Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8639BD2C157911EE8CBA0E244AD9E6FC.roa
File: 8639BD2C157911EE8CBA0E244AD9E6FC.roa (raw, json)
Hash identifier: LpEc1hZp/eO7u5iIt3x4Eytbqd6b9LjPAH0W9l6CFIc=
Subject key identifier: C1:8D:ED:0F:36:AA:D7:7E:B0:72:98:59:E4:5B:75:CB:54:D0:20:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2DFC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8639BD2C157911EE8CBA0E244AD9E6FC.roa
Signing time: Wed 28 Jun 2023 06:03:38 +0000
ROA not before: Wed 28 Jun 2023 06:03:35 +0000
ROA not after: Tue 29 Oct 2024 06:03:35 +0000
asID: 135607
IP address blocks: 45.194.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11772 (0x2dfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 06:03:35 2023 GMT
Not After : Oct 29 06:03:35 2024 GMT
Subject: CN=649bcd3a-abb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:15:6c:88:b6:85:31:b6:da:48:e0:6e:21:
04:ff:3c:27:46:6d:cd:df:0e:a7:cc:db:5b:dd:56:
db:78:d3:15:f0:0f:c1:5e:5b:71:5b:60:45:b7:45:
05:5b:3c:19:47:37:c1:a9:16:80:87:61:7d:18:2b:
81:d2:aa:97:df:4c:1a:67:5c:98:92:9a:87:49:aa:
f6:a8:d9:65:f3:31:5a:c2:7a:3c:be:f0:1d:e4:22:
68:c2:6d:82:aa:58:e4:0d:29:76:3e:8d:b4:b9:77:
4f:85:bf:26:2e:9a:bd:e6:d1:c5:25:82:b1:97:4a:
da:72:aa:a1:cf:a7:a9:c3:96:91:ca:ac:f7:3e:9f:
f4:11:14:dc:0f:57:01:03:37:1b:f7:5c:94:bf:5c:
36:9b:58:d4:33:21:ef:f5:58:c0:0a:1c:f9:5d:d1:
dc:56:37:4e:01:97:64:04:22:8b:54:59:3e:33:14:
4d:ad:66:8f:81:81:72:5c:90:38:6b:28:11:dd:8a:
58:27:f8:87:10:f6:ca:0f:72:c6:f7:82:eb:b6:54:
0f:fe:f3:c7:bc:65:8c:c9:d0:39:b3:57:99:99:53:
ce:8d:7b:f7:b1:d4:f7:7d:1a:5d:08:97:82:72:09:
51:84:53:6f:b2:bc:c8:72:8d:a5:ff:5f:85:39:8b:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8D:ED:0F:36:AA:D7:7E:B0:72:98:59:E4:5B:75:CB:54:D0:20:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8639BD2C157911EE8CBA0E244AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d1:b0:13:7c:9f:5f:b1:ab:6d:bd:70:41:73:e3:cb:72:67:
91:4f:72:5e:3e:27:22:e1:bc:56:b7:0e:77:fa:d7:e6:23:2a:
66:ad:d9:c8:ae:47:88:eb:ad:1e:59:c8:13:97:07:d3:ad:1e:
23:bc:46:34:eb:76:14:cb:9d:0e:14:8e:37:40:23:68:21:00:
60:c7:9e:18:13:f9:99:90:b6:f0:4f:fd:d4:4e:4e:88:e5:44:
24:29:9c:1d:44:5b:be:8d:14:6c:1d:91:41:40:54:d6:9e:a0:
7e:5c:ef:55:5b:08:21:14:cc:00:8d:17:43:a1:b6:6e:0b:d8:
ef:e3:15:ab:70:fc:c1:86:09:82:22:97:53:3b:2a:f5:cc:85:
87:86:d7:20:4b:a4:37:42:6f:c5:0b:cf:fb:d1:f7:8c:52:d5:
d3:d9:b2:9d:39:7b:c0:b2:ae:ff:78:95:17:32:7a:2a:bc:64:
5b:d2:4f:be:01:a1:92:39:80:22:1f:3c:28:86:f5:91:66:69:
c2:99:29:75:6d:81:1d:b3:ce:ef:2a:3a:19:25:09:0e:60:00:
49:a5:16:13:08:86:8f:0b:3f:59:08:89:78:88:25:0f:62:6f:
aa:c4:32:f0:2c:34:13:0d:d8:3d:f9:56:ae:88:2b:b9:54:12:
8b:8c:4b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:08 2024 by rpki-client on console-ams.rpki-client.org