Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5329608EFD4711EE9BC18D38017001B1.roa
File: 5329608EFD4711EE9BC18D38017001B1.roa (raw, json)
Hash identifier: 3dNp3q+Da1+xBDNV5uXupNAsfgGKKkWih88QP4lOxHw=
Subject key identifier: AF:28:16:96:A2:76:D7:63:03:8A:AB:0D:D5:F2:2B:82:E1:D0:A2:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 834D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5329608EFD4711EE9BC18D38017001B1.roa
Signing time: Thu 18 Apr 2024 05:48:48 +0000
ROA not before: Thu 18 Apr 2024 05:48:44 +0000
ROA not after: Fri 26 Apr 2024 05:48:44 +0000
asID: 39600
IP address blocks: 45.196.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Apr 2024 05:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33613 (0x834d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 05:48:44 2024 GMT
Not After : Apr 26 05:48:44 2024 GMT
Subject: CN=6620b43f-7808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:24:4d:89:d2:50:c6:da:02:c3:04:38:9a:
4c:5b:da:48:e0:bb:c9:34:e8:1b:ab:52:de:86:ba:
39:09:e3:a2:66:ce:d2:95:ff:69:08:33:49:cc:43:
c8:e5:44:fb:9a:51:44:61:ae:a5:33:f2:ce:88:78:
ae:02:72:38:48:8c:18:5a:2b:86:f2:28:6f:99:d6:
ac:ad:c8:29:e5:47:11:07:d7:05:bb:f7:76:63:f3:
50:48:b0:b6:eb:ce:d0:e0:1b:ba:d0:2a:a2:20:8e:
9a:09:1b:67:74:09:bf:e9:e2:37:a0:c7:ea:ec:55:
fd:a2:9d:90:05:5e:1a:b7:bc:92:4a:18:2d:35:6e:
20:4c:f0:86:e2:be:23:f5:f6:0f:bc:45:e9:57:c5:
79:d5:d4:51:14:a7:7e:5b:49:0f:3e:dd:72:b6:b6:
15:69:37:fe:f1:a6:ce:cc:76:38:a6:4b:44:ff:b7:
e0:6c:4b:c8:57:7d:10:de:fc:61:df:fa:a6:72:b0:
b6:8b:f8:7f:22:71:56:40:c6:7b:86:92:8f:32:a1:
75:ae:4c:f4:d8:98:26:f9:e6:6f:74:f5:4c:0d:3f:
d5:67:c0:bb:98:84:1f:cc:55:aa:1a:e9:87:b0:34:
d1:39:f6:b1:a2:82:87:b4:3b:6b:74:d1:27:f4:fe:
4c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:28:16:96:A2:76:D7:63:03:8A:AB:0D:D5:F2:2B:82:E1:D0:A2:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5329608EFD4711EE9BC18D38017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.140.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:e6:4f:46:af:55:80:42:e3:07:db:35:5a:34:02:d9:8a:bf:
6d:4a:2f:ed:f7:7f:5b:6f:04:c6:6f:83:4a:39:92:1f:e5:89:
f9:74:39:ca:0c:f8:df:07:a9:ad:07:76:6b:04:f8:c4:78:bd:
95:12:e0:1f:3c:55:11:c5:6a:b1:68:00:24:e7:7c:17:56:5e:
7a:03:56:1e:46:ed:fe:ee:d7:68:02:58:80:5f:4b:94:10:86:
66:11:7b:7f:95:61:ca:a3:9e:a6:c9:68:ad:aa:43:4e:d2:b3:
6b:07:b7:26:0e:62:e5:10:01:2c:f4:4a:76:41:70:c1:66:df:
72:0c:d5:47:9a:31:a5:bb:f6:0d:9f:01:03:4d:6a:46:8f:33:
79:76:f9:b2:23:e2:99:f1:65:41:2d:00:59:ea:c4:2e:b3:c8:
ed:a6:d0:f7:98:ac:71:c1:da:33:40:92:cb:df:7f:94:f2:0f:
33:93:a2:df:c4:98:d1:85:76:21:2d:e6:bf:a0:ee:00:85:30:
a0:9b:06:3c:67:f0:ce:b7:79:d0:7b:f1:d0:e7:c6:49:b0:e9:
72:4b:93:60:c8:de:15:40:b6:3b:13:f0:a3:42:1c:f3:0f:d2:
79:55:aa:bb:ac:e4:ce:dc:e1:a7:06:af:b1:0c:eb:f2:0a:27:
af:e3:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:43 2024 by rpki-client on console-fra.rpki-client.org