Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2D068C6014611EFA0CA184B017001B1.roa
File: C2D068C6014611EFA0CA184B017001B1.roa (raw, json)
Hash identifier: drpuNpp0vpnlVP5shRG7OS4C+xc4Uh73jhuuDEw788o=
Subject key identifier: 5D:B4:21:6D:8A:5A:A3:C7:7B:75:21:60:88:33:ED:20:79:4E:41:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8428
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2D068C6014611EFA0CA184B017001B1.roa
Signing time: Tue 23 Apr 2024 07:54:50 +0000
ROA not before: Tue 23 Apr 2024 07:54:47 +0000
ROA not after: Sat 11 May 2024 07:54:47 +0000
asID: 9009
IP address blocks: 45.192.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33832 (0x8428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 07:54:47 2024 GMT
Not After : May 11 07:54:47 2024 GMT
Subject: CN=6627694a-6276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:c0:6e:08:24:50:2b:3d:09:8a:7f:e0:a3:
85:96:69:17:c2:e5:72:54:7a:c3:13:28:90:4b:c6:
f9:f6:91:5e:06:19:74:92:ec:8d:00:13:a3:93:d1:
20:d4:ee:da:6e:70:b2:bd:ca:ad:9a:a0:ab:84:01:
72:97:58:a8:81:09:09:be:52:60:2b:35:da:09:bf:
48:49:26:2d:9a:69:c2:89:df:c3:0b:d3:5f:f2:2c:
26:bb:24:6e:2d:ba:44:95:36:d4:0a:a0:b2:1b:22:
dd:13:00:84:6e:3b:a4:d9:38:25:20:5e:b9:d4:fb:
e5:8d:06:2d:22:77:53:89:7d:bf:b7:aa:c8:73:6c:
1a:51:c1:2e:1c:29:f7:d6:22:07:a2:5b:e1:3e:96:
7b:fb:71:b0:07:11:32:11:75:b4:b2:3c:42:3b:ac:
68:27:08:aa:47:4b:42:e8:54:a3:36:72:73:eb:96:
3d:96:a6:af:ef:5f:33:3d:41:18:48:31:e0:24:7d:
37:04:9c:f0:1f:78:a4:22:bd:99:16:93:13:a4:50:
c6:ca:20:2b:02:a7:8a:74:09:3b:46:0e:58:f4:a4:
b6:f6:d2:f4:44:ff:3a:5c:10:32:9c:bf:5e:1c:d3:
21:29:ea:cf:cc:09:58:39:1b:ea:76:18:d3:b5:d8:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B4:21:6D:8A:5A:A3:C7:7B:75:21:60:88:33:ED:20:79:4E:41:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2D068C6014611EFA0CA184B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.132.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:00:97:43:b7:4d:19:93:72:0a:9e:f5:59:eb:24:30:4c:fc:
4c:6a:67:8e:2a:8a:ea:b8:60:89:e1:ef:d7:79:b3:e4:13:af:
fe:08:20:a4:4b:8c:ea:99:17:de:40:cd:34:96:6f:93:25:b5:
13:63:42:a1:8a:bb:11:b9:24:b2:b8:33:78:ae:60:08:14:e5:
c0:33:27:69:00:d2:96:2a:c4:7a:8f:de:f4:99:60:93:35:63:
26:84:5e:0a:e3:c2:6e:c1:9f:31:55:c0:9f:a1:a9:a6:71:f1:
da:c3:b4:af:c3:62:5d:04:a4:2a:20:6a:1b:26:2d:af:c8:f7:
b5:2d:f9:f9:c3:a9:6a:d7:70:0e:90:30:0a:41:ad:76:92:64:
f3:1a:79:97:79:62:ab:ac:86:2e:0e:cb:75:41:7d:4a:ae:ea:
0c:6d:96:6b:dd:ff:97:44:8d:b4:1d:e5:b4:8d:73:c2:94:fd:
31:f5:b2:a6:e3:10:5b:a0:a9:62:44:d9:56:9f:e6:6a:b5:63:
92:e7:09:dd:30:33:7d:2d:dd:db:f7:49:6e:65:8c:fe:7f:e6:
69:66:30:cc:63:ca:84:28:a4:b2:f0:33:57:bc:55:64:58:25:
5e:a5:c4:d0:a0:f4:05:9f:a0:ee:d0:8b:72:0c:36:db:9b:62:
ae:26:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org