Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCB078921C6211EEA8C863154AD9E6FC.roa
File: BCB078921C6211EEA8C863154AD9E6FC.roa (raw, json)
Hash identifier: nhjs6YROSTH5RQEEBXznvZ7L9he9WxlTCm/kGhl+qeg=
Subject key identifier: 0D:55:31:F5:D8:EE:81:D3:A7:65:00:D1:CB:BA:E6:94:3F:6A:33:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2EC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCB078921C6211EEA8C863154AD9E6FC.roa
Signing time: Fri 07 Jul 2023 01:08:09 +0000
ROA not before: Fri 07 Jul 2023 01:08:04 +0000
ROA not after: Mon 01 Jul 2024 01:08:04 +0000
asID: 209242
IP address blocks: 45.195.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11973 (0x2ec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 01:08:04 2023 GMT
Not After : Jul 1 01:08:04 2024 GMT
Subject: CN=64a76579-4fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:63:e6:61:19:e4:8d:ae:89:49:ce:94:b1:ef:
26:7e:98:bb:9b:83:60:f7:2f:3a:cf:e0:b4:86:1c:
27:a7:6a:e3:78:68:7a:f3:40:c2:12:63:1b:36:87:
34:13:1f:8a:ac:ff:3f:93:ff:85:bc:4a:8d:72:5e:
e4:2a:32:34:3f:1d:5d:b7:8a:b8:b2:11:e9:b2:69:
27:0f:86:2f:7b:e3:f4:34:1b:78:35:ae:04:c4:f8:
f4:9a:70:09:b4:b9:94:f8:4c:56:ae:ba:80:b4:9a:
1a:e2:c7:cb:d8:02:c3:7c:e0:8e:47:56:f0:1e:16:
26:a5:9f:f3:d9:66:7b:3c:c7:b8:f9:d6:6a:a4:93:
a8:8f:9f:74:6c:53:1a:78:80:2f:9d:e4:30:e3:53:
19:d9:dc:94:81:6e:11:bc:fa:02:6d:4b:78:7b:df:
8e:68:ec:c8:6d:47:40:eb:95:77:e4:e7:d1:8e:c2:
73:6f:66:27:e1:c5:b0:12:ae:54:75:3c:eb:56:7b:
35:74:a0:fb:fb:6c:1b:29:c6:02:8a:8d:80:25:1c:
f7:38:1b:4c:43:1d:c3:e4:41:08:d3:f3:89:3c:5f:
7a:02:9e:ea:31:02:a0:64:48:e2:cf:e2:62:e3:66:
e2:1c:ca:3b:12:ae:11:31:fa:43:11:e4:bc:61:b3:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:55:31:F5:D8:EE:81:D3:A7:65:00:D1:CB:BA:E6:94:3F:6A:33:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCB078921C6211EEA8C863154AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.62.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:7d:40:39:bd:78:53:31:86:60:19:9d:2b:99:a7:fe:a4:dd:
d0:fb:f3:d8:f2:5b:30:d4:94:25:06:3c:f4:f6:97:9e:f6:97:
10:6c:78:ac:77:c8:45:be:2c:72:f1:1f:32:bb:5a:ac:a0:8e:
a0:73:c1:cc:76:3c:1a:00:0d:b3:24:8b:7a:5a:98:fb:9f:ed:
98:c4:60:2b:14:54:b2:5c:d2:b4:8a:99:ae:bb:66:c6:5b:a4:
db:76:49:e3:54:0e:be:9b:2a:6a:b9:4e:5d:9e:dc:9b:f6:82:
d2:7c:dd:99:9c:53:79:28:63:27:b4:be:b5:ae:bc:24:f7:1e:
cd:ae:b2:a3:20:43:a4:a7:96:d6:e4:ba:d1:04:e3:cf:84:ca:
4b:71:dd:75:ea:8b:23:0b:82:c7:7f:77:cc:33:2e:ee:25:06:
93:2b:36:c9:69:b5:d2:c0:7d:b0:35:1b:f6:aa:7b:90:85:ab:
40:5f:6d:eb:bf:c4:64:a4:90:93:2b:75:a1:33:e0:ee:04:f2:
4a:1c:72:2c:4d:33:b4:02:45:d5:70:b0:44:28:ae:e5:d6:7b:
6c:bd:90:f7:4f:9b:d4:a1:6d:6c:3c:4e:60:c6:9b:76:27:ea:
38:43:b8:9a:4c:12:c0:df:fe:af:4d:bc:a6:00:d5:d4:98:d8:
83:a2:3b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:16 2024 by rpki-client on console-fra.rpki-client.org