Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A96BB2C808F911EE8BA1A2334AD9E6FC.roa
File: A96BB2C808F911EE8BA1A2334AD9E6FC.roa (raw, json)
Hash identifier: RTpg5+I8V81gAZIeTrP4RDPXvoDI5/IR1xi4V2P8+s4=
Subject key identifier: 34:C4:71:39:35:C7:74:E3:4C:CA:79:0D:B3:3D:82:C7:0B:A7:8C:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2B2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A96BB2C808F911EE8BA1A2334AD9E6FC.roa
Signing time: Mon 12 Jun 2023 08:18:08 +0000
ROA not before: Mon 12 Jun 2023 08:18:04 +0000
ROA not after: Sat 25 May 2024 08:18:04 +0000
asID: 131178
IP address blocks: 45.201.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11051 (0x2b2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 08:18:04 2023 GMT
Not After : May 25 08:18:04 2024 GMT
Subject: CN=6486d4c0-7492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:8c:ea:e2:63:36:d0:91:83:94:fe:cf:c1:
50:b7:17:8d:4c:0e:41:0e:71:fe:8a:4e:73:6c:c6:
ee:36:4f:39:f8:99:aa:fb:cd:45:f7:0c:eb:2b:11:
a9:b7:aa:f5:5f:67:4e:f9:48:27:71:82:ff:23:ea:
e6:bc:2f:b5:83:ae:1a:0b:b4:8d:6d:04:aa:1b:16:
da:69:d5:1e:d4:a8:95:42:e7:46:b9:e4:cd:9d:89:
2c:db:ce:cc:99:91:fb:01:9e:0f:f0:7e:2d:ff:56:
e0:e8:40:5b:9b:ca:6c:6b:9d:bf:35:84:44:8a:c5:
3c:ea:91:12:c2:1f:21:18:26:7a:f6:16:85:a3:f3:
bb:c1:13:4b:b3:2d:17:fd:25:2a:57:d9:c7:c2:62:
84:a2:8b:10:2a:b1:35:20:36:5f:ec:0b:3b:06:52:
e8:d3:50:e0:e5:5d:10:29:f1:a8:4c:ee:16:0e:95:
93:13:72:22:4d:0a:5b:40:1d:2c:bb:a7:d5:fe:63:
ee:70:45:0b:c3:16:18:fa:1a:49:ed:f7:d3:da:0d:
56:7e:b9:6f:21:3a:17:89:c6:0c:4f:1c:73:4b:9c:
6d:f6:0a:9a:06:99:f0:4b:a2:88:1e:87:29:45:44:
79:ae:b9:ef:b3:38:d9:ed:6d:2e:df:66:c8:ac:b5:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C4:71:39:35:C7:74:E3:4C:CA:79:0D:B3:3D:82:C7:0B:A7:8C:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A96BB2C808F911EE8BA1A2334AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.190.0/23
Signature Algorithm: sha256WithRSAEncryption
29:3a:5d:76:4d:7e:b0:bc:9c:17:3d:aa:07:b2:ed:af:2e:2a:
c3:50:7a:2d:dc:d4:fc:3c:64:96:83:32:bd:f4:f7:b2:38:76:
7f:8e:3a:2a:66:30:a5:b2:a6:63:ac:47:b3:93:f9:32:51:3c:
1e:28:8b:0a:26:2a:19:0f:e5:77:79:10:66:ef:22:e6:b0:73:
8d:31:6d:5c:d0:de:bb:b4:f4:2a:40:d5:50:83:c5:7e:23:3a:
a2:e4:e2:6d:09:87:74:60:ce:57:da:d2:9f:9b:dd:0e:c7:bb:
e3:74:8d:c3:63:aa:7e:51:d5:a8:c9:32:56:44:99:76:59:24:
76:c8:c7:22:b0:22:59:aa:eb:67:dd:e8:54:4d:9c:15:34:17:
b8:a0:22:90:3b:71:7e:ed:f4:23:f8:95:b6:c0:37:3e:b0:fd:
db:55:84:ea:c7:df:e2:3b:92:c4:f5:6d:e4:a3:39:c4:15:95:
91:68:9a:a4:2f:f3:e6:fe:4b:52:4e:1a:2d:cb:06:a1:01:1e:
76:f3:14:ea:79:ef:2c:90:9b:37:41:bf:ac:43:39:1d:99:ce:
01:ad:47:99:fb:1b:30:a0:d4:8c:58:43:72:12:9c:9b:bd:7b:
81:14:77:48:3f:ef:c2:06:ca:4f:72:70:66:dd:49:2a:90:8e:
b2:65:42:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:23 2024 by rpki-client on console-ams.rpki-client.org