Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0D69802155711EE90BC57384AD9E6FC.roa
File: A0D69802155711EE90BC57384AD9E6FC.roa (raw, json)
Hash identifier: D3AZyP+aqTqUKJp4vRnS8eGZeKJ92p13mw+FhxqWqWg=
Subject key identifier: D3:71:91:3D:5B:60:67:74:77:90:3A:84:56:73:A6:D8:05:66:14:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D50
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0D69802155711EE90BC57384AD9E6FC.roa
Signing time: Wed 28 Jun 2023 02:01:00 +0000
ROA not before: Wed 28 Jun 2023 02:00:56 +0000
ROA not after: Mon 01 Jul 2024 02:00:56 +0000
asID: 138905
IP address blocks: 45.201.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11600 (0x2d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 02:00:56 2023 GMT
Not After : Jul 1 02:00:56 2024 GMT
Subject: CN=649b945c-bdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:7a:53:ee:cb:44:74:bc:c3:72:98:d2:73:
dc:9d:93:e3:38:84:61:0c:01:2f:ba:95:2f:53:81:
6a:75:3f:62:c2:6d:74:9d:0b:b2:67:a8:9f:8f:93:
a2:2a:13:15:9a:5d:56:1e:7b:2e:ea:ec:81:5c:d5:
3f:bc:02:78:e2:8e:59:9a:95:dc:4e:78:3b:d0:8b:
78:b4:f7:bd:af:5b:6e:22:70:aa:e2:45:f5:8c:88:
b6:dc:02:11:0e:02:a5:31:0d:0b:b5:9c:63:81:d9:
11:e9:49:b6:f9:48:02:8f:fd:20:fd:3a:c6:23:f1:
d7:a3:39:67:ae:c1:0f:f9:38:79:78:1a:d3:e9:d5:
25:d6:f1:75:94:95:42:9b:bf:58:5e:d0:31:4d:46:
17:6f:04:3b:3f:9b:e0:cc:59:4d:3c:be:a7:f1:06:
67:ab:1f:e9:d6:09:ae:2b:e4:32:5e:15:2d:9f:93:
e7:b5:d2:75:ed:17:a4:06:c1:0c:1f:63:bf:8e:74:
b6:24:71:3a:02:8f:08:df:56:df:21:d1:2e:ed:fc:
02:2f:17:4b:71:9a:1f:ac:43:b4:a0:ac:04:c7:96:
77:a4:4d:36:0a:49:c5:06:fb:00:29:fa:45:79:40:
38:57:9a:71:29:45:7e:68:b6:7d:73:97:73:d5:df:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:71:91:3D:5B:60:67:74:77:90:3A:84:56:73:A6:D8:05:66:14:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A0D69802155711EE90BC57384AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.235.0/24
Signature Algorithm: sha256WithRSAEncryption
53:c7:b7:b0:8b:98:9a:af:85:0f:25:d2:e0:c3:f3:5d:05:8c:
05:f0:50:3e:fa:c4:0e:6b:a1:5d:f0:51:7a:c3:5f:84:4d:6f:
91:66:88:55:3c:ac:f2:62:3d:27:03:9c:d4:15:e1:e8:e0:ac:
81:4e:07:0c:8a:8a:06:22:96:ca:e6:75:c2:10:1f:e8:81:a5:
62:0a:34:5c:cc:43:a6:c1:20:dc:ec:4b:04:86:2f:0e:e0:70:
d5:96:83:4f:12:20:08:18:06:23:4b:d9:69:45:6c:ea:04:d8:
9d:97:bd:4b:02:71:c5:d5:f4:e8:2b:e1:0a:36:1b:c0:86:24:
a8:0c:a2:bc:7e:63:dc:84:99:af:c0:13:1c:86:33:52:26:20:
51:53:51:f8:37:80:a0:36:c6:41:18:73:e2:79:98:05:10:f9:
53:84:ed:fb:1c:43:01:c8:f2:60:e9:c0:ee:7b:f4:db:17:da:
56:20:75:e4:1c:05:78:d4:46:45:a7:e6:41:11:88:be:e2:23:
78:bc:c3:f6:14:5c:7a:48:90:83:99:59:d8:c9:e5:a9:88:be:
dd:c5:6a:11:26:57:15:d5:ef:44:79:e9:ef:cb:a1:1f:77:99:
d1:04:2b:84:f1:5a:e8:5b:63:5e:7b:52:20:14:b5:d1:60:ee:
39:28:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:14 2024 by rpki-client on console-fra.rpki-client.org