Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1019336F91711EDADB9E7194AD9E6FC.roa
File: C1019336F91711EDADB9E7194AD9E6FC.roa (raw, json)
Hash identifier: 17pJJCPewt7t00qYNV3TGKpX5eVSwdTEiZUSgjK/4Jk=
Subject key identifier: 47:AE:E5:89:69:55:93:BA:CB:43:DD:36:98:47:CC:3E:F7:31:B5:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 26C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1019336F91711EDADB9E7194AD9E6FC.roa
Signing time: Tue 23 May 2023 03:13:14 +0000
ROA not before: Tue 23 May 2023 03:13:10 +0000
ROA not after: Wed 15 May 2024 03:13:10 +0000
asID: 399626
IP address blocks: 45.204.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9928 (0x26c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 03:13:10 2023 GMT
Not After : May 15 03:13:10 2024 GMT
Subject: CN=646c2f49-2bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:af:df:95:47:3c:79:71:a7:4a:ce:4b:d4:
6d:df:42:4d:12:7e:a1:5b:04:da:3d:67:e4:0f:f6:
72:99:00:7a:76:1d:27:c0:82:78:21:c4:b4:13:39:
b8:76:19:8c:3f:4a:c7:ed:fc:ca:1f:83:69:e4:69:
6f:6c:d3:41:fb:da:76:b1:f8:db:33:ea:4d:74:4f:
a6:69:e3:de:e2:c9:35:89:3d:03:88:5d:4d:5f:6d:
f4:1b:23:4f:a2:23:b9:07:d2:bb:79:5d:f1:7d:3b:
fd:eb:77:0e:8c:8a:43:40:ac:41:f7:12:32:b9:b2:
df:cc:26:22:82:90:b7:fe:a9:27:c2:51:d3:d9:2a:
6a:8f:07:56:df:83:5f:58:cf:61:84:6f:6b:30:f4:
57:da:e4:43:b3:f9:0e:d1:45:67:66:e3:46:e6:c2:
cf:79:0e:45:b9:00:eb:e2:59:a8:f9:b1:36:d8:db:
58:7f:d8:2e:f6:39:fe:94:98:a6:cc:cc:a9:9c:ce:
15:fc:d5:40:79:6d:71:2b:35:76:78:b0:c0:99:0f:
d6:74:90:c2:ae:86:bd:b0:9c:c3:01:16:3d:05:5e:
21:c6:30:94:57:35:89:bf:37:5b:0d:c7:8c:ca:30:
6d:08:ea:9b:6b:79:d9:ec:cd:49:24:b5:ed:b5:ec:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AE:E5:89:69:55:93:BA:CB:43:DD:36:98:47:CC:3E:F7:31:B5:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1019336F91711EDADB9E7194AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:42:5d:57:f3:88:f3:af:59:70:91:b5:e3:54:9c:96:74:36:
da:6a:4d:af:8e:7a:b8:c1:5a:a7:29:a6:1b:1c:20:98:fe:07:
9c:f4:bd:f5:29:89:b6:da:2a:62:b2:80:98:07:b0:27:5d:ad:
a7:8b:ec:dd:79:b0:ba:3d:57:dd:35:0e:93:34:cf:41:c5:b6:
2f:78:16:08:53:0d:63:1a:a3:bb:ae:bf:cb:f2:8b:2a:23:8b:
c9:bd:32:84:07:93:2f:c6:f3:19:21:77:90:7c:ca:e6:e3:a6:
ba:a2:71:e7:a2:0c:25:8f:a5:b4:9c:09:76:ff:24:a3:9b:60:
ad:2c:54:c0:4b:6f:ee:43:ed:5e:5c:5f:31:7c:61:bd:6e:96:
d6:93:a3:66:e0:6a:dd:25:15:3b:36:d9:56:bb:83:d8:16:1f:
a6:94:cf:bf:c1:9e:05:af:cf:22:8f:f9:c4:27:ff:7a:c3:29:
d2:f0:81:ee:f5:69:4a:20:f3:69:26:ed:bb:03:90:60:21:6a:
66:d3:c8:0c:f2:b1:20:a1:1a:ce:66:20:08:4d:cc:9d:9f:26:
ba:f5:4e:69:7e:f5:a3:ce:38:99:42:87:60:ab:13:7b:08:48:
f2:4e:85:01:0d:9d:54:ce:5c:17:0d:d1:30:fd:67:4c:eb:eb:
f0:6d:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:16 2024 by rpki-client on console-fra.rpki-client.org