Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63FAE91E7EC111EEB2B35F754AD9E6FC.roa
File: 63FAE91E7EC111EEB2B35F754AD9E6FC.roa (raw, json)
Hash identifier: QAWdJfvabDth9mNlsyiTCkOrlJ2oc4ewU1PihCl1QOs=
Subject key identifier: C2:D6:0C:F2:62:F1:1D:4E:26:9F:46:CF:64:C0:24:65:79:00:DC:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4519
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63FAE91E7EC111EEB2B35F754AD9E6FC.roa
Signing time: Thu 09 Nov 2023 05:32:37 +0000
ROA not before: Thu 09 Nov 2023 05:32:33 +0000
ROA not after: Thu 07 Nov 2024 05:32:33 +0000
asID: 133847
IP address blocks: 45.200.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17689 (0x4519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 05:32:33 2023 GMT
Not After : Nov 7 05:32:33 2024 GMT
Subject: CN=654c6ef5-50f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fb:bf:ca:7a:fe:b1:6d:77:1e:2a:39:e7:8a:
cc:44:ec:6a:3d:19:af:a9:7f:49:d8:fe:fb:89:63:
8a:4a:fd:1a:41:c1:72:79:7d:7d:ca:be:72:6f:ea:
aa:cd:f8:80:60:fc:8c:25:fe:93:07:d3:a2:e7:8d:
88:de:34:91:4e:0e:76:f7:cc:f9:da:d3:ff:cb:3a:
64:cc:1d:b2:79:d2:da:7e:76:da:48:56:f9:49:e8:
11:66:84:50:68:cd:2e:0c:98:6e:d5:eb:a6:92:d7:
2d:4f:20:3a:0a:93:b1:57:60:49:6d:ab:c0:c0:33:
b2:a5:50:0b:ee:20:7e:62:54:8a:a4:b7:79:c6:dd:
9d:a5:3c:dd:73:37:d4:f2:bf:0c:a7:3a:dc:20:c6:
29:e9:79:25:40:65:0c:d2:08:6c:02:2b:dd:06:79:
31:09:f3:de:f4:29:13:ea:56:6c:c8:c8:95:73:c0:
e4:94:46:4c:11:6d:3c:f4:65:6e:f7:1d:61:e4:c7:
5d:7a:5e:5d:f3:c1:8f:93:1f:1f:7c:6b:4d:4a:c3:
1a:1f:bc:c3:2b:de:a9:6d:78:8a:28:f9:fd:f4:39:
d5:7c:ec:ea:d2:06:0e:71:7b:78:04:29:8a:d6:58:
2e:f8:df:cc:19:ff:7b:26:b2:14:b6:aa:90:70:27:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D6:0C:F2:62:F1:1D:4E:26:9F:46:CF:64:C0:24:65:79:00:DC:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63FAE91E7EC111EEB2B35F754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.65.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ba:60:88:c9:5e:e7:71:59:1b:26:75:b6:ee:d6:9a:9c:65:
45:56:8f:fd:8c:a8:2c:9c:2f:01:f6:67:90:ff:a8:b6:39:8f:
97:b1:e7:1d:b1:cf:0d:dd:5f:cc:f2:19:d0:e7:f4:fb:f7:57:
a6:86:4c:58:f2:fd:06:0c:d1:23:7a:05:87:97:6d:5d:7e:5f:
d3:b9:c3:50:74:9b:9c:81:34:87:f5:60:70:0f:9b:94:bd:f3:
5a:94:96:6c:59:a3:a6:ce:f9:e7:16:a3:c8:17:f7:aa:5a:a0:
52:de:dd:3b:72:e1:9f:62:74:aa:fd:9c:e8:6a:21:64:2a:cc:
88:f4:2b:7e:79:da:fc:fc:7a:3e:90:14:2d:be:da:e2:f8:ca:
02:f5:0e:e5:9b:8b:8c:c2:9c:a2:b9:1f:66:10:4d:56:90:1a:
c8:79:12:4c:fb:8d:70:4e:69:c9:e9:95:6c:2d:70:3e:a3:a9:
47:34:8d:eb:17:9e:69:54:1f:27:c8:c2:eb:e9:76:b0:ac:76:
0e:eb:91:e9:38:cb:6e:37:c9:f8:8b:5e:34:68:b1:d8:6b:47:
c8:81:9f:a1:ee:64:84:06:37:d4:81:d5:d9:44:78:10:04:44:
f9:8a:43:82:ec:d6:7f:ab:15:85:ae:e6:01:72:5b:9c:1a:ce:
70:4d:c9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:10 2024 by rpki-client on console-fra.rpki-client.org