Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/920B1BDE014411EF9A364739017001B1.roa
File: 920B1BDE014411EF9A364739017001B1.roa (raw, json)
Hash identifier: ucDRaBeKH61Q6CKFv2LfrcuYVYxqBtTvkY/+WkP0OxY=
Subject key identifier: 25:47:D7:7D:55:16:4B:40:F1:4E:4A:AC:CB:9D:A0:75:82:B1:5B:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8418
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/920B1BDE014411EF9A364739017001B1.roa
Signing time: Tue 23 Apr 2024 07:39:09 +0000
ROA not before: Tue 23 Apr 2024 07:39:06 +0000
ROA not after: Sat 11 May 2024 07:39:06 +0000
asID: 7029
IP address blocks: 45.196.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33816 (0x8418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 07:39:06 2024 GMT
Not After : May 11 07:39:06 2024 GMT
Subject: CN=6627659d-baa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:01:37:e7:07:78:dd:cd:03:b5:28:87:96:8c:
18:51:0a:21:c7:65:dc:01:66:9a:93:f3:87:8c:10:
e0:2e:b3:ee:28:26:18:2b:b7:f7:bf:69:61:6b:15:
73:f9:0c:e2:f7:ed:3b:0e:10:fd:05:b1:0a:31:b9:
7f:fd:e7:d9:a7:76:b7:24:bb:bd:82:7b:57:45:c9:
e0:0b:35:cd:c4:cd:e9:45:ef:56:1e:9f:f5:57:2e:
32:33:b6:a1:0d:2f:d5:12:ed:7f:12:4f:02:32:7f:
36:a9:37:ed:92:48:26:dd:02:00:19:f4:8b:6a:f9:
d4:15:22:82:07:38:71:ac:a8:7d:ea:53:b8:8e:b3:
61:25:02:80:00:ba:cc:e6:4d:da:c0:8a:33:fc:b0:
f1:98:6e:49:3a:81:a5:48:b2:b8:07:c4:08:b4:d2:
27:5a:4b:a1:2e:8c:92:05:fa:4d:99:01:71:8a:bc:
87:ee:df:31:02:8a:f2:8a:34:29:f9:4f:c4:a5:ce:
98:22:e0:86:0c:75:9b:20:67:2f:8b:5b:e0:c8:44:
5d:2d:36:01:2c:00:34:60:e1:3e:0d:21:7e:44:63:
ce:b0:15:43:ae:f8:6a:23:44:7f:a7:f8:85:a7:5f:
54:3b:59:52:a7:2b:d1:39:29:1e:89:77:32:95:1b:
8a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:D7:7D:55:16:4B:40:F1:4E:4A:AC:CB:9D:A0:75:82:B1:5B:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/920B1BDE014411EF9A364739017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.52.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:85:50:b3:e5:99:f9:08:ae:34:74:53:53:90:24:f6:6a:0d:
9d:84:6e:12:22:15:9d:70:3b:df:f0:0d:a6:84:f8:7c:49:98:
3f:de:3a:9e:c0:5b:86:22:ac:88:3e:04:c3:ee:fa:24:16:4f:
04:4e:b9:d4:b7:44:60:b1:5f:d6:ac:07:e8:35:65:9f:91:b8:
ab:a1:84:76:ee:f0:05:c8:34:62:78:c3:fe:d2:aa:01:ac:16:
08:a8:81:ac:43:15:80:fc:f3:6e:87:13:21:44:2f:d0:e9:8e:
78:a8:e3:28:2d:a8:88:d6:25:92:8c:52:9e:17:fd:ae:78:08:
9b:e9:62:1b:80:9c:44:e1:dc:8b:2b:06:92:c1:ed:f7:ce:a8:
00:d3:d6:52:e1:6d:76:89:bd:6a:60:eb:b6:4f:32:9b:ed:d2:
02:66:12:36:03:1e:df:6b:5d:e8:be:98:5d:03:5f:01:2b:52:
94:ad:2b:2d:51:51:30:15:62:ff:21:96:18:a4:8a:61:30:53:
82:8f:4c:e2:98:7f:c5:67:e7:94:8c:2b:4d:bd:21:09:0c:cf:
0c:78:ea:62:cd:25:c3:85:b9:f9:59:5b:d6:77:8b:6b:00:47:
d9:35:85:d3:0f:e2:26:f6:4e:fb:e4:a2:ac:4f:7d:1d:51:a6:
44:6d:6d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org