Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8BE1C0E09BA11EEB786DB814AD9E6FC.roa
File: B8BE1C0E09BA11EEB786DB814AD9E6FC.roa (raw, json)
Hash identifier: BMqZSEaNoBQmvipG+rFplfsR7ulaXpnaVVJYEfq/ssY=
Subject key identifier: D8:9F:F1:A3:8A:67:CB:57:C9:98:28:65:28:62:3E:3A:3B:45:47:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2C1A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8BE1C0E09BA11EEB786DB814AD9E6FC.roa
Signing time: Tue 13 Jun 2023 07:20:06 +0000
ROA not before: Tue 13 Jun 2023 07:20:03 +0000
ROA not after: Wed 05 Jun 2024 07:20:03 +0000
asID: 201411
IP address blocks: 45.195.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11290 (0x2c1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 13 07:20:03 2023 GMT
Not After : Jun 5 07:20:03 2024 GMT
Subject: CN=648818a6-e3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:7c:2e:e2:7b:ff:c4:f6:53:ae:6e:37:72:
a7:e7:3f:cc:69:46:f8:cc:d1:c8:e4:69:9d:50:d9:
93:5d:b0:03:ab:16:3e:c9:d4:d4:48:b8:f6:52:73:
a2:a7:ba:54:73:4f:24:2d:63:71:7f:c7:41:18:08:
85:af:48:24:bb:7d:41:fd:97:e3:3c:c7:bf:55:b1:
81:ab:c0:0b:78:58:01:a2:5b:bd:86:77:92:ba:c6:
47:db:6a:a7:b0:68:53:1f:da:ee:60:f6:28:9c:37:
fe:05:d1:80:dc:fa:aa:42:54:51:28:b7:65:42:94:
a3:3d:c8:10:40:cf:0f:e7:18:81:85:fc:42:e8:58:
fe:fd:7c:47:d8:a9:53:96:40:c7:ae:b9:91:2a:4b:
0e:54:f7:1f:90:7a:f4:6d:45:3a:5a:03:9b:ad:be:
5d:cd:7e:79:ab:c4:50:76:1f:f4:d1:14:92:2e:95:
90:e3:e3:28:0c:6d:34:a8:d3:e2:20:b4:2a:28:29:
8b:30:1f:5c:fc:e5:0d:d5:11:e5:98:9f:c1:60:a7:
84:36:35:06:87:19:ca:6e:fd:24:93:67:6a:85:ba:
1a:4c:59:d3:df:7d:df:9e:45:e6:6e:f3:7e:20:4f:
0b:e9:b3:1d:60:ab:eb:09:f4:89:c5:9e:5c:c0:03:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9F:F1:A3:8A:67:CB:57:C9:98:28:65:28:62:3E:3A:3B:45:47:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8BE1C0E09BA11EEB786DB814AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.226.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:19:03:00:c4:d6:67:0f:72:33:b8:f1:be:8d:11:3a:32:f4:
f8:48:cd:25:f2:41:20:13:f1:29:76:57:4b:30:2a:34:de:e5:
06:59:73:cd:47:05:b2:17:0a:c8:5d:2d:7e:fe:62:8e:b4:6d:
44:a2:a0:2d:20:28:d6:82:85:f0:56:9c:22:cf:09:45:55:75:
f1:2d:8d:96:5d:b0:d1:ef:b7:10:b3:aa:67:0c:c1:0b:43:a5:
e9:7f:af:63:fe:f6:b7:ba:76:20:73:49:11:35:08:d2:c4:9b:
12:c9:44:02:4d:56:06:61:e7:f2:a6:06:55:5a:b8:ec:6d:3a:
3f:7a:ac:56:d2:ac:d8:d1:ff:18:e0:d0:14:ef:4d:6a:af:04:
38:17:bd:15:8d:43:40:b8:8a:d5:a0:3f:c2:4b:3b:95:58:ad:
12:fc:03:8e:8c:39:35:8c:49:68:4a:65:24:6a:01:0c:a5:4c:
fa:f5:43:cf:ba:92:72:1a:33:9f:e0:0d:cb:23:42:27:86:c4:
e3:ba:7b:64:ba:70:0a:a2:ff:3d:dc:ad:10:5a:e2:18:ad:a9:
f6:ae:2a:61:95:99:23:5c:34:46:87:37:58:cc:00:13:71:68:
7e:bb:04:5f:94:6b:77:2f:35:1e:ed:a2:9e:f2:5c:7c:37:b8:
33:6d:70:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:16 2024 by rpki-client on console-fra.rpki-client.org