Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75F1451CA38F11EEADB2AD14D25BE465.roa
File: 75F1451CA38F11EEADB2AD14D25BE465.roa (raw, json)
Hash identifier: +BhqAzjLvV5ugPQtNJ1RPpjpVuGKKw2q+AUVWB7juNw=
Subject key identifier: 4A:6F:91:8E:0E:16:7E:07:C9:68:83:81:6B:84:A2:B4:C7:00:A4:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 592D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75F1451CA38F11EEADB2AD14D25BE465.roa
Signing time: Tue 26 Dec 2023 01:38:25 +0000
ROA not before: Tue 26 Dec 2023 01:38:22 +0000
ROA not after: Wed 02 Oct 2024 01:38:22 +0000
asID: 393294
IP address blocks: 45.199.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22829 (0x592d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 01:38:22 2023 GMT
Not After : Oct 2 01:38:22 2024 GMT
Subject: CN=658a2e91-155b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:55:24:16:eb:96:1b:27:a3:38:e7:37:f5:
fd:4f:59:dd:9f:8a:bb:6a:a7:93:17:22:2e:35:61:
19:c3:19:90:3b:9e:bc:91:30:58:c1:5c:34:ea:e2:
fd:d7:c1:90:8a:7e:85:ce:a5:f7:ce:3f:2a:22:98:
2b:9a:15:e2:d5:ed:f2:20:cd:38:ce:b8:03:90:4a:
5d:41:1c:c5:75:99:29:85:75:6b:77:6d:8b:d2:bf:
0a:77:dc:06:c4:a0:cd:9b:3e:97:d5:71:7b:53:87:
94:17:f9:a9:5b:60:20:54:31:ca:9f:cb:b1:17:f8:
6a:f5:9f:39:3f:46:d0:bb:97:e8:50:da:0e:98:27:
83:84:7a:0f:95:97:f1:a1:56:ba:a4:ac:04:58:f5:
3c:f9:28:eb:2b:9f:f3:a4:74:95:eb:cf:e8:fa:6a:
b9:7d:a8:5f:b8:aa:32:18:50:bf:c9:70:38:87:21:
bb:48:c0:61:a7:9e:b9:a1:3d:ce:67:af:90:98:af:
0f:f6:8b:9d:ad:70:15:6d:c9:c2:ce:dd:d1:d1:42:
d6:a0:91:e0:54:38:48:4b:65:b0:04:ec:06:92:cc:
b1:0c:00:41:02:b4:0f:da:2e:85:3b:80:f1:db:6c:
bd:ec:cd:47:fd:80:57:0c:2f:b4:86:18:47:6d:89:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6F:91:8E:0E:16:7E:07:C9:68:83:81:6B:84:A2:B4:C7:00:A4:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75F1451CA38F11EEADB2AD14D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.166.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:09:bc:f0:cf:be:11:f1:fe:a5:6a:f6:d2:f5:70:1c:3b:87:
f9:2b:11:fc:a1:bf:3a:32:98:43:a3:72:c8:e9:4c:54:e2:a8:
20:9f:48:84:07:3c:bc:34:55:e5:f7:b2:72:32:e6:64:f9:3b:
ac:1b:02:2f:01:3e:d7:c3:39:d4:d1:3b:5d:10:82:71:1d:a9:
b3:e3:f7:22:b2:88:8b:d0:4e:c9:fb:48:d9:bb:12:d0:7e:e0:
f9:9d:89:17:3c:f9:5e:70:32:b7:8b:7a:f2:11:15:7f:c3:c0:
00:35:8f:38:fe:e7:e5:ff:ae:7a:30:04:d9:31:86:99:2b:75:
04:77:1e:5d:e2:4a:4f:99:cf:66:55:a4:a7:b2:39:ef:5f:22:
13:91:c9:bb:cf:33:cb:22:4d:56:cc:50:55:80:ef:1d:4e:3f:
e9:7b:7f:69:31:eb:bf:49:0f:ef:d2:77:85:64:6a:fb:0c:ac:
c1:94:6d:98:f2:a3:66:ae:7c:73:94:9b:95:e5:7d:7f:b4:6f:
e8:3f:34:2c:0b:98:1d:2a:c1:7a:87:8f:46:b6:97:28:94:fe:
ee:2d:30:d7:f2:61:16:b6:75:40:cc:cf:73:b1:c2:b6:cd:ec:
d9:42:42:f1:6c:d9:f7:cf:35:16:5f:3f:80:1e:e4:01:ef:c6:
29:05:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:11 2024 by rpki-client on console-fra.rpki-client.org