Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/527C4166AEBD11EE8108FEC1775412E6.roa
File: 527C4166AEBD11EE8108FEC1775412E6.roa (raw, json)
Hash identifier: ZuzQV6OYLy6lSofd49tzyLbwpW1eFSRbs4AYKkxfsCM=
Subject key identifier: BD:1F:84:16:A8:EB:02:31:7C:3D:3C:0A:68:D4:84:12:88:67:20:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5EC9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/527C4166AEBD11EE8108FEC1775412E6.roa
Signing time: Tue 09 Jan 2024 07:04:25 +0000
ROA not before: Tue 09 Jan 2024 07:04:22 +0000
ROA not after: Sat 11 Jan 2025 07:04:22 +0000
asID: 138995
IP address blocks: 45.194.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24265 (0x5ec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 9 07:04:22 2024 GMT
Not After : Jan 11 07:04:22 2025 GMT
Subject: CN=659ceff9-aae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:52:42:5a:7f:2d:d6:0f:75:c9:9d:65:6d:
b9:94:89:42:ec:93:31:ea:99:89:29:fc:20:d0:50:
00:70:be:d4:66:f5:57:d7:a8:9b:0f:c8:de:b9:d9:
1a:9b:fa:fa:f5:6d:5d:bf:70:b3:ef:6b:c3:fc:20:
64:05:ee:14:fd:b9:0f:51:da:a2:d9:37:39:76:9a:
8f:ca:59:cb:d6:45:66:0f:f6:74:ef:c4:e4:18:d4:
c5:40:a7:62:18:88:bc:0d:4a:02:ef:38:f6:d2:17:
47:a2:df:a6:0c:2f:b9:dc:f5:74:9e:05:5f:ed:74:
e6:85:8d:cd:6e:78:63:9c:98:f0:fc:e7:c9:fd:1b:
66:a2:ed:84:45:a7:72:c3:87:3d:fa:7b:87:87:b7:
1c:3d:8f:ba:3c:75:43:40:54:39:cd:78:b4:1d:ef:
fc:5b:76:ff:8f:2d:cd:a8:74:a3:4a:95:ba:f1:4f:
e1:12:b4:71:47:82:ab:0c:cf:5d:a7:05:39:1f:c8:
34:4d:ca:c2:74:5e:de:1b:f0:54:03:fa:7d:ca:1e:
a4:a9:64:70:5e:cb:eb:64:d8:8b:f1:da:3e:b6:c9:
17:cb:11:ca:9d:ca:15:90:cb:ce:51:44:58:91:ec:
6f:cc:07:8f:7a:80:9f:58:e2:e5:84:7b:7a:89:68:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1F:84:16:A8:EB:02:31:7C:3D:3C:0A:68:D4:84:12:88:67:20:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/527C4166AEBD11EE8108FEC1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.33.0/24
Signature Algorithm: sha256WithRSAEncryption
69:06:8b:c7:5e:cd:2a:63:28:6f:dc:93:d8:a9:c4:2d:60:3c:
c9:11:2b:c8:76:5a:62:90:c9:b5:20:b8:35:65:a9:c7:d5:4d:
de:35:a4:a2:72:c8:92:f2:b2:fe:24:b8:95:21:4f:76:b1:d6:
9a:dc:e4:b1:95:d1:16:ad:94:f5:c5:ed:81:0c:8e:ae:b5:d4:
7f:b5:56:8c:ee:43:33:aa:5c:ef:e5:29:93:8a:6a:82:76:5f:
5d:0a:d7:da:56:b7:73:4d:eb:15:ab:96:70:c1:59:63:f7:08:
f1:73:04:7d:95:c6:ab:de:f9:57:62:4a:a7:9c:83:8e:c8:28:
01:04:c8:c4:ef:c2:fe:fd:0a:4a:e7:55:67:a7:19:d9:91:a6:
67:ba:dc:9a:2b:d3:df:32:50:b1:37:df:36:2f:40:bf:6f:20:
41:69:a0:76:53:ed:cd:5d:d6:02:40:0d:0a:a2:f9:f1:d3:57:
14:d1:45:c4:8c:9b:fe:92:9f:55:2d:61:9b:bd:2d:a1:dd:f5:
15:af:9f:cb:ea:4e:5c:42:ff:cc:ac:cc:9c:4a:21:de:c2:5c:
05:54:e0:e7:ce:08:16:df:0f:ed:d8:48:5c:df:af:d4:e1:3b:
00:da:81:97:49:0d:36:42:c7:02:c7:ce:8f:2b:fe:24:31:76:
38:ab:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:30 2024 by rpki-client on console-ams.rpki-client.org