Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F894E80156311EEA3B8105E4AD9E6FC.roa
File: 8F894E80156311EEA3B8105E4AD9E6FC.roa (raw, json)
Hash identifier: 1HVKA75V81I5STudOyrbFI0C3p/lMNhBcN7x0D+HRjE=
Subject key identifier: 9D:7B:F7:B2:66:8F:63:E6:10:D3:71:FC:5A:45:63:39:FF:55:03:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F894E80156311EEA3B8105E4AD9E6FC.roa
Signing time: Wed 28 Jun 2023 03:26:25 +0000
ROA not before: Wed 28 Jun 2023 03:26:21 +0000
ROA not after: Sun 16 Jun 2024 03:26:21 +0000
asID: 270068
IP address blocks: 45.195.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11666 (0x2d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 03:26:21 2023 GMT
Not After : Jun 16 03:26:21 2024 GMT
Subject: CN=649ba861-da13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:e6:c9:81:a1:11:91:39:ae:26:60:a8:25:
06:4c:4a:21:b1:ed:a0:34:cb:3a:68:54:a9:90:bb:
2d:a1:6b:55:69:c3:4a:11:8c:ba:a9:99:64:9d:f4:
c4:15:59:e9:17:a7:3c:72:62:38:86:cb:b2:18:e7:
99:b4:46:2f:0a:80:78:99:bb:af:e3:f4:2f:90:e7:
fd:e1:3f:98:d5:06:fd:37:05:e8:23:0e:47:0e:38:
fa:dd:40:f4:8c:8e:b3:e6:8b:f8:2c:6c:79:b7:e2:
f0:90:e7:f4:19:08:b7:c1:e4:b4:7e:b5:7f:dd:91:
69:0b:36:6d:43:0a:fb:5c:03:9d:17:a1:6b:14:5a:
9b:e3:65:4a:0e:cf:74:eb:29:1d:93:c1:97:63:d6:
bf:28:b2:85:a4:99:4f:e3:4e:ae:ad:f2:9c:0e:49:
2e:9a:84:56:f8:1c:20:05:3a:d9:53:d9:c2:e4:ef:
e3:dd:ee:26:d7:8a:f1:78:f7:b4:75:c0:cb:8d:68:
a8:ba:a3:c2:74:3f:a4:a0:34:ae:1c:b4:b8:5b:ba:
2a:1d:91:25:9a:d2:36:20:c2:b8:d3:7d:b0:1e:3e:
00:2c:f7:8d:d7:d7:55:9a:20:92:6f:cb:7e:86:37:
66:7a:3c:f6:c4:af:0c:5c:3e:3b:91:46:ca:79:41:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7B:F7:B2:66:8F:63:E6:10:D3:71:FC:5A:45:63:39:FF:55:03:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F894E80156311EEA3B8105E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f6:1a:3c:ee:d9:40:e6:c5:87:83:f3:b0:8b:6d:6e:e2:82:
ca:52:1d:55:5f:72:50:1b:12:29:b2:d0:a0:bc:08:4c:29:13:
5f:23:eb:7d:25:f1:0e:08:46:4b:fd:2a:ed:1f:3d:f4:02:81:
c8:17:3f:a6:bc:91:83:10:47:d9:c0:6d:4b:f1:9c:c8:63:0c:
10:01:65:49:62:bd:d4:67:0e:2c:07:5c:67:ba:3e:e3:18:e2:
13:38:43:22:10:c4:19:d0:f6:6a:74:8f:5a:a9:2b:b5:5f:e2:
50:92:22:e6:a3:f7:f1:d4:cc:2e:a0:d4:ff:53:ff:d9:1e:32:
01:ff:83:92:48:91:69:a1:bb:35:4e:a1:7c:7f:ee:8e:e6:82:
a4:91:43:39:1a:2e:2c:22:49:45:f0:50:10:97:31:85:b4:c1:
61:22:b2:66:9d:bb:06:83:e0:df:a4:ca:ad:5c:a4:2f:5e:43:
90:b1:61:0a:79:8d:9f:15:58:4c:57:6c:2b:29:8e:14:28:dc:
4c:aa:48:58:8e:be:92:d6:e3:58:92:b4:73:98:14:52:2c:01:
b0:af:b5:67:73:75:da:fc:20:98:7e:6b:83:23:4e:e2:b6:cc:
c1:85:a7:39:d2:8e:f8:e8:33:22:12:08:8c:5a:5b:3b:1b:78:
99:35:62:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:13 2024 by rpki-client on console-fra.rpki-client.org