Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B55226E8B80411EEAA8EC2A5775412E6.roa
File: B55226E8B80411EEAA8EC2A5775412E6.roa (raw, json)
Hash identifier: Tu3bOET9ACpq0MN9ekrbkW2Gg+o8Fo/w7BjPzNWUiys=
Subject key identifier: 92:9B:61:59:95:0D:FD:A3:E8:F4:35:99:63:C5:E3:0A:57:6A:CA:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 6424
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B55226E8B80411EEAA8EC2A5775412E6.roa
Signing time: Sun 21 Jan 2024 02:28:06 +0000
ROA not before: Sun 21 Jan 2024 02:28:02 +0000
ROA not after: Thu 08 Aug 2024 02:28:02 +0000
asID: 133861
IP address blocks: 45.207.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25636 (0x6424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 21 02:28:02 2024 GMT
Not After : Aug 8 02:28:02 2024 GMT
Subject: CN=65ac8136-2387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:a7:94:ae:6c:41:a8:b2:54:a7:30:d0:7b:
67:3f:df:32:f2:39:55:2b:be:30:71:9d:c8:26:6a:
28:c2:18:ac:7b:a6:f9:92:3d:fd:f5:aa:8e:3f:25:
a1:56:cf:c3:67:e0:4a:82:ed:f0:17:93:ae:85:4f:
f8:f7:3a:8c:0c:d9:aa:af:5a:18:66:b5:90:4d:4e:
c8:b7:76:f9:4f:64:1b:49:24:73:39:29:d1:50:00:
4f:77:e0:7b:68:13:a9:43:da:d6:12:d9:51:30:6d:
8c:1a:9f:77:96:d4:f5:52:26:19:11:d9:fb:74:a4:
17:a9:98:d3:8b:17:dc:72:fd:22:b1:08:78:31:30:
cd:8b:50:45:07:9e:e2:ad:bc:3c:33:68:8e:ea:e0:
9e:92:0e:97:43:40:e3:0a:db:e5:9a:c8:03:a0:77:
fd:2a:50:40:f5:f0:24:0d:74:dc:69:83:5a:36:c5:
bb:cf:48:8c:52:ea:a6:d4:a1:37:99:77:90:cf:64:
da:58:0f:1b:87:fd:c1:b1:e9:71:b1:5b:40:15:a8:
40:34:e2:fc:5f:ff:ab:83:48:19:d1:c4:d5:de:4e:
16:3f:f8:3a:91:7d:98:eb:48:c6:e3:ec:07:a8:8e:
79:98:29:69:24:68:75:d2:75:63:4e:2e:34:75:e6:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9B:61:59:95:0D:FD:A3:E8:F4:35:99:63:C5:E3:0A:57:6A:CA:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B55226E8B80411EEAA8EC2A5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ff:ea:7d:35:76:33:22:17:35:14:3c:97:53:e3:0e:b1:2e:
a0:83:a9:5c:55:a7:bd:d4:f8:88:d8:88:aa:92:25:2b:43:d2:
d2:f3:fd:11:52:64:29:7f:f0:c8:31:3a:a4:3e:a2:2b:00:ea:
75:43:8e:9d:e3:a3:eb:f7:a8:9d:2f:60:34:b9:5b:9d:5a:b8:
e7:e7:61:93:aa:51:a4:96:9f:04:bf:32:cf:f8:4d:e6:85:04:
a1:75:11:3b:b9:e5:df:a8:03:1a:d0:da:33:cb:f9:1d:f1:9e:
b5:24:c1:14:6d:f0:33:a9:90:29:ad:2c:0c:d5:55:dd:ee:6f:
ec:ff:2d:ce:ba:18:22:1f:8b:d3:8f:54:21:a0:66:86:6d:20:
d8:7a:ae:4c:19:90:de:f0:a2:00:42:82:a0:3e:01:15:15:3d:
7b:ee:1e:ae:e0:5a:59:79:cf:1b:25:6b:51:84:3c:9f:01:da:
89:9e:d7:e3:45:33:94:d9:42:1f:bb:eb:1a:4f:72:ad:b1:2a:
49:79:40:a8:b1:ac:f4:69:e7:be:de:2c:7a:6d:81:5a:fc:94:
2f:3c:d8:93:8e:a4:3a:5c:ae:67:94:4f:5d:dd:e6:01:cb:2a:
eb:ae:e0:4d:95:ec:bf:b8:df:c0:29:34:a3:f6:95:19:a2:4e:
0b:cd:72:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:15 2024 by rpki-client on console-fra.rpki-client.org