Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58BDB306B50811EE9A669CBE775412E6.roa
File: 58BDB306B50811EE9A669CBE775412E6.roa (raw, json)
Hash identifier: shMU9mL+9An406law0R0V0CR1EEKrOkZV0LnyeiBuDw=
Subject key identifier: AB:E6:22:F4:A3:56:CC:EB:49:D3:0A:1A:F2:A5:27:CC:86:F1:C8:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 62DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58BDB306B50811EE9A669CBE775412E6.roa
Signing time: Wed 17 Jan 2024 07:16:35 +0000
ROA not before: Wed 17 Jan 2024 07:16:31 +0000
ROA not after: Tue 23 Apr 2024 07:16:31 +0000
asID: 10753
IP address blocks: 45.199.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25309 (0x62dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 17 07:16:31 2024 GMT
Not After : Apr 23 07:16:31 2024 GMT
Subject: CN=65a77ed3-f1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:07:f6:98:02:28:fc:b5:9a:3e:e5:6d:14:
46:63:18:61:c7:fd:5f:cd:4b:30:99:19:8c:66:3a:
3f:87:d5:0e:17:cc:4f:ac:8e:7d:80:d6:0a:d8:a4:
18:a4:c9:20:b7:30:9e:63:b7:81:ad:4b:cd:88:3c:
aa:d0:d7:1f:50:5a:6b:a1:3b:1d:79:56:fb:59:0f:
8c:80:27:78:13:dc:85:4c:88:38:13:71:97:cf:ec:
7c:8a:2b:52:bd:9c:9b:fb:90:5c:92:7c:e5:c0:84:
ad:01:c1:aa:e3:d8:f7:28:50:1c:5d:ff:c5:38:71:
bb:dd:40:75:64:2e:6a:a3:e7:fd:cb:eb:c2:e8:59:
a5:30:be:8a:f5:4c:9e:ee:16:cc:b0:59:ad:ee:f3:
5f:00:a6:fb:0e:68:7a:f8:fb:45:46:01:be:56:9e:
91:55:9f:88:d7:31:4f:a9:89:f8:2c:17:4e:ff:f9:
4b:82:cd:23:c3:56:5e:39:1c:22:68:c9:80:c1:9d:
32:cc:85:25:75:1a:7e:0d:17:23:6e:75:38:a0:5a:
89:02:73:df:43:c3:69:9d:67:c1:65:42:46:98:74:
04:c9:3d:0a:d2:03:91:10:a2:e1:28:14:d2:f0:a6:
ed:8b:8c:95:df:e6:48:a3:86:2b:a1:01:3c:85:04:
77:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E6:22:F4:A3:56:CC:EB:49:D3:0A:1A:F2:A5:27:CC:86:F1:C8:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58BDB306B50811EE9A669CBE775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.149.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c8:a2:e0:65:d3:6e:7b:28:c1:02:33:d2:2e:61:e6:40:ed:
ef:70:65:06:7b:94:ac:07:34:54:9d:bb:f7:46:70:f8:02:86:
d9:ec:4e:23:c5:7a:06:ea:80:46:62:dc:4e:ad:cc:a5:19:cc:
9a:32:1d:b8:b9:90:15:9f:2d:9e:39:cf:c8:a1:10:e7:88:90:
c5:d6:aa:7b:f8:93:6e:e8:c2:8d:a6:64:ac:58:7d:73:4c:f2:
1b:cb:57:88:5b:0e:f0:2c:26:cb:75:7c:df:97:1a:5b:46:6c:
b4:21:50:0f:6f:29:91:ab:0e:b3:1f:2b:6e:f6:59:22:56:92:
0c:27:47:ea:d4:7b:2d:8c:7b:81:9a:f2:ca:c0:d4:c9:2e:af:
77:2f:67:5d:57:2c:ff:d3:25:f7:30:5a:97:64:bd:24:ce:3e:
5a:e6:e2:c4:11:dd:af:89:2e:08:81:65:5d:59:21:62:5e:02:
fe:53:67:da:a9:b6:24:0e:56:28:c0:40:29:a3:b3:8d:66:9c:
38:89:8a:9c:df:64:fa:92:a7:31:0f:a6:2b:5f:58:87:51:fd:
1b:02:00:53:77:5d:06:d2:8d:36:c7:b2:dc:10:ca:28:fd:d4:
9e:e0:db:50:d6:95:cc:76:ff:97:8a:45:10:8a:4d:9b:5e:71:
8a:f1:01:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:29 2024 by rpki-client on console-fra.rpki-client.org