Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5432E3F8155611EEA03A1E334AD9E6FC.roa
File: 5432E3F8155611EEA03A1E334AD9E6FC.roa (raw, json)
Hash identifier: L6DpJLYqZgXuZRU5CLL/6/GoOinHxcbRHQCvm3mm6l8=
Subject key identifier: 0F:51:40:B9:BB:B0:FC:EF:F6:82:7E:30:E4:A5:D4:0A:EF:1A:1A:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5432E3F8155611EEA03A1E334AD9E6FC.roa
Signing time: Wed 28 Jun 2023 01:51:42 +0000
ROA not before: Wed 28 Jun 2023 01:51:39 +0000
ROA not after: Tue 07 May 2024 01:51:39 +0000
asID: 133929
IP address blocks: 45.200.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 01:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11592 (0x2d48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 01:51:39 2023 GMT
Not After : May 7 01:51:39 2024 GMT
Subject: CN=649b922e-eda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:fa:c8:7d:39:97:0c:83:73:64:4a:a9:d0:
d2:2a:56:c2:b7:2c:ff:91:8d:9c:b7:60:b9:69:5e:
09:1e:76:f5:15:94:5e:7e:b2:82:80:0a:38:02:f2:
27:7c:3c:44:b3:43:a0:82:ef:57:d6:54:2f:c7:d0:
14:ec:e9:ea:9c:ad:2a:b2:af:97:74:b6:36:05:3b:
30:50:39:52:7e:98:36:d1:63:f8:b6:d4:92:ca:8c:
c0:ba:63:11:2d:2b:b2:7b:d2:24:f3:b2:f7:3a:86:
37:9f:fa:b1:7c:c4:a8:6d:2e:53:00:ad:55:4d:b9:
ce:43:77:3c:35:6d:67:46:42:92:09:28:2a:5d:6e:
65:db:1b:42:2a:86:62:25:43:e4:85:56:b2:49:e5:
7e:1f:63:d1:e8:62:da:5c:2d:33:a5:ba:f0:6c:ac:
f9:e0:93:7b:9e:8e:c6:1e:a2:64:26:eb:b9:08:45:
e1:2e:8a:ce:75:65:88:3e:fd:b7:0c:a1:fa:90:8c:
ee:7e:6f:e4:3e:a2:1f:6c:ad:9a:d9:ae:8f:26:48:
af:c8:ab:fd:4d:2d:cc:37:a2:43:67:ee:bb:a2:20:
e6:58:51:6c:40:a9:f1:64:93:a9:92:5c:a3:07:c9:
b9:5b:02:63:4a:e0:f1:3f:21:dd:98:fb:7a:b2:cb:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:51:40:B9:BB:B0:FC:EF:F6:82:7E:30:E4:A5:D4:0A:EF:1A:1A:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5432E3F8155611EEA03A1E334AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.106.0/23
Signature Algorithm: sha256WithRSAEncryption
72:8d:b4:f6:aa:b6:69:82:f9:05:5b:9d:ee:7a:5b:d8:3c:78:
f2:70:af:ed:db:90:7a:26:1d:b0:92:42:92:5e:fe:2a:43:dd:
bf:f7:4d:06:49:ca:2e:de:a7:7c:2e:a5:d4:77:02:6f:a6:70:
4d:86:f7:7f:0e:29:ef:a0:7e:45:c4:b9:40:20:db:28:fe:77:
a7:09:6b:97:e7:d3:88:34:ef:49:9b:57:80:11:cb:99:24:3e:
45:e2:5a:b1:4e:06:ed:b8:04:ab:dd:70:d1:f9:09:16:67:8f:
a9:df:bb:8d:f5:98:e8:44:b5:b7:da:e3:6e:97:e1:be:cc:55:
c1:be:9a:86:02:33:06:19:2a:b9:0b:c2:be:c4:1f:80:31:6c:
86:2a:dd:93:7d:4c:d6:25:8f:d2:f3:08:6a:92:b0:0c:2a:56:
2f:14:e6:85:f5:b8:a3:7f:9e:b6:e3:22:f4:21:32:4e:53:dc:
55:f2:21:6a:f2:48:e4:23:c9:fa:ac:ec:ed:54:64:9c:3b:6c:
d6:a6:9f:2d:39:c7:fd:d3:58:6b:35:15:ce:b6:7f:c7:03:3a:
a5:2e:07:b6:a9:5c:01:cb:2c:39:94:21:95:eb:55:fc:89:16:
7d:8a:45:9d:30:71:9b:08:86:12:52:fe:34:ac:3c:27:31:c5:
c3:26:3c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org