Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68DCAA020CE811EFAD347014017001B1.roa
File: 68DCAA020CE811EFAD347014017001B1.roa (raw, json)
Hash identifier: bwPc4jUATW+EKIDg5PQuQFmMWQIgDsNa02dK7pCKbXc=
Subject key identifier: 0B:A0:EA:C5:14:64:9A:15:6D:47:51:6E:5B:E9:FA:99:60:03:D3:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8872
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68DCAA020CE811EFAD347014017001B1.roa
Signing time: Wed 08 May 2024 03:09:40 +0000
ROA not before: Wed 08 May 2024 03:09:37 +0000
ROA not after: Thu 29 May 2025 03:09:37 +0000
asID: 140227
IP address blocks: 45.194.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34930 (0x8872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 03:09:37 2024 GMT
Not After : May 29 03:09:37 2025 GMT
Subject: CN=663aecf4-648a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:b4:3e:0a:d7:d9:c5:f7:66:61:69:c6:1d:
01:e7:1e:d3:ef:a1:55:b0:a7:fb:4f:7e:ca:29:94:
9a:b5:8d:e5:ab:c0:81:f7:87:38:a3:17:76:0b:43:
26:d5:75:ef:57:0e:71:6f:8e:e2:d6:23:e6:01:13:
ac:d4:2b:31:25:7b:e3:4c:a5:99:0a:20:7e:b5:1f:
6f:1c:84:6a:e4:2f:1e:8d:98:47:de:eb:2e:fa:ab:
9d:1d:43:22:f0:52:00:26:0b:78:9f:d7:79:9f:a4:
9e:f3:63:aa:24:fe:8f:07:31:8c:ed:09:22:3c:32:
45:10:6e:55:c0:13:19:d1:68:9e:26:6f:2e:dd:70:
27:c3:eb:30:b6:fb:6e:16:20:b4:0d:53:c2:f1:59:
8b:fa:69:2a:29:3e:b9:62:48:e3:0b:88:e7:be:93:
9b:61:6a:f4:35:29:d0:ea:db:c0:d2:93:f9:f7:7e:
ff:2b:5c:1e:84:68:b8:38:5e:b7:8a:08:28:f0:0c:
30:4b:4c:0d:c7:e4:44:b0:9c:8e:e0:5d:0b:4a:5e:
69:6d:7f:bf:6d:94:45:a7:31:44:86:6f:5e:1b:43:
08:7e:3c:6b:28:6c:4f:15:a3:42:1c:01:62:0b:8e:
8e:1f:38:2b:b1:6d:1a:72:94:b0:26:65:8c:bc:38:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:EA:C5:14:64:9A:15:6D:47:51:6E:5B:E9:FA:99:60:03:D3:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68DCAA020CE811EFAD347014017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/21
Signature Algorithm: sha256WithRSAEncryption
38:a1:c6:8e:52:59:07:92:5d:a7:61:20:d3:fb:a0:69:10:26:
08:ea:57:3a:95:03:e1:09:fc:57:f0:58:0c:ee:3b:96:e8:ea:
3b:7c:0e:cf:ef:eb:da:af:55:d8:13:7e:eb:7e:2b:60:32:5d:
b5:75:8f:1f:b4:71:2e:95:f3:1b:de:60:7e:8b:3e:d6:80:27:
a9:a7:3b:38:0a:d1:f9:97:5e:55:c1:30:74:b4:a6:12:f7:72:
5f:54:b3:2f:80:7b:75:6c:25:4f:55:08:05:54:5b:a5:b8:a5:
17:d4:67:9e:c9:2f:02:4f:43:d3:b5:02:86:20:52:4c:cd:17:
76:b1:5f:14:3b:d7:33:a9:a9:54:05:41:47:25:e7:0a:b3:b0:
79:9d:a7:b6:0a:c8:db:6f:07:1a:4c:3e:65:8d:1f:2d:6a:92:
0d:8d:4f:28:4f:d6:7e:93:1a:1c:4d:1d:d8:62:4a:61:cd:3a:
c5:1c:d0:a0:eb:ac:30:70:3d:3c:25:64:0e:fb:ba:5e:a3:73:
f9:7e:f3:17:8a:5a:5b:3b:4c:d7:eb:37:2b:44:e9:26:e1:8a:
1d:96:b7:77:98:e8:f5:af:92:35:b7:7f:85:2b:61:56:08:88:
ed:c1:d2:7f:e5:1b:b3:48:dc:a9:01:ee:d8:ff:11:5a:01:5a:
f8:b9:c5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:33 2024 by rpki-client on console-fra.rpki-client.org