Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB93D33AF86E11EE84BD7C31017001B1.roa
File: BB93D33AF86E11EE84BD7C31017001B1.roa (raw, json)
Hash identifier: mJCmHjci2Dw1qu//BsgwrgZ9hdx4hAwNJSCGz/ABG40=
Subject key identifier: 16:76:67:9C:86:22:27:74:FC:9A:9D:2A:C5:A9:0C:B5:22:08:59:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 823D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB93D33AF86E11EE84BD7C31017001B1.roa
Signing time: Fri 12 Apr 2024 01:48:17 +0000
ROA not before: Fri 12 Apr 2024 01:48:14 +0000
ROA not after: Fri 19 Jul 2024 01:48:14 +0000
asID: 140925
IP address blocks: 45.195.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33341 (0x823d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 01:48:14 2024 GMT
Not After : Jul 19 01:48:14 2024 GMT
Subject: CN=661892e1-85f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:43:11:2f:1a:23:fc:28:12:59:5e:f0:68:
f9:36:fb:c7:ef:10:4c:43:30:d8:0f:b6:1e:ec:ac:
a7:48:4b:57:77:25:bf:67:c8:fe:04:03:cd:92:46:
65:bb:d1:41:c1:40:ea:87:5f:44:9a:4a:09:b2:df:
3f:aa:4a:d8:e0:0c:bc:a5:98:b0:ca:18:bd:dc:fe:
c4:bf:1b:3d:b5:46:75:14:eb:86:c9:d8:43:66:cf:
27:f4:06:77:fa:60:63:05:e7:d0:09:09:d2:ca:6f:
1b:97:6d:99:58:d8:62:f8:d4:86:ae:45:24:47:0a:
3f:c3:b7:24:01:ae:e2:61:d5:8d:a1:1f:5e:28:ed:
e8:5f:11:6b:8d:95:93:05:89:f3:d4:33:5e:a3:a5:
64:90:04:10:b9:ee:fc:e4:0c:f1:08:c1:11:f4:88:
07:9d:d5:e7:a9:9d:40:ec:66:45:fd:de:94:26:de:
a8:ee:ae:59:88:fc:a6:af:bb:71:b3:d7:bd:de:7b:
27:92:b7:99:7e:a2:9a:f3:98:8e:29:d3:23:92:c2:
90:fa:1d:60:3b:0e:13:7b:f9:a7:3b:e0:6c:5b:c2:
82:43:0e:96:e3:30:18:bc:03:21:c0:39:9e:0f:cd:
6c:22:7c:ef:ff:31:cd:fd:79:b1:aa:b8:10:9b:4c:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:76:67:9C:86:22:27:74:FC:9A:9D:2A:C5:A9:0C:B5:22:08:59:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB93D33AF86E11EE84BD7C31017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.151.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6b:0c:5c:5a:ca:e5:9e:27:13:49:66:e0:0d:4d:46:ac:a6:
0a:e4:6b:da:84:11:8f:b6:07:35:14:f9:8b:6f:18:b3:ed:68:
45:95:61:7a:a3:5b:27:dd:49:dd:74:bb:d7:48:0f:bf:e8:cf:
04:37:c5:d3:53:a7:af:ea:25:f3:54:ab:ef:e8:97:22:df:43:
13:ba:9a:73:35:ed:fe:45:67:c0:4c:e7:a2:ef:4e:16:82:8a:
55:6c:54:29:e9:fc:7c:b6:30:f2:93:e2:5b:0e:1e:07:87:76:
e4:f7:47:d5:e9:02:a0:ce:2d:af:f0:2d:58:15:cd:ce:99:45:
76:0e:1d:8a:ad:52:56:e5:73:47:ab:db:05:c3:5b:aa:81:20:
32:6a:c6:f3:fc:ff:ff:fd:7f:94:2d:ea:14:ce:c9:54:32:cd:
ce:fc:aa:0f:d2:05:33:a9:93:36:9f:5b:46:0a:02:dc:a0:ce:
af:7b:b0:b9:d5:5f:93:63:77:9a:bf:af:75:ae:65:18:bf:3a:
80:8a:5e:05:ca:ca:a8:c2:33:3d:9b:4a:d9:56:7f:8d:7d:c5:
df:b8:6c:78:c3:80:12:3d:19:0c:0e:1f:c8:81:2a:6f:61:20:
3f:ec:ac:77:27:fd:36:4d:1a:92:88:7e:72:6b:3c:b3:8e:73:
da:37:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:16 2024 by rpki-client on console-fra.rpki-client.org