Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6BCDF72017111EF9592AB23017001B1.roa
File: A6BCDF72017111EF9592AB23017001B1.roa (raw, json)
Hash identifier: rRO8xc7XQJpB7mPvs3vj3iZ1gT99CeW0KQ9rmvVqaJQ=
Subject key identifier: 94:AF:BF:E3:FC:8D:FC:ED:49:62:DE:EF:42:7E:20:BC:2A:DB:DC:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 843F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6BCDF72017111EF9592AB23017001B1.roa
Signing time: Tue 23 Apr 2024 13:01:51 +0000
ROA not before: Tue 23 Apr 2024 13:01:48 +0000
ROA not after: Sat 11 May 2024 13:01:48 +0000
asID: 22773
IP address blocks: 45.196.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33855 (0x843f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 13:01:48 2024 GMT
Not After : May 11 13:01:48 2024 GMT
Subject: CN=6627b13f-7b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:63:27:e4:cb:a9:0b:f8:13:6c:03:71:f7:39:
29:70:59:f6:e1:27:cb:c7:28:a4:2e:f2:93:bb:f7:
1f:2c:69:04:49:5a:b5:bd:3f:8b:f6:60:c8:6a:50:
57:35:a2:83:c1:be:e8:bb:df:b3:2a:ff:58:d0:42:
be:07:5a:a2:bf:7e:55:a6:c3:2a:49:04:15:98:e9:
64:71:90:d1:b2:7f:6a:78:00:83:8c:1e:8d:f9:2b:
bf:c4:86:5a:89:e4:87:b3:9f:11:7b:8d:81:e1:3c:
c1:7c:58:79:54:6f:92:e5:e0:2b:11:f3:d2:07:03:
f4:5c:c9:d1:80:af:ee:e0:11:1a:8b:45:94:06:c4:
27:03:ba:74:bd:cd:7b:6f:29:85:e8:28:cb:0f:42:
91:18:cd:e0:4b:e5:ef:32:df:a6:a8:fb:12:6a:a0:
bf:70:a3:11:16:e2:c1:b3:1e:b8:98:a9:45:61:af:
8f:c3:20:54:50:2b:e8:8d:37:32:77:6c:dd:6f:c0:
f7:04:01:56:ce:28:8e:45:31:8f:d3:69:41:57:8f:
43:d3:b5:34:35:53:40:6a:60:02:f8:df:08:a4:9c:
38:9a:7c:91:b5:87:b3:fc:14:0f:65:8e:96:bd:02:
ff:5b:77:1f:b1:33:cd:42:91:a5:29:1f:6f:fe:c1:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AF:BF:E3:FC:8D:FC:ED:49:62:DE:EF:42:7E:20:BC:2A:DB:DC:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6BCDF72017111EF9592AB23017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:83:dc:a6:44:99:56:40:3e:31:74:da:d9:60:af:36:ea:dc:
e1:bf:c7:a5:1c:5f:87:85:6c:1f:b1:9f:c3:79:8e:4f:52:cd:
3d:51:c7:65:76:d3:68:27:4c:9f:8c:c6:9f:76:ba:60:e2:3f:
f8:50:31:ed:7f:26:05:64:06:63:f3:b3:18:1c:ac:da:4a:98:
73:bb:34:78:2f:95:e4:a8:38:a7:2c:da:eb:fd:eb:3a:fc:cc:
bd:10:6b:b2:93:78:8b:f9:78:10:e1:1c:da:06:5b:89:f2:cc:
c2:4d:91:a5:b3:fe:88:ca:9f:43:b6:9c:e7:01:c3:cc:80:17:
50:4d:0e:76:70:08:32:98:75:58:06:4a:9d:44:93:4c:a8:ae:
b5:cb:aa:b4:63:0f:83:eb:db:46:ed:30:66:10:86:c1:1f:33:
b8:1b:f4:85:d2:11:9b:bb:c7:57:95:a9:71:1f:7b:1b:e2:7b:
cc:35:d8:8f:b9:71:fe:8f:59:53:fe:6f:17:f7:81:69:f3:5f:
b8:93:63:0d:88:95:be:a5:4c:b6:46:29:33:a1:2e:7b:cf:2f:
09:27:12:8f:63:7b:f8:2c:84:ad:01:fa:28:8e:5f:9e:e9:40:
f5:0e:7d:ee:33:5a:66:8a:00:1a:c6:2f:c3:f6:03:db:ca:27:
e1:a7:fb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:21 2024 by rpki-client on console-fra.rpki-client.org