Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E26E974B0FA11EE8B47B352775412E6.roa
File: 4E26E974B0FA11EE8B47B352775412E6.roa (raw, json)
Hash identifier: c++gZWDBMQdkUyQsz8EsaPP8JfaVtAnt+Wif/ylEX04=
Subject key identifier: 28:BE:6D:FB:31:4F:DA:0F:F0:14:78:0C:A3:B0:DC:6A:DC:C7:26:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5FE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E26E974B0FA11EE8B47B352775412E6.roa
Signing time: Fri 12 Jan 2024 03:25:59 +0000
ROA not before: Fri 12 Jan 2024 03:25:56 +0000
ROA not after: Thu 09 Jan 2025 03:25:56 +0000
asID: 151206
IP address blocks: 45.200.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24552 (0x5fe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 12 03:25:56 2024 GMT
Not After : Jan 9 03:25:56 2025 GMT
Subject: CN=65a0b147-eaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:5a:10:a6:4e:db:82:94:8a:90:35:76:de:
9c:a5:c4:ae:2c:c7:84:33:04:8f:e3:d2:e1:54:89:
1f:ca:f8:12:18:62:b3:76:36:cf:a5:6b:ce:59:1b:
a7:d8:26:e1:3a:e1:58:b7:8b:6c:b6:c4:88:6c:74:
24:9a:e4:72:7a:20:24:8b:ed:7e:39:2a:97:d1:7e:
70:af:cf:21:de:84:f1:ae:e5:98:aa:17:b9:e5:80:
3e:40:86:46:b0:3b:4e:45:14:6c:23:e0:b8:42:a4:
8d:46:e0:53:ce:a9:f1:64:ac:3a:2c:4c:0b:30:f8:
eb:3b:bb:ad:9e:0d:02:19:bb:e2:1e:8b:00:f2:29:
72:cf:04:62:c0:02:cf:07:2e:3e:54:dc:d9:3c:37:
2e:ef:7e:4d:ba:de:8a:cf:c1:21:86:8c:33:2e:8a:
81:33:5d:ec:05:3d:04:2f:ba:00:76:e8:6f:9c:4f:
07:f4:f9:cb:96:51:99:37:4f:c5:24:a9:7b:56:b8:
c5:48:01:2f:ed:c8:fc:d0:90:60:f6:f5:93:70:f4:
5c:94:0f:a2:f3:e3:fe:11:7c:13:6f:e0:38:35:cd:
9f:6a:bc:e4:d7:36:42:eb:4d:88:09:08:db:82:80:
40:19:c9:7b:fb:e8:d3:d0:74:f4:41:d3:42:1a:4c:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BE:6D:FB:31:4F:DA:0F:F0:14:78:0C:A3:B0:DC:6A:DC:C7:26:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E26E974B0FA11EE8B47B352775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f1:77:46:6f:52:93:49:69:cd:1c:56:17:65:c0:d4:59:c0:
35:8b:f9:4b:0d:2c:49:fa:82:b7:b0:3f:df:60:88:b6:fb:58:
2d:be:62:0f:36:a7:44:21:e0:76:80:9c:8a:22:6c:9c:23:de:
e5:24:b6:d5:b2:cb:2b:6a:10:0f:30:37:0e:6a:aa:53:77:f4:
71:d2:e7:6f:ae:84:36:2a:61:c4:44:09:95:f6:2a:52:85:05:
cb:92:a8:d2:c4:db:f3:e1:a6:07:f7:fc:ea:01:0b:2a:df:32:
67:ce:c3:65:dc:0f:8a:09:10:d0:de:3a:fe:58:c9:8d:09:1c:
6c:ac:4c:27:4d:7a:37:be:0c:1c:25:0d:b5:fb:76:a6:46:cb:
3b:aa:ee:31:fa:73:b1:4d:dd:d7:5f:fe:e3:fd:19:23:fb:a1:
c2:60:9c:6a:3f:3f:f2:e6:fa:c7:94:13:4f:eb:78:49:4a:dc:
6f:a4:27:cf:bd:e7:6b:3d:b6:43:d4:62:5e:cc:dd:36:61:61:
d1:00:9c:d7:32:cb:d4:7c:91:bf:f6:77:f9:01:de:00:c3:04:
73:47:d3:0a:63:ea:7e:c6:42:56:a6:12:40:89:a8:5c:dc:72:
68:ed:ef:ee:97:e0:cb:f9:d5:af:81:5b:7d:1a:1b:83:90:ca:
c9:92:09:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:08 2024 by rpki-client on console-fra.rpki-client.org