Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72D974BE157611EEAE90FF194AD9E6FC.roa
File: 72D974BE157611EEAE90FF194AD9E6FC.roa (raw, json)
Hash identifier: K4/icbzLfGGUf0TBouK+PJkRLEVNZBVxdQ+LaKd9FRU=
Subject key identifier: 56:18:E9:4F:E6:74:F4:86:18:CF:5E:02:31:E0:9A:95:5A:97:3F:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2DEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72D974BE157611EEAE90FF194AD9E6FC.roa
Signing time: Wed 28 Jun 2023 05:41:37 +0000
ROA not before: Wed 28 Jun 2023 05:41:33 +0000
ROA not after: Tue 29 Oct 2024 05:41:33 +0000
asID: 135607
IP address blocks: 45.194.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11754 (0x2dea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 05:41:33 2023 GMT
Not After : Oct 29 05:41:33 2024 GMT
Subject: CN=649bc811-1633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:c4:51:44:55:84:56:37:4f:cc:63:06:66:
03:09:2b:57:97:4a:2b:71:82:f2:a4:1d:ff:1d:b9:
d3:fd:2e:42:31:24:8c:29:01:0c:56:1c:57:c0:9e:
71:a1:46:42:d4:7b:f9:c9:69:db:9e:ae:46:b5:31:
b5:9c:d3:12:e5:f7:e0:d3:5f:25:21:2c:3b:bd:05:
d2:86:93:2d:0e:11:79:95:bc:09:9c:d7:34:86:96:
29:d3:51:bb:bc:19:3f:80:a7:56:5d:69:8f:35:94:
d1:3d:77:82:fc:37:92:ae:e2:de:ec:40:cf:9d:21:
dc:e1:21:50:57:ea:24:3a:4b:dc:40:a4:12:00:17:
fc:5f:d1:1f:8a:e8:5f:c1:eb:e0:23:c0:7c:60:f0:
85:e6:3e:54:a9:88:47:bb:b3:2b:30:07:29:92:bc:
27:87:48:35:51:29:d8:0b:34:b3:c4:42:70:3c:7b:
d3:4b:7a:84:ec:b6:82:33:cb:65:ac:5b:bb:04:99:
8a:a8:16:a4:56:14:d7:08:f0:d2:e9:6b:11:a3:5b:
44:9e:56:27:44:db:9a:f7:c8:ff:c3:1e:46:95:35:
cc:7f:d3:ef:b5:85:b0:2b:e0:a9:03:19:fa:6e:73:
70:0e:3a:51:d8:1b:93:2b:7a:f3:27:dd:ce:23:da:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:18:E9:4F:E6:74:F4:86:18:CF:5E:02:31:E0:9A:95:5A:97:3F:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72D974BE157611EEAE90FF194AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.4.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5f:ed:13:9c:9f:03:75:45:b8:56:0f:30:f6:81:35:24:17:
96:e8:74:9e:06:f7:dd:dc:4d:5e:15:e1:7e:bb:ef:83:3c:67:
a2:89:ff:68:a0:85:ec:7d:af:13:b4:42:4f:7f:92:95:1a:22:
58:04:9e:5a:15:7b:92:a0:f2:5c:a1:a4:4d:0e:ee:89:9f:9a:
e5:d8:5f:84:81:9b:ea:bf:77:52:46:41:3d:96:c8:e9:04:3e:
55:af:d3:21:09:86:72:ea:f3:59:95:93:96:60:93:1e:74:08:
7b:a4:50:46:0f:02:92:09:9c:92:c4:8c:b3:c4:56:24:35:5b:
f1:81:91:dd:3e:e8:81:04:c8:0f:c1:c3:e2:bc:24:09:b6:ef:
8b:c9:1c:e0:e3:5e:51:eb:b4:af:89:51:10:95:44:f7:7a:b0:
7e:e1:a5:74:22:3c:fb:3d:b0:8c:de:b6:45:37:93:b8:72:40:
02:e0:b0:b1:50:42:21:14:05:d9:aa:b0:bc:30:ef:31:68:f0:
fc:a4:b5:71:bd:95:36:32:34:40:f2:42:14:4f:fd:64:de:88:
e6:22:45:73:eb:0c:9b:b4:57:1f:ca:a0:7a:80:a7:f6:9b:df:
25:58:ea:3f:84:b9:88:49:03:97:07:4a:c5:8e:bf:16:ff:02:
78:ca:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:11 2024 by rpki-client on console-fra.rpki-client.org