Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C18EF2067CF11EE8C355F264AD9E6FC.roa
File: 9C18EF2067CF11EE8C355F264AD9E6FC.roa (raw, json)
Hash identifier: wfroJ87vpK6fRQf5mHD+G/iUmIqoY+ZIKltBhGTxQfE=
Subject key identifier: 3A:EC:D5:AE:2A:67:46:4D:25:C5:2A:E6:9A:D0:1E:F5:AE:EE:A1:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3E37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C18EF2067CF11EE8C355F264AD9E6FC.roa
Signing time: Wed 11 Oct 2023 00:46:27 +0000
ROA not before: Wed 11 Oct 2023 00:00:24 +0000
ROA not after: Tue 02 Jul 2024 00:00:24 +0000
asID: 139805
IP address blocks: 45.195.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15927 (0x3e37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 11 00:00:24 2023 GMT
Not After : Jul 2 00:00:24 2024 GMT
Subject: CN=6525f063-f696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:b5:72:31:c8:b2:ab:8b:d6:c3:51:10:ea:
b2:15:c4:a7:e0:bf:e3:8c:40:34:c4:84:0d:83:95:
64:51:be:98:f7:71:cc:d9:e8:51:a7:d4:6f:96:98:
42:b6:a1:59:50:93:38:62:f3:b0:5a:10:6a:46:74:
41:b8:13:f5:6c:be:14:ee:90:ef:98:28:80:ca:2f:
bf:5a:c8:9e:06:b2:4e:1c:c1:b8:60:36:5b:c0:95:
4b:77:b1:2e:53:71:c5:57:ae:fa:4b:ba:66:e7:8c:
8e:ab:2f:6a:a7:b7:23:c8:d0:d9:0c:ba:4f:7e:24:
d5:cc:33:89:15:d1:12:de:5e:e8:27:3d:7d:90:65:
13:94:61:8a:16:a7:61:68:af:d1:54:ad:94:9e:66:
62:37:1b:2f:78:ca:eb:94:1c:1d:44:da:8b:ba:4e:
40:fb:87:4d:fd:6c:58:2a:00:91:eb:fb:6f:3a:de:
ca:0d:f8:d9:f6:c5:7e:16:b5:11:f0:4a:15:4c:08:
b1:7b:f3:6f:9b:7b:a9:d7:c7:85:57:f0:a3:f9:0b:
8d:50:22:ba:c4:e9:bc:c1:51:4e:2d:0f:aa:6c:dc:
1c:62:e2:a5:5c:7c:e5:55:f7:0d:2e:a4:9c:5d:2f:
e9:26:24:9a:41:72:ac:e8:45:e9:7a:46:d8:34:73:
09:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:D5:AE:2A:67:46:4D:25:C5:2A:E6:9A:D0:1E:F5:AE:EE:A1:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C18EF2067CF11EE8C355F264AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.85.0/24
Signature Algorithm: sha256WithRSAEncryption
01:83:5d:f0:ff:4b:ba:bc:e4:08:b2:2a:3f:96:5f:b0:3c:da:
2e:91:79:c0:21:ca:51:1f:93:0c:b1:0c:b5:8e:ba:b9:3b:ef:
ec:c8:b7:cd:5a:b0:04:43:f9:80:6b:3a:0e:77:f1:2b:45:1f:
fb:7b:48:29:b6:2e:8a:64:00:4c:ad:46:31:e1:3b:e8:79:8d:
b2:e7:71:91:80:94:da:e9:9f:8f:28:e8:9a:84:25:2a:ad:86:
58:c1:13:8a:ea:3b:51:bb:cf:60:7c:a5:fd:3c:34:06:a1:a3:
3b:36:ce:74:97:4c:c4:a0:66:67:3d:92:4d:62:98:0b:0b:3d:
c3:7a:a1:92:40:00:c4:f3:cb:8a:7f:85:5a:94:ae:38:71:54:
20:05:81:ec:56:dc:fe:30:51:f5:fe:42:15:8b:6f:90:a9:d9:
79:72:40:97:0b:5a:80:66:fd:2e:39:ed:e0:a2:e8:85:0c:78:
d4:c2:dc:5a:67:aa:bb:ef:bb:ae:b6:a9:c9:09:5d:22:53:c5:
33:ac:65:01:3e:99:87:14:3d:4a:ba:9d:61:2c:f0:aa:5e:83:
e4:47:6c:27:85:2f:b4:40:a2:05:de:87:87:fe:98:5a:6e:fa:
54:c2:86:30:02:b3:aa:5b:ac:9b:d9:62:c6:9a:49:ae:dd:59:
e6:ca:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org