Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/510918B08A8011EE94726D554AD9E6FC.roa
File: 510918B08A8011EE94726D554AD9E6FC.roa (raw, json)
Hash identifier: zTPN+HxHnQiXG77Cl/q9+Rs/aEr/CnSlPsQnT1N+kq8=
Subject key identifier: 9B:C9:F1:0A:64:E7:2C:E9:FC:6C:F0:9E:AC:92:5C:70:94:62:4E:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4A92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/510918B08A8011EE94726D554AD9E6FC.roa
Signing time: Fri 24 Nov 2023 04:17:01 +0000
ROA not before: Fri 24 Nov 2023 04:16:58 +0000
ROA not after: Tue 28 May 2024 04:16:58 +0000
asID: 55720
IP address blocks: 45.207.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19090 (0x4a92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 24 04:16:58 2023 GMT
Not After : May 28 04:16:58 2024 GMT
Subject: CN=656023bd-6137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:69:16:33:54:13:9e:8c:86:c2:bd:8e:18:
35:67:56:16:73:5f:e7:0a:a0:aa:b7:ec:9a:60:09:
20:7f:b3:b0:77:e6:69:cc:f1:18:5a:1d:6a:e4:22:
d1:2c:8d:d3:10:c7:1c:be:5e:3b:da:83:64:3c:2f:
79:23:e5:2f:dc:2d:aa:cd:5a:a9:50:05:5c:0e:3e:
11:52:55:7d:cf:df:1d:73:52:06:5f:ba:7a:61:ee:
a8:b6:b2:96:ca:03:a5:ec:6a:da:27:2a:d7:fc:77:
25:aa:13:00:a1:22:7e:9b:55:69:68:7e:bf:c9:49:
28:fb:c4:2a:fc:56:fc:42:7c:69:2a:2c:22:0b:cf:
0d:cd:41:44:7c:a0:77:f1:06:d8:d9:13:89:3f:72:
a1:ab:d1:c8:4e:93:72:fc:4d:1f:f7:78:e4:0f:00:
e2:6f:21:f3:9f:b7:d7:a9:71:cb:c1:f2:30:c9:d0:
76:14:a7:49:b2:87:06:0c:a8:da:c4:58:a4:fd:1c:
4e:8c:f1:17:d7:ca:92:e5:9b:b5:8a:89:06:c1:35:
40:41:de:a9:63:16:20:43:45:9e:ec:be:af:0f:87:
d6:1b:3b:21:c1:d1:69:19:0c:d8:dc:ba:15:a8:d8:
00:21:b7:27:70:9e:60:a2:b7:1a:f0:0c:7d:ce:bf:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:F1:0A:64:E7:2C:E9:FC:6C:F0:9E:AC:92:5C:70:94:62:4E:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/510918B08A8011EE94726D554AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.32.0/24
Signature Algorithm: sha256WithRSAEncryption
87:bd:7b:ef:5a:f9:00:92:14:e6:fc:a9:26:67:83:0a:f2:8d:
ec:28:20:40:e9:49:bf:5e:f7:03:14:04:fc:74:37:f7:67:f0:
c6:63:28:4d:e6:b0:41:09:c8:84:b1:0d:1d:21:f8:4b:53:47:
4e:e8:91:26:25:e7:e7:b4:e1:00:c7:19:84:10:b6:90:19:3e:
b8:89:c7:71:41:83:f1:74:07:a1:f1:40:08:3b:97:15:74:f0:
8c:ef:46:01:60:02:81:a9:b6:bf:e6:6b:5e:d7:a0:ba:5e:c3:
1b:e6:5d:94:26:b1:4b:7d:17:1a:a7:2b:20:93:2b:2a:f2:8c:
f1:27:86:6b:dc:69:40:2a:98:80:6f:5e:38:8b:0c:45:87:f6:
69:f0:dc:52:bd:67:42:ff:a4:74:88:e6:c8:96:ab:77:64:46:
4d:fa:3b:52:11:db:04:7d:35:6c:e8:c3:cb:ee:0f:93:75:c8:
d8:8d:31:2c:a2:0b:bf:77:1a:03:0a:1d:5c:01:4a:75:8b:60:
1d:c9:3d:1c:25:35:df:d1:02:a2:f8:e7:17:76:6d:62:43:2d:
66:d1:f6:e1:e5:c8:7e:c6:dc:9d:8e:97:72:d2:46:81:d8:94:
33:3d:ab:af:01:f8:ed:f7:e1:21:26:75:4d:f1:c1:e0:dc:0c:
3b:89:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:08 2024 by rpki-client on console-fra.rpki-client.org