Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B23C286C7EC711EEA8209C884AD9E6FC.roa
File: B23C286C7EC711EEA8209C884AD9E6FC.roa (raw, json)
Hash identifier: vCrkzWEt+s3Ww7uk5PXzYFADb0fkbNVZjZ3khPKFD7w=
Subject key identifier: 4E:AD:AE:FC:CD:35:94:F3:9F:E6:31:02:69:32:DD:C5:10:B0:00:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4527
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B23C286C7EC711EEA8209C884AD9E6FC.roa
Signing time: Thu 09 Nov 2023 06:17:45 +0000
ROA not before: Thu 09 Nov 2023 06:17:41 +0000
ROA not after: Thu 07 Nov 2024 06:17:41 +0000
asID: 133847
IP address blocks: 45.200.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17703 (0x4527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 06:17:41 2023 GMT
Not After : Nov 7 06:17:41 2024 GMT
Subject: CN=654c7989-0c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:40:1b:21:95:f3:a8:a6:33:71:7a:2b:e2:
df:18:e5:7e:3c:9d:bb:fc:fa:d4:23:b7:ff:e7:3c:
6a:ca:f1:93:62:85:72:35:38:0f:79:32:c3:8f:18:
b5:50:2e:6c:00:f9:20:0b:64:9d:d3:86:bb:a5:a3:
08:17:bc:21:22:b1:38:21:1b:c2:7a:c7:4e:fe:a0:
c7:7b:2c:22:bb:bc:6a:81:e2:21:02:a2:4d:f1:bc:
59:d4:c5:a7:bc:41:92:a4:68:60:87:b1:e4:58:e3:
cf:b3:68:cb:0b:b1:06:11:ff:3e:97:ea:4d:10:26:
df:f7:12:56:0f:4f:20:e8:f3:01:ff:6b:13:7c:60:
fb:e1:ea:38:37:33:48:e2:b8:50:ba:82:9c:01:14:
57:39:51:37:85:fd:46:13:7c:a2:cf:79:34:6c:e5:
9c:29:b9:00:5d:f7:db:16:dd:f6:50:95:b4:c2:a5:
3c:b6:37:5c:59:26:39:c3:76:54:58:03:bf:aa:49:
38:1e:80:db:b6:e8:02:98:b3:54:3e:fd:5b:ae:7b:
49:4a:a3:e6:05:de:ca:24:96:37:dd:ac:b3:04:df:
99:a9:f3:1f:63:52:63:16:1f:4f:a7:65:73:7d:6e:
98:c9:17:56:37:2a:d8:f4:08:d4:d4:10:ca:fd:4a:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AD:AE:FC:CD:35:94:F3:9F:E6:31:02:69:32:DD:C5:10:B0:00:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B23C286C7EC711EEA8209C884AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.73.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:a1:6d:b5:e7:ac:52:5a:5b:1e:58:37:96:56:23:a6:d6:83:
fe:79:e2:38:29:68:ad:d2:49:ca:f4:8a:6f:1e:3d:18:a6:5f:
8f:96:aa:dc:99:83:f9:12:ef:ce:c6:f3:4c:ed:cf:8d:81:68:
03:e0:ed:fc:db:1c:8c:14:c4:ab:3a:25:7f:f3:0c:2d:10:2e:
19:17:d0:a9:2b:b7:ad:9a:46:84:58:2c:7c:28:fb:85:d2:c1:
0a:41:13:52:9e:e1:86:03:7f:01:a2:0f:c8:57:0c:0c:34:c0:
67:cd:8b:cf:91:bc:9b:e1:9d:f1:80:8e:60:d0:a6:27:5f:9a:
b2:6a:36:0b:79:8f:c1:71:5b:ec:92:f0:87:da:cb:c4:da:e8:
24:b2:54:6a:24:86:65:1f:20:f8:75:1e:b6:2e:d8:13:6d:53:
45:c7:49:e2:e8:77:83:fc:ee:c6:aa:36:9f:d7:00:28:33:43:
b9:fa:68:b3:30:34:c0:bb:0b:42:be:86:d8:1a:0e:90:a0:d2:
83:bb:9f:b9:78:11:06:99:a0:73:a9:d4:a2:d5:c5:e9:d9:bc:
0a:62:49:77:d4:32:1a:c9:cb:ec:c3:0e:6e:cc:ce:5b:fd:4e:
5f:07:8a:ec:6a:00:48:20:06:6b:cd:86:67:0a:79:b0:96:03:
49:04:85:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:15 2024 by rpki-client on console-fra.rpki-client.org