Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EC8E6FC141911EF8279C338017001B1.roa
File: 9EC8E6FC141911EF8279C338017001B1.roa (raw, json)
Hash identifier: eT3PB1S6l/HxEdevp2XhC5arWeWxxD5dPCdERCu2Cq0=
Subject key identifier: 8E:16:13:27:36:62:E7:D3:4F:B0:36:AC:E3:39:E7:D0:2F:94:B1:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8AA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EC8E6FC141911EF8279C338017001B1.roa
Signing time: Fri 17 May 2024 06:49:34 +0000
ROA not before: Fri 17 May 2024 06:49:31 +0000
ROA not after: Mon 12 May 2025 06:49:31 +0000
asID: 41095
IP address blocks: 45.206.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35493 (0x8aa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 06:49:31 2024 GMT
Not After : May 12 06:49:31 2025 GMT
Subject: CN=6646fdfe-7e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:8e:de:85:1d:08:e7:f3:0a:fe:32:fd:10:
5c:fd:ee:95:4c:02:26:cd:8d:54:87:82:59:1f:6d:
df:e6:4c:a8:b6:c8:43:fd:f1:a8:36:77:89:63:2a:
08:14:a8:fa:ed:0b:6b:2e:52:78:c8:23:0d:ad:31:
9e:fa:74:5e:92:fc:af:2c:f0:7e:41:c3:b3:ca:30:
1d:7b:9c:fc:39:df:71:f4:a4:68:d7:1e:bd:18:84:
96:ba:ca:c3:dc:81:01:eb:d1:c4:8c:c8:f1:ea:03:
f0:a8:c1:31:98:12:c2:96:fd:f2:80:c2:6d:6c:d0:
27:f0:23:55:89:62:f0:69:7d:92:d8:19:a4:dc:06:
f8:1d:ec:46:4e:10:5e:29:7f:24:cd:38:72:51:b3:
23:94:b5:2c:fb:10:17:9d:8d:a0:81:0a:3f:f9:0e:
eb:07:29:18:b9:26:1b:ce:71:b5:b9:4f:76:f1:1b:
68:12:e9:c8:0d:06:0d:0a:31:dd:b4:59:21:ff:b5:
a7:a7:6f:a0:79:a0:96:10:7e:fd:24:f0:c7:3b:c1:
80:b5:1e:bb:95:73:38:e0:74:11:2c:c6:e5:eb:30:
d3:e1:df:66:7a:9c:69:92:8d:28:68:60:5a:59:47:
29:67:67:d8:e6:58:61:9a:d9:93:28:01:1e:7f:7c:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:16:13:27:36:62:E7:D3:4F:B0:36:AC:E3:39:E7:D0:2F:94:B1:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EC8E6FC141911EF8279C338017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.3.0/24
Signature Algorithm: sha256WithRSAEncryption
45:da:36:c9:7b:9c:05:e7:ec:95:00:63:c3:49:bd:00:e3:9d:
34:8e:7d:a5:f6:2f:8d:ed:4f:f7:a6:3e:a9:32:bf:69:16:cb:
82:a6:dc:7c:9b:09:70:bc:b9:bb:51:56:bd:2f:59:17:e9:0a:
22:b7:20:30:24:57:99:a9:3a:93:ba:0c:86:5f:72:2f:ac:56:
df:30:c7:fd:4a:fd:f8:70:05:ff:fb:14:b7:88:06:83:42:45:
b5:47:0f:2a:eb:b2:7d:d4:66:38:b6:ed:05:ad:f6:7b:20:ce:
0b:0c:e9:7b:0d:c2:dc:d2:06:33:5c:58:24:61:07:a0:75:37:
be:39:7d:01:69:da:6c:4f:10:64:ee:f2:20:1c:3f:86:88:b1:
ff:03:63:c4:2b:f9:85:a4:d0:28:52:32:ef:0f:d9:7d:5d:2d:
ce:fe:5d:3b:87:fa:b9:7e:6f:b7:4c:72:8d:ad:f6:ab:92:90:
89:8e:c9:f8:05:6b:bf:de:3d:e9:63:e2:ec:ff:93:70:4a:eb:
46:0c:4f:43:ef:92:1c:d3:e5:34:17:16:55:41:56:d1:3f:e3:
8d:48:f7:d9:fc:d8:3b:b1:67:40:5f:31:07:ab:cd:8a:f5:91:
38:c2:cc:b7:31:78:e6:13:07:56:35:cf:42:be:e7:ee:74:a8:
9b:9e:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:08 2024 by rpki-client on console-ams.rpki-client.org