Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63218D78B80411EEA5BB8AA4775412E6.roa
File: 63218D78B80411EEA5BB8AA4775412E6.roa (raw, json)
Hash identifier: 6Lgencoi85zZl7MjtaK/OMxWpMBXkUH9UAhM74QtCgo=
Subject key identifier: B1:57:C7:A5:8D:32:A3:A9:3D:9F:DF:A5:E5:6E:3A:F5:6C:B6:7E:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 6420
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63218D78B80411EEA5BB8AA4775412E6.roa
Signing time: Sun 21 Jan 2024 02:25:48 +0000
ROA not before: Sun 21 Jan 2024 02:25:44 +0000
ROA not after: Thu 08 Aug 2024 02:25:44 +0000
asID: 133861
IP address blocks: 45.207.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25632 (0x6420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 02:25:44 2024 GMT
Not After : Aug 8 02:25:44 2024 GMT
Subject: CN=65ac80ac-e178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9a:3e:c0:04:e7:a3:79:85:e6:c9:b2:58:3c:
90:f2:f1:80:d4:d4:d0:1d:1d:77:9a:a1:6d:9b:ec:
27:03:92:8e:c7:ec:7a:56:0a:47:ab:69:8e:c7:1d:
a9:8b:d2:e6:27:6d:40:86:8f:a1:60:00:70:70:08:
4c:9e:28:31:4f:1a:42:9e:03:26:8c:2c:c9:08:5c:
a2:bf:f9:59:2c:5e:d0:99:4e:40:03:3f:65:42:d0:
a9:e4:4a:41:3a:aa:33:97:63:c5:ff:e2:a6:f4:be:
44:c2:2e:f6:25:d1:76:a1:70:5e:87:4c:7e:b6:f1:
d0:d9:cf:3f:12:70:02:36:1d:e5:b9:3d:10:db:dc:
00:48:c0:51:8c:6b:68:17:1e:e5:d5:c2:53:78:b5:
06:d4:1d:aa:f9:7d:6c:7d:16:f9:41:2b:cf:f4:65:
91:d1:b3:98:1f:b5:dd:43:b1:dc:52:bd:90:b9:16:
8a:8f:af:03:54:f1:d1:6d:d1:7b:3a:6e:d1:47:ad:
45:33:ea:cb:fb:71:99:93:cd:e5:31:1d:b1:7d:7e:
cf:9c:be:17:c1:fe:5d:02:96:3c:69:9b:1d:ab:bf:
77:74:71:53:bd:73:9e:63:80:33:5b:bf:c5:89:61:
4c:5d:a8:f3:da:1e:62:e2:73:c0:a4:aa:9d:6a:9a:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:57:C7:A5:8D:32:A3:A9:3D:9F:DF:A5:E5:6E:3A:F5:6C:B6:7E:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63218D78B80411EEA5BB8AA4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.36.0/24
Signature Algorithm: sha256WithRSAEncryption
14:54:14:06:a5:74:f3:59:cf:ad:69:d6:dc:0f:b7:96:fe:bc:
b8:f0:98:58:8b:aa:38:93:ae:6e:ab:da:fa:dc:d5:5c:a3:33:
7b:83:12:70:ba:8a:e8:7b:23:a2:be:cd:bd:66:fe:c4:8a:fb:
02:d2:33:ad:d0:b7:f2:9c:10:8f:c6:e2:12:dd:cf:45:3b:95:
0a:17:84:c2:1b:c2:cc:9c:80:1a:04:8e:0e:09:a4:a1:fb:07:
08:51:d9:76:bf:18:0f:f7:d7:ec:75:85:7d:db:a8:a1:3d:65:
60:fd:63:ff:52:30:3c:25:bc:9b:dc:5c:46:42:98:0a:ae:46:
f6:78:da:e6:e9:ea:94:23:f1:71:ef:04:bd:63:da:06:10:b3:
4c:e3:9c:e8:64:6c:57:b7:a5:ee:b6:0e:0c:69:04:37:ea:65:
a2:75:b8:a6:ff:e5:7f:f1:a3:66:bf:38:c5:ad:ea:a7:e5:43:
ab:4f:6a:5d:15:16:2d:4a:7d:3b:0d:a0:13:79:1f:32:01:fc:
1e:5d:3d:40:29:66:ce:54:cb:6f:a0:3b:21:e8:e8:34:7c:86:
09:04:10:1e:44:1f:27:eb:83:2d:00:82:ef:e9:02:89:f0:70:
b8:b4:3b:df:4a:4f:75:b6:6c:0c:d9:54:88:6c:3b:cf:8c:16:
a6:23:ad:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:53 2024 by rpki-client on console-ams.rpki-client.org