Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD7535AA2BE11EE81676712D25BE465.roa
File: 5BD7535AA2BE11EE81676712D25BE465.roa (raw, json)
Hash identifier: PxGVdAECPOsayC8oIjrKqqNZ5ePOx1mF65mlDQf11Sk=
Subject key identifier: 57:B5:AB:A6:E2:3D:66:25:0A:62:20:8F:04:64:EA:6E:1E:05:89:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 58B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD7535AA2BE11EE81676712D25BE465.roa
Signing time: Mon 25 Dec 2023 00:41:36 +0000
ROA not before: Mon 25 Dec 2023 00:00:33 +0000
ROA not after: Wed 25 Dec 2024 00:00:33 +0000
asID: 269843
IP address blocks: 45.194.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22711 (0x58b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 25 00:00:33 2023 GMT
Not After : Dec 25 00:00:33 2024 GMT
Subject: CN=6588cfc0-d8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:05:07:aa:2e:84:b3:e7:b5:06:69:00:19:
67:9f:e3:63:3c:dc:41:45:97:34:2d:29:6e:ae:d4:
7e:5f:b7:10:ba:54:bc:b7:c4:08:9f:03:e1:db:fe:
b9:67:53:32:15:58:3a:d6:9a:f6:48:ab:50:e3:bd:
9f:fd:78:68:d2:27:4c:d6:b9:ca:c3:02:8d:90:7b:
6e:f7:a2:26:cf:02:b1:e1:ba:90:59:0a:da:15:36:
65:f1:df:ff:30:ff:19:9d:78:0a:eb:fd:ba:c5:76:
b1:94:20:c4:e7:16:21:62:d5:8d:93:eb:74:96:c7:
1b:d6:86:1f:c3:4b:ed:cb:2d:f8:81:e2:48:11:e7:
a2:2f:1d:a6:1f:1f:64:d7:ff:f2:ba:a3:15:9e:06:
3e:9a:09:34:05:eb:5d:27:97:b0:9e:ee:52:ed:67:
e6:cd:ab:3a:54:c4:b0:bb:42:63:ee:a2:06:15:9f:
b3:b1:64:f4:7b:20:97:2b:ac:ec:21:7b:16:aa:71:
e5:1b:f9:d1:94:f7:1e:42:ef:eb:5c:4d:cf:b4:f6:
82:35:d6:a2:14:90:d5:95:7a:57:c7:88:28:83:94:
80:e1:6d:23:f3:1e:a0:82:09:4c:c0:da:62:42:61:
73:64:d0:69:1c:25:46:c7:e2:40:b5:e9:8b:84:d0:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B5:AB:A6:E2:3D:66:25:0A:62:20:8F:04:64:EA:6E:1E:05:89:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD7535AA2BE11EE81676712D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.52.0/24
Signature Algorithm: sha256WithRSAEncryption
12:28:8b:3d:96:8c:d1:69:86:b0:e7:7b:c4:1e:8a:5e:5e:2c:
71:2b:f6:b8:0a:8a:25:6a:d9:d1:9c:f9:8a:5d:e3:f6:0d:14:
c9:1c:63:53:ae:6a:5e:69:23:22:9c:c1:3d:f9:3b:5b:44:6f:
6e:ec:0a:0f:54:6c:1e:aa:cc:49:c9:86:5e:d2:c0:9b:1b:3c:
b0:4f:32:11:79:ac:e9:3b:f8:17:55:7a:0d:84:02:04:c8:51:
85:16:77:28:50:4d:a4:aa:10:2d:47:1b:0c:00:9a:13:66:43:
a4:21:f1:ba:be:a0:70:f9:33:8c:75:9d:51:f5:fc:f7:5c:76:
ed:93:00:f5:3e:38:97:a0:2f:bb:07:86:f6:b8:73:2a:f0:81:
eb:93:dc:12:42:ad:ee:8a:8c:02:e1:cf:61:58:45:cb:5d:56:
61:bf:08:78:58:c8:42:9c:8b:85:55:6d:02:99:62:a9:ae:e9:
29:0f:54:d7:94:a8:9c:69:63:a1:62:ba:70:10:b8:06:65:1e:
77:4b:9f:9b:14:b9:5d:20:82:d1:33:bd:ee:ac:09:93:3e:5d:
4e:75:11:7d:23:34:b1:2a:29:86:ae:ac:32:ca:00:29:3d:7f:
09:04:40:23:cb:ae:04:f2:df:54:4c:32:1c:62:47:16:d7:3d:
9e:43:29:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:09 2024 by rpki-client on console-fra.rpki-client.org