Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A44DA3E7EC711EE88A136884AD9E6FC.roa
File: 8A44DA3E7EC711EE88A136884AD9E6FC.roa (raw, json)
Hash identifier: ZvzqIjqQ8VYa6a1v9Gpn8pUyXxLoBD+D4xOA+Bja69A=
Subject key identifier: 85:36:8B:11:E7:22:5C:9B:E0:41:C3:E7:AB:4F:EA:AB:55:89:05:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4525
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A44DA3E7EC711EE88A136884AD9E6FC.roa
Signing time: Thu 09 Nov 2023 06:16:38 +0000
ROA not before: Thu 09 Nov 2023 06:16:34 +0000
ROA not after: Thu 07 Nov 2024 06:16:34 +0000
asID: 133847
IP address blocks: 45.200.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17701 (0x4525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 06:16:34 2023 GMT
Not After : Nov 7 06:16:34 2024 GMT
Subject: CN=654c7946-863f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:2e:95:43:57:a9:c7:4b:2d:2b:c2:41:1a:
93:c6:3f:5e:9c:20:ee:68:af:d8:43:c3:6e:e1:e3:
97:38:f3:c7:c1:04:38:28:7c:42:1e:ee:9a:5b:c5:
11:be:26:e7:70:98:dc:1f:3e:ec:76:29:f7:c9:85:
8c:56:73:35:de:df:41:c7:be:72:5e:cd:f3:76:62:
af:b0:9a:e5:e9:1c:4f:cf:47:ab:d2:14:2e:ea:b4:
78:a9:18:d3:6a:f2:76:43:6b:99:75:9c:d3:3e:5f:
13:fb:29:ca:46:9a:2d:0e:81:8b:f2:0d:64:92:a3:
27:7f:d0:13:cc:61:2b:62:55:c2:36:16:24:9d:06:
b7:c4:05:24:16:61:19:cd:7f:a7:e3:4f:fb:47:06:
48:f2:89:85:d5:14:df:8f:99:28:96:65:25:5d:5f:
8d:4d:b0:4a:b4:1a:d0:ea:2b:41:37:57:ab:fb:f1:
2a:6a:01:23:ab:43:1e:61:fa:67:28:da:fa:7d:fb:
78:46:88:58:9e:9f:bc:32:40:9a:1a:ad:3d:3d:ae:
9c:17:c1:1e:90:4c:a6:39:54:2a:dd:2a:24:a2:b4:
12:20:79:8c:c7:d7:eb:c3:78:1d:cf:d9:c6:52:5e:
f6:a1:ce:f8:75:68:97:fc:67:f2:a3:54:25:a3:d8:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:36:8B:11:E7:22:5C:9B:E0:41:C3:E7:AB:4F:EA:AB:55:89:05:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A44DA3E7EC711EE88A136884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.72.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3b:11:3c:b5:31:79:2a:2d:fc:07:bc:86:f4:6a:fe:56:f1:
27:54:13:ea:f8:98:55:49:ee:7d:ef:e0:eb:80:8e:47:3b:ca:
86:17:ee:82:79:7d:7b:18:35:60:dc:1d:3a:8a:0a:f1:c1:d2:
3f:d8:82:22:86:88:36:39:d7:a1:24:f0:5a:b6:6e:17:2e:57:
56:74:c7:b6:89:b4:c4:5b:75:78:07:4d:ca:dc:0b:da:81:b3:
45:a5:15:fa:2a:12:f1:d0:65:0b:63:fe:d3:a0:28:5d:11:95:
08:45:5f:06:8f:cf:e4:21:9a:e7:a3:df:df:99:42:1d:69:4d:
05:79:0f:b7:24:92:7c:78:73:3a:f4:11:18:b9:41:49:7c:cd:
9c:45:1d:e0:00:60:4e:18:9f:03:56:76:0a:be:96:84:87:a9:
51:c5:59:ab:1f:90:1e:4b:e0:38:50:f5:6e:50:1c:63:35:d1:
61:28:72:a6:51:07:9c:e8:c4:4b:0f:8f:70:12:9b:c1:9e:f7:
f4:86:8d:86:9c:c1:b4:43:31:63:fd:3e:13:bc:87:72:fc:64:
a9:cf:2c:7d:67:ec:af:84:cd:99:ec:df:79:e0:c2:e7:d3:53:
fc:05:e2:f7:a5:10:0d:31:b8:24:72:4b:8f:5b:f7:65:53:ef:
49:f3:c2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:55 2024 by rpki-client on console-ams.rpki-client.org