Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A8B7FB67EC811EE9BC2178B4AD9E6FC.roa
File: 7A8B7FB67EC811EE9BC2178B4AD9E6FC.roa (raw, json)
Hash identifier: oTB7Gbz+GKfp6YeMFLdVfQkajwu4tvsioMs1PBO0Qqw=
Subject key identifier: 81:CD:61:4D:25:16:C8:63:ED:8F:7C:70:09:C6:2B:A9:44:87:E7:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4531
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A8B7FB67EC811EE9BC2178B4AD9E6FC.roa
Signing time: Thu 09 Nov 2023 06:23:21 +0000
ROA not before: Thu 09 Nov 2023 06:23:17 +0000
ROA not after: Thu 07 Nov 2024 06:23:17 +0000
asID: 133847
IP address blocks: 45.200.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17713 (0x4531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 06:23:17 2023 GMT
Not After : Nov 7 06:23:17 2024 GMT
Subject: CN=654c7ad9-90f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:ec:95:65:d0:d1:aa:ea:bb:a7:18:1a:e5:
b1:f4:c7:4d:1d:b6:de:54:43:4d:ef:cc:95:6a:ee:
0c:51:63:39:54:36:81:9c:5d:f0:8d:ad:77:08:30:
0d:3c:55:d4:5f:92:04:56:e2:21:4b:8b:00:6d:cb:
ac:38:1d:a0:89:63:eb:48:25:e7:73:63:80:90:17:
6a:7f:fc:fe:d1:e2:9e:03:65:07:bb:30:b4:32:f5:
1e:6b:85:3d:1f:dc:34:1f:49:24:48:de:8d:d3:d0:
fb:d0:83:6b:29:2c:88:62:a3:c4:ec:dc:be:e8:4b:
fd:cc:d6:e9:48:93:cb:c4:77:a2:51:b0:b1:ea:02:
80:52:48:1d:f6:f7:cd:91:d6:1e:b4:4b:cb:51:2a:
7e:0f:fa:f7:e0:52:a9:73:0e:65:a9:fd:27:f4:ca:
ab:21:29:e1:f3:4f:15:04:34:e7:95:61:c3:a2:2c:
8b:9a:28:85:6c:7a:81:0e:15:97:39:ed:da:50:bf:
b4:3d:ae:11:3c:26:55:29:84:2e:9a:35:d9:82:42:
74:b9:5f:b8:8f:69:a2:ef:a7:25:e5:02:98:1d:6d:
bb:65:4c:9a:0e:56:c7:02:30:af:8e:b9:83:dd:67:
e4:81:c3:ca:ef:71:75:a8:53:77:00:07:0b:37:9f:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CD:61:4D:25:16:C8:63:ED:8F:7C:70:09:C6:2B:A9:44:87:E7:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A8B7FB67EC811EE9BC2178B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.90.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:79:98:f1:0f:4d:8a:a1:23:27:a0:f4:6e:5f:2b:f8:66:e4:
03:ea:9e:9b:08:71:96:f8:a1:db:45:6a:12:c8:ab:c5:d8:e5:
27:be:09:38:ae:84:bf:07:d7:51:d9:cc:29:0d:ec:82:f3:fb:
b4:37:7e:2f:88:6e:b0:39:14:08:e3:4d:6f:5a:52:22:88:e2:
61:56:c4:10:70:b7:27:d7:16:f2:ba:ae:d1:cf:ca:ad:43:69:
1f:a3:22:97:32:a8:f8:3d:4a:95:3d:2b:33:11:93:5a:27:2f:
cc:e7:ec:8f:eb:57:3a:9a:90:f9:41:bf:16:f2:d3:c8:27:3c:
2d:47:43:74:94:ad:40:df:3b:b4:d8:c5:ec:e2:45:07:48:ef:
04:ec:ab:86:ec:64:2a:ee:99:c1:d4:14:8f:75:f4:06:c2:07:
59:9c:4a:ba:94:de:f2:b2:8f:68:ec:fd:4c:53:d7:7e:de:a1:
84:5b:ac:a6:e2:38:75:b5:5f:c6:82:78:ac:ef:40:25:3a:95:
42:7c:9f:ee:ab:65:24:b2:bf:36:33:4c:be:0d:6e:6b:5b:92:
56:82:fa:fd:a8:d5:d5:4e:17:8e:48:35:3d:65:60:f4:c9:ee:
7e:c5:85:e9:88:ea:3c:ba:99:c0:1f:f5:10:8c:a8:a9:ec:5f:
6d:7f:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:55 2024 by rpki-client on console-ams.rpki-client.org