Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DC4931E671B11EE8A590C754AD9E6FC.roa
File: 5DC4931E671B11EE8A590C754AD9E6FC.roa (raw, json)
Hash identifier: rq4eFWlwzxg/quhY8CkP2OsL97SJeoQB+UEKAyNyBmI=
Subject key identifier: D6:C7:E6:F3:F7:FF:85:08:2D:2D:C1:AC:DE:4F:AB:2C:2C:3E:86:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3E03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DC4931E671B11EE8A590C754AD9E6FC.roa
Signing time: Tue 10 Oct 2023 03:16:13 +0000
ROA not before: Tue 10 Oct 2023 03:16:10 +0000
ROA not after: Mon 30 Sep 2024 03:16:10 +0000
asID: 133771
IP address blocks: 45.195.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15875 (0x3e03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 10 03:16:10 2023 GMT
Not After : Sep 30 03:16:10 2024 GMT
Subject: CN=6524c1fd-a564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:14:bf:2c:7b:3d:bf:ad:28:6b:d4:36:ad:
c0:16:3c:8d:09:36:1b:3d:b5:26:15:d1:de:de:f8:
cf:bd:05:44:1a:f2:68:64:36:c6:2f:c9:b4:11:a4:
67:3c:a7:16:bb:f0:d7:b7:6f:8e:17:04:9e:a6:72:
cc:ea:35:67:1f:71:aa:6e:3d:67:aa:2c:13:81:2d:
9c:8e:60:12:65:e4:ee:a3:29:2b:69:33:40:28:11:
3d:ff:68:50:33:48:95:e2:7c:55:bf:6a:3f:d1:15:
1d:56:74:7b:73:68:27:cd:68:cf:ca:0e:a0:2d:e5:
1e:0d:fb:96:6e:53:fe:77:89:56:53:59:91:d4:3b:
3d:e0:ae:eb:4d:eb:ba:c7:ed:33:2c:47:d4:8b:5d:
c3:a5:dc:a2:79:63:e1:46:6d:f9:02:a7:67:78:40:
8b:f8:b1:1b:3c:9c:6b:8a:2a:2f:d0:77:7b:b7:31:
95:16:33:00:7d:3e:1d:9c:dd:82:a4:49:b1:d3:37:
36:e2:69:33:ad:0c:82:01:79:a7:ce:78:a7:18:c2:
30:cf:66:4e:f0:40:36:b5:f0:b4:72:0d:d3:0d:db:
02:80:be:b6:20:06:e7:9f:66:53:42:f2:76:85:9e:
4e:89:bb:ed:50:fd:d6:bb:d8:81:f2:43:5b:d0:ce:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C7:E6:F3:F7:FF:85:08:2D:2D:C1:AC:DE:4F:AB:2C:2C:3E:86:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DC4931E671B11EE8A590C754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:43:e3:af:da:1b:27:18:11:6f:e3:c4:6c:95:cd:5c:a3:fb:
a0:06:7f:7a:5b:ca:83:a5:84:2a:67:f6:ac:90:bc:b5:d0:4a:
b3:c4:30:35:d7:35:f7:95:1b:8f:3f:a5:54:36:62:bd:38:d8:
92:c9:35:65:b6:be:46:30:3b:fc:f8:5c:fd:38:a0:74:b9:94:
38:40:75:bf:53:2d:25:e3:86:76:b0:15:ea:23:f1:8d:c8:a5:
fa:bf:5c:7b:16:66:52:51:a8:aa:90:39:fe:fa:7d:71:05:90:
91:e4:46:9e:48:8d:04:e8:83:9f:ea:2d:2a:0a:eb:1d:b2:19:
d9:d0:59:90:e1:0b:fd:af:39:a3:c6:20:1a:11:3c:b5:bf:c7:
5d:52:71:06:40:18:4b:8c:fa:fc:71:3f:54:ee:07:2d:09:2f:
fb:e3:97:10:a5:ed:e6:90:e6:f9:9c:c5:2f:14:c4:ab:56:8f:
07:89:96:51:ad:53:73:df:18:27:18:cf:c0:fe:38:f6:43:29:
73:9b:96:27:7f:7c:cc:a8:8c:c1:3c:73:2a:57:81:78:51:88:
24:91:3a:db:63:e7:6b:ec:1f:45:b2:31:88:b1:b3:60:05:ae:
87:b4:4d:b9:9f:11:1f:ff:17:e8:22:72:d3:00:e3:80:b3:3d:
5c:4e:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:53 2024 by rpki-client on console-ams.rpki-client.org