Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A53FDA626D5D11EEBCA099654AD9E6FC.roa
File: A53FDA626D5D11EEBCA099654AD9E6FC.roa (raw, json)
Hash identifier: qYX/qTes3oX504W0fWhn3RFVR8ubvAUpdgEqXdfT4xw=
Subject key identifier: 2C:3F:DA:27:5F:0C:D0:2F:DB:89:4D:43:6D:90:62:0D:C8:73:CD:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3EE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A53FDA626D5D11EEBCA099654AD9E6FC.roa
Signing time: Wed 18 Oct 2023 02:25:47 +0000
ROA not before: Wed 18 Oct 2023 02:25:44 +0000
ROA not after: Wed 18 Sep 2024 02:25:44 +0000
asID: 132513
IP address blocks: 45.195.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16103 (0x3ee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 18 02:25:44 2023 GMT
Not After : Sep 18 02:25:44 2024 GMT
Subject: CN=652f422b-1ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:5c:73:49:90:7f:a5:bb:35:82:8e:eb:31:
db:e3:9b:35:d4:5b:a1:45:70:f3:a8:aa:80:67:06:
36:48:83:3a:c6:48:13:41:0b:1f:79:6f:f6:e3:9f:
5a:fe:05:2e:7a:6f:8f:c4:67:9f:1f:c2:5f:34:3f:
c2:fe:7d:f9:89:76:d5:40:28:9f:6a:99:e9:cf:3f:
cd:dc:6a:9c:3e:07:b9:db:3d:ec:a5:8e:fc:bb:1d:
df:d4:a0:56:e8:75:e0:d1:40:15:cb:3f:48:df:1f:
3b:fa:33:57:2f:3d:9b:f6:43:55:2c:b3:c0:d1:00:
fc:5f:1a:d1:19:a6:1d:fe:4c:0c:5f:eb:59:ce:58:
65:2e:97:40:93:8b:ca:00:4c:c8:e0:ad:5b:65:89:
d2:e1:e8:b5:1a:6d:d6:bc:aa:d6:4e:76:95:8c:d8:
ae:c4:2d:e2:be:82:e7:7e:fa:03:22:ac:ed:6f:39:
a4:00:5e:5a:84:74:b3:6d:f1:2b:d1:7e:f4:02:1e:
4b:0d:13:0b:dd:37:8d:02:da:45:ca:36:30:92:a7:
b6:1e:fb:8d:c2:d8:45:7c:cd:38:26:be:3a:15:5c:
49:c1:20:2f:74:d1:e9:b4:ff:57:5f:bf:ef:93:35:
1d:08:3c:c5:6e:a8:6a:b1:cc:5a:c2:b6:04:4f:58:
5d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:DA:27:5F:0C:D0:2F:DB:89:4D:43:6D:90:62:0D:C8:73:CD:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A53FDA626D5D11EEBCA099654AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.145.0/24
Signature Algorithm: sha256WithRSAEncryption
89:74:16:0e:c1:a6:94:02:06:c8:a9:71:a0:75:3e:40:89:6f:
aa:1b:18:7f:6d:cc:f9:6f:82:2c:22:8f:f5:5e:70:cb:e8:71:
8c:80:fc:94:46:5d:a2:21:16:84:38:47:16:09:28:22:70:5e:
8e:6f:3a:9f:1e:75:a9:70:d6:66:47:d4:8c:20:52:7e:28:e3:
87:1a:50:96:ef:45:23:35:10:93:89:3e:f2:9c:e4:2f:fe:fb:
06:d9:cc:03:d0:e9:f0:9e:1e:a6:66:db:82:a8:9b:47:ca:02:
b5:6d:16:43:e0:06:1e:eb:22:f8:91:14:8a:db:83:ce:c1:84:
ce:00:02:bc:f6:e3:99:75:4e:92:12:03:24:f2:92:ca:f9:8d:
e2:67:a2:fb:58:25:a5:ef:69:8f:c6:88:5b:fb:5a:78:d0:b9:
8c:5f:4a:8a:d5:c7:e0:1c:95:8b:c3:16:4d:58:6f:b4:3c:fb:
ff:69:9a:bb:49:3e:81:0d:ef:d6:97:ab:74:85:db:c6:fc:73:
08:79:6e:6d:25:26:db:48:67:46:96:aa:15:1a:28:e2:23:e0:
13:e0:44:75:30:bd:a6:9a:66:8e:80:f8:5c:97:cd:12:d5:0f:
1d:23:a7:54:70:b3:f0:24:ec:39:41:ef:85:11:17:e0:52:1c:
7d:b8:6f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:14 2024 by rpki-client on console-fra.rpki-client.org