Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59B0911C08FA11EEA849A1354AD9E6FC.roa
File: 59B0911C08FA11EEA849A1354AD9E6FC.roa (raw, json)
Hash identifier: T5+Nx+ogMX+letgQ0pv79gb1zPHK0wQWiAWTNPHKrd8=
Subject key identifier: 90:F7:AE:46:42:60:4C:19:BE:F8:B6:5C:37:9C:CA:91:4C:70:2F:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2B37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59B0911C08FA11EEA849A1354AD9E6FC.roa
Signing time: Mon 12 Jun 2023 08:23:03 +0000
ROA not before: Mon 12 Jun 2023 08:23:00 +0000
ROA not after: Sat 25 May 2024 08:23:00 +0000
asID: 131178
IP address blocks: 45.201.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11063 (0x2b37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 08:23:00 2023 GMT
Not After : May 25 08:23:00 2024 GMT
Subject: CN=6486d5e7-3689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:75:1e:e7:8d:7b:57:7e:8b:98:7a:d1:71:
d1:bf:11:36:b3:45:3d:c6:fd:87:81:c6:dd:f7:ba:
b7:c3:11:e0:8f:17:59:5b:cb:05:ce:cb:fd:15:d9:
39:13:90:2c:66:d0:ec:36:45:b9:4f:96:eb:bb:fa:
50:2d:36:27:6c:f6:bc:4c:ca:64:1c:c3:ff:b1:db:
2c:eb:73:4e:13:fa:92:c0:4f:0b:be:4d:d5:70:19:
c8:23:39:51:4e:f5:c6:02:d7:e8:8a:9d:d1:d1:a9:
56:09:34:d3:de:17:b2:74:a9:b9:e4:1b:f9:92:d9:
76:9a:bf:19:ea:cf:5b:3b:90:fc:f2:8c:79:88:b1:
a8:c4:2d:c2:7b:19:82:4e:f5:5c:6a:9a:e7:ae:83:
6d:da:69:7a:a9:d6:47:d1:cb:59:a9:9e:0d:83:57:
8e:14:84:e1:fe:40:5f:b9:f1:24:d2:92:0d:03:a6:
1f:b7:85:ea:75:6e:d0:54:89:9d:2a:5c:d5:da:c2:
76:48:30:ee:46:4f:42:26:19:18:17:c7:de:f3:dd:
63:ad:c5:4c:0b:48:ed:a9:b9:81:d3:d2:24:d4:9e:
ba:cc:72:6b:c9:88:6b:00:5a:16:6c:ec:42:fc:c6:
99:48:99:59:5b:ef:9d:5b:b9:bb:71:65:5f:6c:52:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F7:AE:46:42:60:4C:19:BE:F8:B6:5C:37:9C:CA:91:4C:70:2F:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59B0911C08FA11EEA849A1354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.197.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a1:b3:49:8b:98:18:0c:02:71:1f:23:15:69:5a:97:b1:88:
3b:e6:78:f2:43:37:d4:1e:e8:e9:95:1d:9a:b3:4c:b5:11:a4:
3c:ee:fe:c1:a8:21:90:63:a8:9b:76:5d:3a:98:7c:8c:db:d5:
25:de:01:04:fc:66:e0:9d:ec:57:c8:cb:1a:1f:64:fd:22:bb:
84:e6:f4:c1:6b:45:ee:57:ab:85:a9:6f:c8:72:70:30:d4:9f:
70:b5:80:9a:52:ea:c7:cd:fa:77:44:c6:04:ae:f4:6b:14:fb:
df:a8:8b:7b:7a:ca:54:1d:be:c3:77:c4:5b:8e:4b:52:3e:70:
f7:e8:a7:d0:66:e5:fe:97:39:08:8c:e7:8b:3b:1e:f6:32:87:
25:c6:c1:38:cc:ca:1f:59:83:9d:fe:4e:21:9a:97:06:5f:e3:
38:6e:f7:df:9e:d8:e0:c8:ac:c5:9b:63:11:4b:6e:c1:ae:d3:
b2:1c:14:7c:3c:6a:28:d2:47:37:0b:74:5b:63:6a:6f:e3:46:
42:23:a8:32:36:15:8c:2e:e9:96:25:33:e5:88:5b:65:a7:c2:
c5:db:4d:0e:13:aa:b4:1b:34:fc:76:5a:ec:75:9b:ab:88:bc:
71:c5:1e:f5:49:9a:db:c6:69:fd:9d:27:c0:d9:7d:4a:47:1b:
ae:4d:09:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:52 2024 by rpki-client on console-fra.rpki-client.org