:
8f:e4:2a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:08 2024 by rpki-client on console-fra.rpki-client.org