Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A06585B633A411EEA4CA9D754AD9E6FC.roa
File: A06585B633A411EEA4CA9D754AD9E6FC.roa (raw, json)
Hash identifier: u/fTXC5cCV6bN2Hj8+to+uPFXqPPSv4IRS776p28Ab4=
Subject key identifier: 12:EE:FD:3C:96:C2:6B:15:A5:52:F4:CC:63:DF:75:9D:82:D8:AE:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 336B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A06585B633A411EEA4CA9D754AD9E6FC.roa
Signing time: Sat 05 Aug 2023 15:27:45 +0000
ROA not before: Sat 05 Aug 2023 15:27:41 +0000
ROA not after: Fri 24 May 2024 15:27:41 +0000
asID: 38901
IP address blocks: 45.201.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13163 (0x336b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 5 15:27:41 2023 GMT
Not After : May 24 15:27:41 2024 GMT
Subject: CN=64ce6a71-29af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:6d:39:da:e0:6e:b6:49:9c:c3:19:d5:3a:
32:0f:f0:b3:3a:ac:0e:5a:a4:b3:78:ff:c8:79:97:
df:79:f1:d0:4b:08:fc:64:e6:c4:8e:a4:d1:b0:5c:
8d:5a:ed:7b:83:34:53:a7:e6:a4:91:60:30:07:46:
73:5a:1c:81:7d:f0:0a:c5:af:85:ce:1e:14:11:fd:
4e:20:6f:25:d4:3e:45:91:9c:36:b3:14:f0:94:62:
07:dc:d4:f5:53:17:45:f6:7a:93:ce:e3:3c:e2:8f:
5d:5a:d2:0e:46:f6:a6:f4:11:31:e4:9a:78:72:94:
b8:6e:91:7a:d3:ab:2f:a6:aa:c4:80:d5:e0:e9:66:
af:c2:5f:dd:6d:03:59:ba:2c:91:11:6d:c4:eb:77:
18:c7:77:7b:2b:d8:f5:9f:5a:77:a1:22:31:e5:57:
2b:b5:b3:43:25:9e:1f:2a:9c:f5:24:8a:74:2e:f2:
c7:40:af:89:9a:3a:4b:72:95:76:bc:4b:f7:e2:12:
14:13:c1:8a:3a:6c:42:46:69:c1:1b:78:61:9b:16:
2b:8c:12:77:78:21:cb:90:64:4c:bd:e1:0a:d8:2b:
d0:7e:5d:ef:b9:25:54:b2:2d:2a:c2:69:93:d9:50:
85:5f:3a:3c:ed:6e:5b:56:16:fd:fe:54:40:a0:85:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EE:FD:3C:96:C2:6B:15:A5:52:F4:CC:63:DF:75:9D:82:D8:AE:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A06585B633A411EEA4CA9D754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.197.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:05:6f:cb:0d:ca:bb:fe:01:21:ee:85:65:8c:76:a9:4e:a2:
ac:63:2e:88:32:de:c0:74:9b:f2:3d:6f:6d:10:b5:ff:22:35:
57:8d:ee:a0:c1:18:94:8e:d8:33:cc:91:e3:6e:34:55:22:5a:
e1:ee:6b:4a:8f:d9:1e:00:21:3a:be:e8:d3:cd:fb:d5:a5:5c:
de:b2:7c:83:d1:f8:47:f7:0a:56:ea:45:57:1b:c3:cd:86:05:
0c:d9:10:f7:59:ff:c4:aa:d4:71:49:cf:46:9f:c6:0a:b4:9b:
b2:9a:fa:70:6a:56:76:eb:0a:d5:fe:17:a5:ca:e4:d6:fb:10:
bd:8c:70:1a:d0:8e:81:22:85:21:8c:48:e2:e9:05:67:96:70:
ad:f0:5a:cd:45:82:20:52:1c:34:67:10:63:54:86:fd:1a:f4:
cf:02:20:8c:5d:72:d4:d0:c4:e2:c5:41:bb:74:bd:f9:1c:37:
9a:db:6b:c5:b9:48:31:ae:55:60:17:e0:f5:6f:2c:c9:07:8c:
1b:97:18:7f:a2:43:cd:1f:b9:81:a6:93:4d:94:e8:9d:4f:7d:
e8:cd:f6:b0:ba:52:43:53:e6:84:7f:20:6c:16:9d:d2:6e:06:
f3:2d:be:8a:e7:42:59:51:e5:bb:59:ca:56:e6:2a:e4:cf:a4:
05:b3:de:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org