Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/883DD1745EB911EE9292CB4F4AD9E6FC.roa
File: 883DD1745EB911EE9292CB4F4AD9E6FC.roa (raw, json)
Hash identifier: hXEbZZbPULG+pyLRTdeLtirNc85sAno+pSfZp60Xp+U=
Subject key identifier: 99:B0:D7:F8:F0:D4:1B:CE:DF:1A:97:B1:30:A2:CF:A9:B6:3D:9D:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3D32
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/883DD1745EB911EE9292CB4F4AD9E6FC.roa
Signing time: Fri 29 Sep 2023 11:15:44 +0000
ROA not before: Fri 29 Sep 2023 11:15:41 +0000
ROA not after: Sat 03 Oct 2026 11:15:41 +0000
asID: 27947
IP address blocks: 45.195.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15666 (0x3d32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 11:15:41 2023 GMT
Not After : Oct 3 11:15:41 2026 GMT
Subject: CN=6516b1e0-6f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e1:c3:28:f7:b2:06:ee:ec:99:02:61:9d:f4:
5e:bb:49:5c:09:a4:71:e3:e6:d9:8b:74:4a:e2:4c:
23:9d:cd:9a:a3:2a:27:cd:51:71:17:ab:b3:9a:ba:
27:db:bb:7b:8f:d3:ee:b7:97:22:67:b3:f8:94:09:
c1:24:74:3f:7a:40:cf:43:b3:95:7a:eb:df:de:be:
3e:b7:86:99:3c:c4:50:00:45:6e:39:14:b0:b1:6f:
5c:55:7d:34:09:95:4e:f0:c7:1a:38:de:79:4b:e6:
4e:67:64:28:0b:28:f0:a8:b0:73:fc:4f:50:9d:c1:
4e:4b:e5:d0:39:33:d3:7e:d7:3a:ec:bc:3c:bd:71:
3f:08:11:b3:96:70:f4:f5:f5:a0:e9:95:8f:22:19:
4a:02:8e:5c:56:a4:22:65:0d:7d:15:44:46:e8:c3:
52:f1:ee:32:92:28:16:cb:83:11:b9:58:6d:71:3e:
2f:4a:7f:dd:3d:39:c8:32:8e:c5:87:43:de:c7:61:
a8:3a:95:aa:48:0b:1c:8e:8b:1f:fb:12:13:69:28:
35:a3:33:24:d0:d2:02:11:f7:98:a0:9d:a4:3f:2c:
c7:96:d4:fa:fe:62:06:1c:a0:da:ad:d1:25:ef:c6:
a3:05:28:72:45:30:15:50:16:cd:f6:ff:03:12:7d:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B0:D7:F8:F0:D4:1B:CE:DF:1A:97:B1:30:A2:CF:A9:B6:3D:9D:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/883DD1745EB911EE9292CB4F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.132.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a2:83:76:73:e9:21:c1:e7:08:ee:9f:25:31:b4:79:d8:d2:
f9:34:51:57:d6:28:20:66:df:c8:dc:41:90:6b:91:62:7c:8e:
35:be:ab:c2:2e:8b:25:0b:d7:17:24:99:97:b1:52:87:af:45:
e8:54:3a:39:49:1a:22:ba:e4:fc:40:58:65:57:be:c8:a1:86:
04:84:fb:79:b0:31:e8:32:41:3f:3a:58:e4:79:8a:fe:fb:53:
82:6a:6c:b5:57:db:e1:76:e8:65:f6:64:13:dd:fb:d8:5e:fc:
65:1e:4c:69:18:f3:7c:09:c4:b8:40:5f:c4:f6:22:df:d7:60:
5d:cb:5e:43:f5:84:80:f6:a1:85:ab:f9:3c:9f:f8:96:02:e5:
47:ac:32:98:2c:2c:08:35:6a:4e:8f:cf:86:78:a5:89:f7:6c:
9c:79:92:bb:2a:de:c3:75:fd:61:df:16:92:3c:de:0d:ac:ea:
82:5b:51:12:c4:da:40:50:c5:ae:d8:5c:72:9e:44:ba:59:86:
11:ed:fe:50:ba:57:f7:75:9f:25:a4:fd:99:15:8e:05:e0:25:
50:5c:79:c7:db:25:28:3f:39:08:51:f2:bd:ce:56:83:ad:04:
c0:a5:da:31:ad:be:bf:30:d5:e5:64:42:a3:35:e2:56:e6:0c:
40:ed:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:12 2024 by rpki-client on console-fra.rpki-client.org