Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56E00E0276CF11EE97ECCB1A4AD9E6FC.roa
File: 56E00E0276CF11EE97ECCB1A4AD9E6FC.roa (raw, json)
Hash identifier: Cm8l4zLrRL21sJih9QK3cyb6uAgZFozbiw/pu72DWDM=
Subject key identifier: 86:06:00:F9:25:50:FE:F7:EB:FC:14:45:E6:46:9B:FC:B5:BE:91:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 425E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56E00E0276CF11EE97ECCB1A4AD9E6FC.roa
Signing time: Mon 30 Oct 2023 02:52:18 +0000
ROA not before: Mon 30 Oct 2023 02:52:15 +0000
ROA not after: Tue 07 May 2024 02:52:15 +0000
asID: 133929
IP address blocks: 45.200.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 02:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16990 (0x425e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 02:52:15 2023 GMT
Not After : May 7 02:52:15 2024 GMT
Subject: CN=653f1a62-5392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:d1:6b:85:53:c9:ee:99:17:43:51:4e:b8:
75:36:46:76:18:00:5b:4b:69:5d:81:ee:1e:4d:3f:
8b:40:43:64:e5:96:90:d2:8b:4a:ef:d6:c8:67:6e:
6e:b1:7c:22:46:50:aa:97:82:cf:76:90:1d:f4:62:
29:29:c1:0f:04:c3:eb:77:2a:81:22:78:f5:c8:bd:
93:08:2e:5a:1c:30:a8:20:0e:e9:37:c7:5d:2c:1b:
b9:a0:f4:ae:7b:7e:1e:2c:9d:be:cd:ce:47:18:90:
d7:09:7b:1e:c4:97:70:48:27:e8:2b:84:91:6f:89:
ad:15:59:f2:67:91:be:a6:32:4b:8c:30:33:ad:c0:
62:7f:95:3e:af:b6:7e:c2:63:21:6b:00:bb:54:bc:
95:4d:29:99:d8:ae:5d:4a:49:d1:36:2a:10:38:07:
a7:08:b9:78:8e:f6:66:4e:55:50:2d:cc:66:9e:50:
7f:9b:5f:13:32:b3:ee:af:43:b3:e1:28:6a:20:61:
22:11:dd:5c:b0:2b:f7:1a:1e:f8:5d:c2:49:61:c0:
5d:21:c7:c6:08:8a:4d:94:f4:62:0e:ea:51:96:38:
27:8a:24:96:e6:5c:db:37:75:6d:b7:a5:bb:00:0b:
7b:bf:7b:79:06:86:02:4b:f7:62:49:61:9f:ca:75:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:06:00:F9:25:50:FE:F7:EB:FC:14:45:E6:46:9B:FC:B5:BE:91:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56E00E0276CF11EE97ECCB1A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:c6:79:85:27:87:5b:87:7d:d3:82:0c:2a:b2:61:77:69:96:
4a:c9:b3:92:a6:0c:09:5f:74:2b:5d:41:cc:37:79:1d:3e:7b:
6a:3d:95:87:ff:f5:5c:94:dd:fa:ff:a2:8c:90:2d:65:0a:a4:
95:22:e0:ca:e3:f0:04:21:19:16:79:4d:32:1d:57:66:24:ce:
ea:e3:fe:96:8b:47:cc:b7:a6:b9:96:5a:c4:4a:fd:38:46:a5:
ea:39:94:d1:7c:e5:ef:32:4d:4f:d2:ee:04:0b:b2:e2:89:e1:
d9:11:5a:c0:43:da:1a:13:cd:32:b3:b9:a6:9c:18:2c:6b:ae:
a7:e0:e0:61:f1:49:d1:9a:11:a4:2b:b5:41:d7:17:bf:81:38:
e2:b3:fc:fe:60:d9:9c:3e:78:f1:ec:2f:4d:1f:43:50:75:46:
a9:06:84:0b:be:29:34:cf:f2:72:84:e8:73:d7:f3:24:ae:93:
16:a2:4d:fb:ba:9c:d3:ae:d1:28:a7:1a:49:d8:6d:45:6f:e6:
86:96:c3:bc:8a:3d:2c:f8:ea:50:28:6c:80:49:c5:f3:ff:92:
2d:57:18:a9:24:a1:16:8d:d4:03:a0:69:7d:bf:c6:3f:d1:b5:
5b:73:e8:e6:b9:8e:a2:31:a5:06:41:d3:ea:6c:90:4f:f9:c6:
82:24:93:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:09 2024 by rpki-client on console-fra.rpki-client.org