Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CAE70CC7FEE11EE89B8D5374AD9E6FC.roa
File: 4CAE70CC7FEE11EE89B8D5374AD9E6FC.roa (raw, json)
Hash identifier: /aU7TRp0GWVveuS5H6YV8OoJ9FzqYuot730G4PYKUfQ=
Subject key identifier: B9:FB:A8:22:C1:43:0D:B9:18:1F:A7:77:56:E6:BA:24:45:1D:E0:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 465C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CAE70CC7FEE11EE89B8D5374AD9E6FC.roa
Signing time: Fri 10 Nov 2023 17:26:36 +0000
ROA not before: Fri 10 Nov 2023 17:26:33 +0000
ROA not after: Tue 04 Jun 2024 17:26:33 +0000
asID: 137577
IP address blocks: 45.195.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18012 (0x465c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 17:26:33 2023 GMT
Not After : Jun 4 17:26:33 2024 GMT
Subject: CN=654e67cc-c8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:1b:4b:e0:15:3d:97:c5:db:76:a2:18:28:
ce:e9:b3:14:c1:55:aa:9c:c0:1e:22:60:3f:99:7c:
6c:bc:c4:95:3b:cc:db:21:c2:78:44:ba:30:f2:7c:
09:9c:c3:61:04:24:a7:ed:52:52:a7:a3:94:d9:5e:
2e:85:fa:8f:04:84:a0:06:5d:83:c1:4d:1e:93:55:
34:94:27:a5:9c:e3:4d:b4:53:f0:a3:e4:b2:50:d4:
e7:b7:89:cd:5f:1f:97:d9:c0:f3:77:df:cf:7f:cb:
e6:4f:ba:08:18:55:64:57:a4:e0:88:8a:9d:01:65:
a1:f7:b0:15:cc:aa:49:52:af:3e:6d:9c:c8:df:dd:
6c:cf:b6:fc:b6:bf:35:5b:5a:a4:a1:f1:6c:74:e5:
74:3b:b5:d5:0c:95:2e:67:ed:5f:f7:b7:b5:28:2c:
10:46:e7:d8:40:a0:87:17:3b:c0:d5:a5:1f:16:c0:
24:02:e7:eb:db:e2:1c:2c:7b:da:c1:d5:c9:5d:d2:
39:24:55:26:c7:6c:78:a7:24:ba:1c:b7:e3:78:37:
4b:d7:80:ea:3d:39:e4:68:f7:7b:9f:95:f7:ba:cf:
49:e9:05:8d:c9:a4:1d:37:c6:9b:77:52:ad:1b:34:
7d:6f:c9:bf:0a:60:64:73:cb:5b:4a:85:8d:ea:11:
70:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FB:A8:22:C1:43:0D:B9:18:1F:A7:77:56:E6:BA:24:45:1D:E0:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CAE70CC7FEE11EE89B8D5374AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.41.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f9:77:b2:64:34:7e:81:d5:ae:08:05:e1:ec:51:da:00:d8:
5d:e1:b0:87:b2:5f:de:a5:e1:7e:0a:21:d6:0d:f8:85:1b:de:
f0:a2:ce:ae:d0:02:7e:e5:23:ff:fa:ec:66:dc:15:fb:58:e2:
63:ce:6d:95:d8:8d:54:09:1d:32:a3:07:2a:9c:49:19:06:ff:
33:a1:06:68:07:64:87:05:db:d3:ef:2d:5c:da:6a:b9:ea:d8:
46:81:15:0a:f8:48:76:d0:70:09:ee:b4:c5:f5:fb:3f:85:38:
64:2f:99:bc:de:60:1d:ed:29:41:ce:ac:69:f1:60:65:86:82:
b3:25:63:49:28:d6:1d:1e:7c:e7:0c:e0:3f:a7:ea:49:12:9a:
aa:6b:e9:5b:46:a4:1b:ec:54:16:90:da:d8:0f:14:f1:d0:4c:
0e:3a:f4:f4:6b:f2:c6:c1:e7:ed:fb:06:db:91:ae:03:8a:23:
36:fb:92:a2:38:6f:1b:d5:13:41:ff:da:77:76:e1:68:83:33:
c2:e4:7d:e0:58:da:78:72:43:6c:48:db:9f:13:3e:b9:67:9e:
3c:4a:c4:65:eb:9c:ac:b6:3b:d6:31:64:ac:b7:ae:c3:ce:d7:
95:1e:c1:4e:41:8d:20:60:fa:7d:0f:68:4e:be:50:92:fb:f2:
51:b8:e9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:08 2024 by rpki-client on console-fra.rpki-client.org