Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0BA01A008FB11EEA3D36E394AD9E6FC.roa
File: A0BA01A008FB11EEA3D36E394AD9E6FC.roa (raw, json)
Hash identifier: io8T2jQbXqLi2XRMgD/JabphtQEaf8jeXbzIihuAS0Y=
Subject key identifier: 2F:78:B4:02:BF:75:0D:9E:08:9A:26:27:48:06:B6:F5:63:17:53:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2B4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0BA01A008FB11EEA3D36E394AD9E6FC.roa
Signing time: Mon 12 Jun 2023 08:32:12 +0000
ROA not before: Mon 12 Jun 2023 08:32:09 +0000
ROA not after: Sat 25 May 2024 08:32:09 +0000
asID: 131178
IP address blocks: 45.201.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11085 (0x2b4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 08:32:09 2023 GMT
Not After : May 25 08:32:09 2024 GMT
Subject: CN=6486d80c-78b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:50:ad:c7:69:47:25:d4:03:2b:f8:fb:37:
21:32:6e:02:b5:b5:01:51:7c:13:1e:88:e0:5f:c0:
f1:53:f4:ef:d2:af:16:cb:9a:1e:10:85:3b:07:24:
28:b3:52:68:93:c9:12:a7:5b:70:2a:1d:e2:41:ba:
c5:04:2c:28:ae:44:cf:23:68:9c:21:e1:ba:89:d2:
04:72:d5:7e:6e:68:2c:85:38:6a:14:83:ac:1c:6d:
a7:6c:da:b7:c6:d6:ca:84:d6:4c:37:34:1d:be:4c:
e5:f5:78:f8:45:e0:60:d7:d5:9c:a9:bf:c8:31:2f:
28:60:94:2d:da:a0:c9:99:e9:ad:18:7f:1f:ab:7c:
36:a4:2f:b1:a0:ef:36:b4:13:e5:24:af:6a:5e:3e:
a5:50:5d:a5:3e:bc:a5:88:c9:cd:8a:8c:bb:dd:b7:
5c:7c:0e:03:72:6b:74:7d:f5:3e:fe:3f:65:f1:31:
80:be:81:5f:04:d9:a7:6c:ab:06:9f:8b:f2:eb:57:
1d:40:73:56:a1:13:67:5a:6d:41:7f:af:9e:b5:39:
31:cf:44:49:7f:68:46:64:e9:01:e4:06:da:c6:5c:
df:68:69:d3:08:44:6b:bb:05:9e:0b:b2:f9:dc:25:
b0:f4:e0:3f:61:e7:12:0e:8c:18:f9:dd:48:fb:7d:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:78:B4:02:BF:75:0D:9E:08:9A:26:27:48:06:B6:F5:63:17:53:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0BA01A008FB11EEA3D36E394AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.208.0/22
Signature Algorithm: sha256WithRSAEncryption
16:1b:e1:9d:6e:58:31:38:69:be:81:9c:2b:9d:b8:c1:64:13:
d7:72:78:e2:3a:fe:9a:41:c1:eb:e8:8c:64:08:ed:59:4c:45:
51:4f:42:5c:66:7e:ef:e9:f2:fc:40:2b:92:20:f0:95:51:c8:
9d:c9:27:5f:2d:17:40:85:44:9f:d9:bf:97:ea:b0:8a:2e:a0:
ec:5c:5d:8d:35:49:38:2a:6a:6c:91:fa:13:43:ee:ac:53:fe:
b2:9f:fe:0d:c9:43:3a:7a:a0:f1:fc:9e:fa:b9:82:4e:ab:3c:
0c:e2:67:ba:f2:65:f2:f1:6b:38:9a:6c:be:b1:21:fc:aa:61:
6f:ba:43:ef:e2:d9:9b:fb:f4:1a:3d:af:88:79:99:62:36:2d:
5e:68:a3:84:d1:0c:53:13:35:a2:00:09:28:80:34:2e:e9:95:
73:ef:17:78:1f:2e:33:19:8d:ab:ea:d1:9a:5a:5f:99:20:79:
6f:c1:ab:92:31:cc:c2:c7:d4:11:68:67:8e:5d:a3:98:e3:e5:
65:d3:cf:10:c2:c2:8f:bb:e6:d5:af:c7:67:68:1c:48:d5:22:
24:16:1c:eb:43:a6:2d:6b:aa:e9:4b:36:ab:1c:89:d9:ee:18:
a0:d5:7a:40:d5:c1:15:16:f8:68:ed:95:84:25:e5:4f:55:15:
3a:a4:35:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:23 2024 by rpki-client on console-ams.rpki-client.org