Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC608BBA142011EF8C003371017001B1.roa
File: AC608BBA142011EF8C003371017001B1.roa (raw, json)
Hash identifier: EXC2h7Zq2SvcPha5EM3+IA9S48d0JQZ1slLBCb2y2hI=
Subject key identifier: FE:9A:EA:45:77:FF:46:A7:72:15:FA:BF:9A:A8:51:C6:15:0E:D7:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8AAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC608BBA142011EF8C003371017001B1.roa
Signing time: Fri 17 May 2024 07:40:04 +0000
ROA not before: Fri 17 May 2024 07:40:00 +0000
ROA not after: Thu 04 Jul 2024 07:40:00 +0000
asID: 44559
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 09 Jun 2024 07:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35503 (0x8aaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 07:40:00 2024 GMT
Not After : Jul 4 07:40:00 2024 GMT
Subject: CN=664709d3-6194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:13:bc:71:b3:f8:df:4e:65:40:10:60:4b:
68:af:05:f0:09:2e:ba:42:b1:61:2f:67:47:61:4a:
92:db:b2:0a:63:36:31:42:be:c7:ef:09:e9:13:67:
9e:a4:8a:62:26:a2:f6:c0:dc:ff:62:84:f2:6a:ce:
8f:30:74:96:f3:72:d3:97:8b:b8:42:46:46:35:56:
75:71:a8:cb:4b:97:3b:a9:b9:d7:92:01:3c:46:f2:
ff:37:60:c7:2e:fc:49:2a:2f:d5:77:b1:be:45:83:
eb:63:18:2d:78:64:ac:f9:a8:ee:dd:41:44:21:bb:
65:cd:ae:b0:24:c6:e6:d1:ce:54:a7:c5:06:89:39:
69:9b:d6:42:4b:3c:de:fe:14:6b:e3:ac:15:e8:33:
0c:8b:50:da:df:b3:83:d0:5a:b6:30:c2:79:fe:ad:
28:d9:55:4b:58:30:02:61:c0:d3:48:73:17:60:2e:
0c:89:49:20:e1:a3:c4:c6:99:8b:95:e0:5f:57:16:
7b:d7:80:4d:e1:09:97:bd:44:97:56:72:47:c1:92:
44:fa:d3:b3:33:c6:58:32:0c:1f:e4:98:1c:1b:54:
5a:0d:de:d9:41:0a:f3:e1:c4:15:6b:aa:8f:d5:4e:
f6:75:56:50:26:e0:df:52:f8:4b:73:70:e1:44:99:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9A:EA:45:77:FF:46:A7:72:15:FA:BF:9A:A8:51:C6:15:0E:D7:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC608BBA142011EF8C003371017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
51:76:32:4d:bf:5f:03:03:7a:9f:fb:8c:1b:37:42:92:eb:1c:
8b:68:ec:04:29:e0:f6:7a:25:a2:6f:fb:83:55:0a:8b:b8:3f:
57:23:23:03:13:04:c1:c7:88:78:94:c4:11:73:5e:17:75:c7:
71:92:12:6f:39:9e:6b:60:ca:41:31:07:8e:5e:a5:82:75:b9:
80:10:60:b4:14:6c:40:6b:28:d3:1f:41:fa:71:12:3e:89:37:
39:14:64:23:2d:ee:78:4c:bd:b5:7c:87:b2:cc:d0:6a:a7:d6:
c3:4b:c9:0c:78:5c:97:87:58:86:c7:84:ae:66:9a:c5:09:d4:
08:1a:d1:b5:eb:56:6f:bd:6c:f8:65:31:8d:19:1b:31:d2:47:
81:89:6b:aa:17:0e:43:3c:a5:42:4e:e9:71:f7:8a:ae:0f:10:
24:51:fa:7c:00:2d:94:fa:53:61:90:1e:37:0b:e5:32:c5:bf:
31:1d:6f:3f:39:b2:78:df:22:f8:b4:4d:09:96:5f:c9:41:8f:
eb:9a:3e:26:6b:2d:87:83:68:4a:c3:ad:b8:ae:64:46:75:d8:
1e:f9:8b:e7:c9:16:fb:41:dc:6b:28:e6:39:84:fe:3c:03:9c:
b4:42:06:c8:a4:c1:c4:3c:3d:59:8f:70:3a:6c:d3:1e:9b:5a:
ae:b6:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 09:40:06 2024 by rpki-client on console-ams.rpki-client.org