Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C8FFD5E4BEE11EE83B8B4544AD9E6FC.roa
File: 6C8FFD5E4BEE11EE83B8B4544AD9E6FC.roa (raw, json)
Hash identifier: 4yFJudf/7YBMGXiTtqQWktJaLvP+ydmAZJESPeeJ+ow=
Subject key identifier: 1D:E1:1D:9B:DE:B2:42:6E:A2:6C:43:76:9B:D3:0F:6A:A2:C3:B8:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 37E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C8FFD5E4BEE11EE83B8B4544AD9E6FC.roa
Signing time: Tue 05 Sep 2023 13:16:29 +0000
ROA not before: Tue 05 Sep 2023 13:16:26 +0000
ROA not after: Fri 24 May 2024 13:16:26 +0000
asID: 131178
IP address blocks: 45.201.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14307 (0x37e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 5 13:16:26 2023 GMT
Not After : May 24 13:16:26 2024 GMT
Subject: CN=64f72a2d-421e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:69:ab:c4:0c:ee:65:96:d4:0a:f1:70:b5:
a3:29:73:e7:28:22:96:f2:70:eb:cd:55:8b:7b:43:
42:84:2f:ef:52:c6:79:09:20:b2:b1:2d:82:17:b7:
93:d9:55:76:44:a0:68:42:0d:02:97:cc:e2:90:9a:
b3:f4:64:62:4e:b7:ef:8f:4f:50:53:47:2b:07:27:
b5:35:e3:d4:ab:e7:18:97:dc:d0:88:87:2d:b4:3b:
5f:9d:9c:f9:69:e0:26:de:df:05:21:26:ec:0c:84:
89:dc:d5:e1:7e:d2:28:59:94:4b:2f:2a:95:d0:d7:
b2:55:d8:26:ac:f2:8b:4c:de:d0:3e:41:ec:11:79:
42:6c:c9:e9:fc:0f:93:29:02:a1:e5:81:82:db:77:
9d:9e:f8:3f:4b:5a:d5:8d:44:69:5c:a2:fa:90:a6:
43:cc:d9:bc:a7:4d:f8:73:1a:ac:ae:45:d4:94:0b:
2e:54:96:eb:34:c0:a8:78:3e:98:a4:dc:ba:a2:d3:
bd:78:b4:95:65:54:e0:24:c7:18:8c:99:27:5a:a8:
89:fb:93:7a:29:67:a2:39:1a:fe:b1:b2:17:49:1f:
2e:8c:ef:cd:ed:6b:26:8e:a5:dd:b6:22:aa:5a:38:
45:f6:80:a2:92:3d:97:0d:88:ac:7d:88:5e:1c:b8:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E1:1D:9B:DE:B2:42:6E:A2:6C:43:76:9B:D3:0F:6A:A2:C3:B8:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C8FFD5E4BEE11EE83B8B4544AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c8:25:31:95:d2:46:7b:ad:f2:90:c2:0d:c2:6f:28:1c:27:
fa:b4:15:02:5d:d3:d1:4e:f5:ab:cd:e8:30:68:d1:aa:1c:30:
3d:15:b1:70:75:3b:35:c3:f8:61:53:db:89:26:56:35:f6:ce:
75:9b:5a:d4:b4:ea:f4:4e:db:3e:ff:a2:26:a1:5c:1b:c7:36:
83:3a:8b:b3:61:de:56:5c:96:7f:63:8f:32:ea:58:e3:08:0c:
d9:1c:7d:b1:29:a7:e3:e9:73:2d:81:07:c6:dc:6d:21:cc:7d:
be:2f:81:16:a0:fc:b8:ca:b7:1d:dc:35:a8:17:b8:b4:6e:1f:
a3:18:ba:e3:0e:11:ce:cf:e8:73:f4:3f:23:16:0d:b0:8c:55:
90:9a:a0:3d:bc:bf:5c:1f:34:aa:66:40:ea:90:39:7b:b1:d6:
85:99:44:35:4a:01:71:1f:88:30:08:fa:28:55:fd:44:95:04:
7d:84:2d:17:e8:dd:27:73:12:6a:c9:41:0f:d9:72:d7:ee:7f:
45:61:d2:ed:2c:48:05:70:e7:3b:71:df:27:9c:2a:91:1b:7a:
09:e3:76:f7:54:9f:da:e6:53:ae:78:ff:62:7f:c9:c0:e5:14:
9d:b6:36:8a:85:3f:ac:cc:f0:ef:09:8e:07:89:15:b5:44:03:
46:cc:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:41:21 2024 by rpki-client on console-ams.rpki-client.org