Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6707C1AF49511EDBD79CA614AD9E6FC.roa
File: B6707C1AF49511EDBD79CA614AD9E6FC.roa (raw, json)
Hash identifier: DvbptC2KuVTrxHaINlXHuWTz8TRwW89ivf8R6yRIAZI=
Subject key identifier: D6:D8:D6:75:1F:13:3D:00:BA:2B:9A:2E:D3:D3:6F:5E:D0:2E:8B:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 252E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6707C1AF49511EDBD79CA614AD9E6FC.roa
Signing time: Wed 17 May 2023 09:32:17 +0000
ROA not before: Wed 17 May 2023 09:32:10 +0000
ROA not after: Sun 26 May 2024 09:32:10 +0000
asID: 63199
IP address blocks: 45.196.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9518 (0x252e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 09:32:10 2023 GMT
Not After : May 26 09:32:10 2024 GMT
Subject: CN=64649f21-aac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:0c:23:4c:57:82:a1:9f:39:9c:c7:be:93:
5d:be:01:d5:9e:37:49:4d:72:63:8f:93:5c:8a:10:
b3:2c:d5:c6:7f:b7:ba:80:7a:70:ec:ab:53:49:f2:
b5:e5:4a:eb:f1:65:03:cf:13:85:5d:e3:9a:b5:55:
e3:b9:78:9a:f9:4c:f9:ee:2b:f2:75:fc:dc:4c:6f:
38:4d:f8:12:b5:da:5e:10:50:18:d5:cb:64:ef:b9:
fe:76:46:74:77:09:a7:e8:a5:19:43:57:74:69:4d:
10:72:d5:d3:86:8b:7b:14:ae:b5:f8:ca:0e:65:fa:
25:a1:06:0a:29:0c:f3:ab:c8:2f:87:17:d7:a2:46:
a4:2c:c7:dc:12:49:62:f5:31:b8:88:5a:d7:0c:0b:
30:0d:07:bc:9d:7e:c6:68:42:7e:13:a0:63:44:8c:
97:13:f9:b2:60:36:81:32:09:d0:b7:9d:86:3a:c6:
66:3c:4f:a2:09:54:03:5e:8d:66:bb:51:16:d3:84:
6a:4d:7d:80:46:36:12:5f:5d:a6:f3:b9:89:38:64:
36:ee:2c:4c:cf:bd:5c:2b:d8:b9:3a:d4:53:c3:d8:
aa:10:d1:30:70:21:91:0c:ef:ce:8e:35:88:d7:4e:
94:7a:38:63:eb:6a:4f:ea:38:26:a4:d4:7c:3d:7e:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D8:D6:75:1F:13:3D:00:BA:2B:9A:2E:D3:D3:6F:5E:D0:2E:8B:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6707C1AF49511EDBD79CA614AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.18.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:ec:f8:72:9b:9c:3b:fd:cd:0d:78:66:2a:da:02:87:d8:a4:
0f:ef:69:bf:b5:5e:15:b8:c6:73:29:dc:f7:4c:ef:22:55:c5:
73:04:07:ac:0c:68:28:8e:cb:c9:31:05:1e:ca:d7:ba:7c:6a:
a8:8a:c4:24:4e:4d:e1:39:44:24:62:c5:a9:ca:9d:5c:ac:f5:
d4:66:a0:33:09:69:47:c9:79:89:3a:e3:e3:ff:c7:c1:36:30:
42:ba:51:7c:58:f7:16:08:8a:af:e8:c8:fc:ae:05:a0:eb:a7:
ca:50:3d:08:c0:51:4a:1b:cf:55:7e:64:a2:9e:bc:8e:0f:9f:
88:e4:03:28:88:11:f8:87:2d:a8:97:74:50:64:e9:cd:14:d8:
b1:dd:4e:3f:8d:dc:a6:f5:ac:47:d3:97:8d:84:25:63:2a:63:
1e:3b:1f:ec:59:15:08:01:69:37:e3:50:b5:63:28:05:3b:c6:
2d:c0:26:ac:eb:3e:f0:e3:4e:3b:08:3d:3f:4d:8f:1a:69:52:
98:89:18:27:67:96:ac:3b:73:7a:2b:95:0d:ae:79:34:2a:a1:
ac:be:e7:5a:e4:0f:e2:e9:8b:d5:85:e4:f5:61:e5:1e:7f:49:
91:b1:91:56:ce:cb:9e:6e:43:db:2f:4d:0f:89:3a:68:20:2f:
fa:ff:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:57 2024 by rpki-client on console-ams.rpki-client.org