Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/959BA67E0DCE11EFBED64A67017001B1.roa
File: 959BA67E0DCE11EFBED64A67017001B1.roa (raw, json)
Hash identifier: iJVDLNsJqqta4R18kyqusqRDE+sOqL/FaL6gDhvREsc=
Subject key identifier: 3B:BC:8E:6F:FA:ED:E4:8D:D2:2B:6B:A1:46:52:31:B9:2F:8C:47:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 892B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/959BA67E0DCE11EFBED64A67017001B1.roa
Signing time: Thu 09 May 2024 06:37:20 +0000
ROA not before: Thu 09 May 2024 06:37:16 +0000
ROA not after: Wed 29 May 2024 06:37:16 +0000
asID: 141883
IP address blocks: 45.200.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 May 2024 06:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35115 (0x892b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 06:37:16 2024 GMT
Not After : May 29 06:37:16 2024 GMT
Subject: CN=663c6f20-0ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:89:2f:cb:45:fb:f3:59:a3:98:f7:06:18:
95:cb:e0:12:2f:0e:3f:b3:70:a8:b1:f6:a7:3b:86:
49:82:e5:ba:75:0f:47:7f:d1:c3:82:85:61:3a:fa:
dd:41:62:20:ab:e9:c0:60:ed:5a:de:67:81:7c:81:
f7:75:77:79:28:e2:2c:5e:50:36:6b:43:11:c5:80:
96:6f:a4:d8:93:91:d2:a5:c0:fc:cb:4c:72:00:b9:
d0:7b:d6:ab:31:7e:3f:0e:12:db:c6:87:63:a5:d5:
34:61:85:3e:88:36:4b:5d:d3:36:64:5b:ba:9d:28:
53:a7:73:98:c7:b7:7c:79:a2:66:27:27:65:7f:ef:
87:51:15:c0:7a:9a:42:f3:b4:84:ca:cd:a1:1d:ae:
8e:73:40:31:8c:bb:80:69:d1:d8:cf:4d:02:76:c1:
27:4c:99:07:0b:d4:17:2a:82:1b:b4:e0:8d:38:89:
b8:77:8c:f2:62:70:21:8a:0a:43:e8:3f:40:da:bb:
cf:50:09:fe:53:58:00:b6:49:ae:b7:4e:84:b3:50:
d9:51:a6:dd:74:06:fe:a8:e5:9d:23:fe:4a:32:86:
1e:e6:a8:be:55:89:70:f2:55:0d:25:cc:f8:3c:01:
2e:22:2f:60:15:c8:20:6c:c3:e5:32:47:77:29:cc:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BC:8E:6F:FA:ED:E4:8D:D2:2B:6B:A1:46:52:31:B9:2F:8C:47:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/959BA67E0DCE11EFBED64A67017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:0b:a5:1d:35:e1:5e:be:26:ec:8a:9f:4b:99:d7:53:84:a5:
87:c7:1b:0d:14:8c:57:db:19:39:63:7f:18:f3:8a:0a:b2:16:
1f:6b:58:0a:0c:f6:73:be:b7:70:d3:a1:f4:a4:83:c7:3a:7b:
b7:36:51:ce:da:06:63:96:fb:a9:a6:87:a9:af:41:a8:e2:bb:
81:17:3e:1b:6c:6b:a2:9f:30:ec:a0:22:e2:38:57:bc:44:79:
f7:c7:5b:92:7b:a9:8d:0a:42:c3:62:fe:64:20:ff:2e:48:7d:
07:87:72:8d:8f:f9:c2:12:44:81:5a:46:0c:9f:46:bf:44:c7:
46:7e:0b:ca:49:35:5b:fc:9e:86:a0:a8:29:f8:c4:92:90:59:
0a:f3:6b:d0:92:ad:3e:49:b8:e4:60:f7:15:ee:dd:c4:6f:39:
2f:e5:d6:01:d7:99:71:d4:7d:d4:0b:ca:10:bc:64:10:ce:23:
3f:ae:bb:72:d9:95:a6:c7:16:21:df:47:13:42:2d:9a:db:36:
d7:e0:6e:b1:0e:93:cc:fb:c6:00:9f:3d:b5:f3:19:9e:92:61:
5a:85:85:6a:74:b8:9c:0d:a3:08:9d:fb:ba:b6:db:1c:42:b8:
52:3a:a6:43:ca:81:12:a0:19:71:68:02:06:c6:e3:29:95:55:
76:f8:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 02:49:46 2024 by rpki-client on console-fra.rpki-client.org