Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0E0B30023A011EFB89133037DDC24C2.roa
File: C0E0B30023A011EFB89133037DDC24C2.roa (raw, json)
Hash identifier: NiIHYOTw9RDfV3TQL885ht0M4t23d2kG6wkndI0ih1o=
Subject key identifier: A0:DC:5D:4D:81:E0:18:FD:CE:05:90:64:DE:DD:76:FB:C4:76:A6:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8F72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0E0B30023A011EFB89133037DDC24C2.roa
Signing time: Thu 06 Jun 2024 01:04:41 +0000
ROA not before: Thu 06 Jun 2024 01:04:38 +0000
ROA not after: Sat 03 May 2025 01:04:38 +0000
asID: 23764
IP address blocks: 45.195.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36722 (0x8f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 01:04:38 2024 GMT
Not After : May 3 01:04:38 2025 GMT
Subject: CN=66610b29-4a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:09:1c:5d:24:cc:02:82:d0:a4:f3:e3:13:
bd:9f:4f:bf:cf:e4:5a:3a:c4:20:7f:42:c0:3e:6c:
4d:23:f5:47:3e:3e:94:01:8f:84:9e:b0:af:c5:2d:
cc:a6:6f:d1:81:0a:24:29:d5:dc:bd:cd:9c:81:81:
a3:15:36:7d:56:c8:6c:df:45:4b:25:93:e4:91:51:
d0:3f:62:82:7c:57:64:c2:76:f2:36:8f:0b:6e:08:
43:a2:c2:88:75:40:93:a8:ec:5c:01:1a:f1:de:eb:
cf:00:9e:67:de:d5:92:f9:b4:18:3f:a9:be:18:d6:
69:a1:ee:76:5d:bf:15:0a:65:e4:f0:ae:36:75:fd:
5d:aa:bc:e0:25:f0:42:c7:1b:74:ef:4b:48:3b:a9:
ec:e4:49:74:bd:f2:5e:b9:2f:a1:15:18:51:09:37:
bd:93:e5:a1:82:ee:c3:75:66:c0:3b:fb:ca:5f:1b:
1c:f8:a9:7d:de:01:8e:1a:0f:28:ed:b4:c3:6d:73:
00:a6:51:b2:1e:b6:9c:55:aa:73:49:cc:af:8d:be:
4f:ea:bf:4a:99:b2:a2:29:99:7b:41:87:38:92:5c:
c0:5e:f7:c5:e9:8b:62:e1:84:c4:e9:05:09:06:83:
09:4d:62:04:86:5b:a6:92:c9:1a:ee:d8:e5:2c:87:
8b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DC:5D:4D:81:E0:18:FD:CE:05:90:64:DE:DD:76:FB:C4:76:A6:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0E0B30023A011EFB89133037DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.4.0/24
Signature Algorithm: sha256WithRSAEncryption
64:67:5b:d8:4b:f4:4e:65:c0:84:65:55:48:ee:15:c7:7b:7c:
71:8e:d3:9b:2b:50:92:2d:4f:ed:bf:bf:83:68:97:18:ef:ed:
4c:f3:1e:65:12:43:1a:d1:9e:ff:7c:07:7a:f4:5f:5d:86:da:
d6:f3:d0:0e:de:88:93:01:e3:01:fc:1c:05:c8:0d:a6:71:53:
b7:91:90:d1:09:59:87:b4:2a:12:e9:76:3d:e3:66:82:1b:34:
8b:bb:12:e1:f6:25:9c:d7:64:ef:f8:bb:24:95:c7:b1:ba:cb:
b8:a1:76:c5:23:a2:9f:0e:3e:56:7e:68:6e:a2:d2:b1:d6:98:
11:fe:ea:64:a4:7e:8f:9d:f3:41:c6:20:7b:47:fe:c6:3f:69:
75:a4:b7:43:4c:ad:fb:94:f6:48:9f:ac:67:87:a6:65:49:c0:
0c:96:34:f7:38:d0:09:0b:27:30:32:1c:b4:25:a3:8e:57:a6:
03:c1:53:c9:c9:5a:ca:fa:26:f8:21:4f:d9:52:11:90:53:be:
82:c3:aa:f1:67:d2:fc:ae:ba:8a:d8:3f:d5:52:4a:aa:a6:f2:
c2:fc:8a:0c:8d:a9:d6:24:84:61:83:46:7d:a4:51:dd:57:34:
85:70:0e:95:c0:e3:24:42:48:49:0f:51:45:26:83:2f:4c:66:
eb:99:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:09 2024 by rpki-client on console-ams.rpki-client.org