Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9B28FC4E4F611EEAF58D54C775412E6.roa
File: B9B28FC4E4F611EEAF58D54C775412E6.roa (raw, json)
Hash identifier: nkLbn8DTEIiWL4q6LBuy1UYrL64lF9KIkT6OlZ5YkDs=
Subject key identifier: 73:DC:AE:63:00:A2:CA:9E:90:6C:41:5E:0D:3C:12:CC:56:47:E1:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7F39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9B28FC4E4F611EEAF58D54C775412E6.roa
Signing time: Mon 18 Mar 2024 07:11:22 +0000
ROA not before: Mon 18 Mar 2024 07:11:19 +0000
ROA not after: Sat 20 Apr 2024 07:11:19 +0000
asID: 21859
IP address blocks: 45.204.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 07:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32569 (0x7f39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 18 07:11:19 2024 GMT
Not After : Apr 20 07:11:19 2024 GMT
Subject: CN=65f7e91a-6270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:00:ae:07:e3:5e:7b:66:94:19:95:ff:24:
cd:ea:e5:ef:80:80:c3:2d:a8:8b:83:93:d8:cd:65:
0b:c8:9e:c7:9f:3e:1b:5d:bd:14:74:4a:6a:f6:5f:
3f:a0:34:bb:de:5e:05:a7:8a:ed:9a:a3:0c:4a:11:
bb:49:fb:da:e5:ab:f7:fe:44:f8:a8:5c:3c:f0:f1:
af:4b:89:72:73:fc:e7:5c:e5:38:c8:98:68:ef:38:
3e:da:05:c6:2f:fe:cc:94:d1:0d:ea:a6:80:97:34:
b4:ce:c6:de:5b:58:dc:b4:03:a1:d2:db:0c:67:fe:
26:3d:2f:39:3b:08:82:17:7b:28:2f:dd:d4:5b:ed:
f6:a3:e1:63:af:59:25:b1:d7:cd:9e:3b:1d:1e:c9:
a3:5f:39:cb:de:66:99:1c:3e:61:f1:f9:d6:2b:c9:
b2:fe:5e:5f:e6:84:28:38:4c:f1:66:88:32:b5:0c:
1b:17:ff:62:0c:a0:a9:e4:84:ca:9c:74:bf:b3:36:
7d:1c:dd:c8:3c:84:40:db:b6:0f:9b:b5:39:d9:8c:
e4:35:6d:5c:1a:39:e5:9b:1f:09:b4:3e:4c:2c:4a:
69:a2:d8:3a:61:cd:a6:fe:46:3c:cd:48:77:4a:63:
fd:c9:23:a6:b8:4b:0a:47:0f:c2:4e:74:2b:d7:89:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DC:AE:63:00:A2:CA:9E:90:6C:41:5E:0D:3C:12:CC:56:47:E1:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9B28FC4E4F611EEAF58D54C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.78.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:86:24:f4:f0:de:0c:c8:9f:3c:65:18:67:30:27:9e:db:a0:
96:fe:64:f1:71:48:ca:6a:1b:c3:f2:e7:51:3c:c1:26:52:2a:
97:f2:35:26:aa:b4:4e:5e:5d:0f:a3:60:ba:52:62:45:1d:9d:
2c:ed:f8:ce:b1:cf:11:03:25:e8:c8:dd:60:6c:78:99:b2:01:
2e:a6:25:f7:29:1a:a7:b8:d9:11:af:cd:0a:5c:5e:d2:3d:bd:
87:a0:2e:df:97:aa:ee:6d:36:3a:f0:34:fe:bb:c4:94:18:9a:
fa:f8:12:4b:9f:43:52:76:44:ba:21:af:86:b2:b1:b6:bc:4c:
7d:2e:4e:0f:ec:58:07:4e:45:15:b5:2b:43:4f:0c:4f:cf:bf:
d0:82:b8:17:f9:c6:00:3c:0d:4c:cd:79:b9:87:c3:fe:38:37:
80:83:25:4f:ee:b6:fc:b4:63:08:04:e6:f6:b3:72:f5:76:1d:
c9:69:b1:05:76:02:0c:1a:37:8e:2b:8c:1a:35:bd:c1:d2:7a:
8e:67:4e:e2:cd:59:b4:2f:e2:81:cf:af:07:c0:f1:7a:ff:c7:
22:29:78:14:57:d9:03:02:9d:46:d4:f3:4c:66:55:7f:48:d5:
6e:93:8a:e1:e4:26:67:ab:83:c5:ff:0d:b4:3a:ef:e3:fb:58:
31:01:df:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:39:31 2024 by rpki-client on console-ams.rpki-client.org