Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CF1D3DCFE1811EE976CDB5D017001B1.roa
File: 9CF1D3DCFE1811EE976CDB5D017001B1.roa (raw, json)
Hash identifier: SAYMGV7C7g9i+QJKWUr3K/6FUulpYn9VmnjQJkNdtao=
Subject key identifier: FB:BA:B7:EA:66:19:4F:ED:33:7D:A8:C6:4D:F4:BC:D1:C1:CF:BF:2F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 836C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CF1D3DCFE1811EE976CDB5D017001B1.roa
Signing time: Fri 19 Apr 2024 06:46:56 +0000
ROA not before: Fri 19 Apr 2024 06:46:53 +0000
ROA not after: Wed 09 Oct 2024 06:46:53 +0000
asID: 140403
IP address blocks: 45.200.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33644 (0x836c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 06:46:53 2024 GMT
Not After : Oct 9 06:46:53 2024 GMT
Subject: CN=66221360-74ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:59:1a:b7:61:15:7b:1d:fe:db:8f:ed:77:
ae:e6:c1:0a:be:38:51:3c:da:8d:7c:c4:b7:89:55:
f6:64:2c:67:7e:cd:ec:8b:ec:f8:59:6f:d7:fa:e2:
e5:75:d3:32:9c:72:bb:df:11:af:47:ff:bc:31:11:
69:b9:56:cc:10:0f:05:dc:06:22:81:87:87:ab:a3:
41:5f:5e:59:8a:7e:81:79:1d:06:ef:f8:b5:ec:65:
dc:ff:27:f2:c7:10:4b:c7:07:d1:6a:af:59:12:35:
8e:32:1e:90:c4:cb:8c:3f:c6:b7:a4:1a:3f:af:45:
85:eb:a5:8b:d4:5a:c8:5a:cc:8d:cd:b8:c0:80:5d:
de:79:17:7c:14:c8:85:2c:ca:f8:2b:15:9b:2f:a5:
6e:f6:02:72:85:29:09:ae:cc:11:3c:2f:2d:a2:ab:
de:36:fb:6b:f4:29:44:a7:cf:0c:b1:25:f0:0a:e7:
e7:36:02:33:a7:ef:1b:bc:7e:cc:4a:6e:f4:1c:8c:
f9:a9:b5:58:92:50:f1:e7:b4:d5:16:1e:74:3e:7e:
c0:c7:49:cb:d1:72:80:ad:5c:36:8f:df:20:0a:2e:
86:53:ff:c7:6a:8a:5e:00:0c:e2:e0:7a:90:4d:67:
b6:57:89:67:c4:20:d8:04:31:ef:f5:05:c2:bc:ba:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BA:B7:EA:66:19:4F:ED:33:7D:A8:C6:4D:F4:BC:D1:C1:CF:BF:2F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CF1D3DCFE1811EE976CDB5D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.8.0/23
Signature Algorithm: sha256WithRSAEncryption
70:ae:69:7e:62:05:0e:87:23:e7:90:4e:30:28:37:b2:05:37:
3f:c3:c2:d1:6e:62:42:44:21:84:9f:7d:20:fc:89:3f:44:ea:
b7:17:e9:36:7d:67:ed:30:0a:78:57:a0:61:6e:b0:13:36:fb:
1b:9e:d3:55:44:c0:8d:39:70:25:e9:6c:e0:9f:b9:ed:ef:bb:
bc:72:09:00:92:93:67:3f:48:df:50:6a:b7:ec:aa:78:cf:1c:
ee:a5:08:d9:6c:d9:c5:9a:67:82:67:a4:6a:e7:53:4f:70:5a:
66:94:75:2b:32:e7:f4:a2:a9:aa:0e:3b:d5:9d:46:0e:e0:12:
7c:87:fc:82:a5:09:68:4e:a3:00:bc:e5:5d:39:11:f9:35:49:
0e:00:cc:c3:89:9f:8f:71:1b:da:8e:17:07:50:1f:f0:ee:ec:
dc:aa:4e:9d:55:fe:f8:ce:1d:7d:dc:27:06:0e:f8:c5:da:a1:
56:38:27:9c:2b:44:ea:87:02:56:40:74:13:9e:03:e0:c7:fc:
b3:02:d3:4e:85:a9:fb:a7:ce:7b:5e:ce:b0:f2:00:66:1d:df:
95:29:34:4f:fa:20:53:7a:25:12:00:74:38:e5:f7:ec:bd:16:
d1:81:92:3e:87:3b:ae:56:c6:3a:75:ad:87:b0:2b:4f:d0:86:
0b:c4:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:49 2024 by rpki-client on console-ams.rpki-client.org