Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/541C3A1008F211EEA9B1AA1E4AD9E6FC.roa
File: 541C3A1008F211EEA9B1AA1E4AD9E6FC.roa (raw, json)
Hash identifier: PfBLwlLDLxKV+20DzjMAvQ8jjIvcLT5PzC+vRJJ28Go=
Subject key identifier: D7:E3:24:15:68:9C:AA:7B:6E:56:6F:B0:FF:79:6C:33:BF:56:F8:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2AEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/541C3A1008F211EEA9B1AA1E4AD9E6FC.roa
Signing time: Mon 12 Jun 2023 07:25:38 +0000
ROA not before: Mon 12 Jun 2023 07:25:35 +0000
ROA not after: Sat 25 May 2024 07:25:35 +0000
asID: 131178
IP address blocks: 45.201.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10991 (0x2aef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 07:25:35 2023 GMT
Not After : May 25 07:25:35 2024 GMT
Subject: CN=6486c872-53a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f1:35:97:1e:6e:a0:7d:12:0a:ef:21:bc:ce:
70:e4:bd:df:27:b3:d7:91:60:09:7b:4e:c8:97:0e:
c1:94:02:06:eb:3f:a9:f8:c9:d6:75:1f:cf:4d:0c:
6f:ba:f7:f7:a6:82:f7:27:e3:14:a1:55:9e:b1:ed:
0c:f3:c5:4c:26:76:cf:58:31:57:75:4a:de:05:be:
f1:dc:17:a1:6c:67:17:21:1c:3d:89:d6:1c:d7:b7:
d2:fc:ba:1e:11:b9:99:5d:75:03:d1:ce:03:fe:3b:
cd:5f:5e:5b:b8:c3:67:76:82:8f:04:e0:00:6a:3f:
6c:fb:f3:13:d6:ba:38:84:fb:d1:90:b0:e0:f8:ab:
e5:66:d2:4e:e7:89:e6:4c:2c:6e:08:21:b6:fe:ba:
56:53:1b:b9:f9:63:cd:00:84:2e:b7:a3:7b:5f:44:
f7:1a:39:b5:6c:62:c4:53:b5:a9:c4:b6:ec:e8:de:
e3:ef:94:3c:9e:7e:06:03:9c:01:ae:84:e2:b6:46:
df:4c:3a:35:b4:c1:ef:e8:a6:3b:56:56:b6:96:a1:
e6:64:69:cc:77:ec:07:ac:5a:c9:b7:d3:62:10:fc:
da:ae:41:8f:82:9c:14:78:b6:bc:19:65:95:10:44:
b6:13:f6:bf:fa:38:3b:c7:24:1b:31:2d:5d:02:5b:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E3:24:15:68:9C:AA:7B:6E:56:6F:B0:FF:79:6C:33:BF:56:F8:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/541C3A1008F211EEA9B1AA1E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.158.0/24
Signature Algorithm: sha256WithRSAEncryption
75:31:90:ca:69:7d:70:ac:76:06:f8:1f:7b:d2:0f:05:37:a1:
d4:d6:12:82:f6:d8:73:7c:5c:29:9b:df:28:cb:99:e1:b2:34:
26:0a:f7:f9:c8:0f:74:90:ea:8c:5d:eb:19:46:2f:1a:59:ae:
e4:1b:2e:fe:cc:38:07:30:e5:ab:37:b6:6d:7f:63:d5:23:33:
d5:91:67:f7:9c:d9:37:e6:e2:eb:c7:d2:f7:ca:78:11:77:77:
70:28:ee:b5:fa:d2:72:35:89:cc:0d:06:5e:6b:b6:b9:4a:9c:
eb:b7:03:4a:6f:9e:08:43:e7:ae:1e:85:05:1e:b6:b2:d2:d6:
99:20:b4:c7:f9:db:ca:eb:af:15:c0:0b:90:c4:35:60:9f:b0:
b7:bc:f7:ac:1a:8c:47:bc:a6:27:c8:fa:9e:44:93:71:9e:80:
c6:b3:8f:4a:f5:2c:42:8b:fe:4d:c3:a1:ed:30:5e:08:03:28:
29:4c:71:66:a1:30:09:e9:71:00:11:0a:be:02:5e:64:b6:c2:
65:cb:fa:5c:4a:f8:4e:fd:15:67:e2:e9:55:8e:cf:cb:7e:17:
ee:76:4e:cb:17:9d:0d:25:7b:ab:12:f4:c9:df:d5:57:eb:4f:
73:bb:75:f5:d8:06:f2:a7:05:db:ad:7f:46:0b:e9:fd:23:5f:
10:0a:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:52 2024 by rpki-client on console-fra.rpki-client.org