Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C97494AA7EC811EEAA64930D4AD9E6FC.roa
File: C97494AA7EC811EEAA64930D4AD9E6FC.roa (raw, json)
Hash identifier: 6Idf/qvoCPlMO8EvyEvlAp8Gfd49D5gMVH6WtE+RjQ4=
Subject key identifier: 68:62:56:34:37:F2:26:C1:22:56:D7:64:5D:EE:A9:5E:51:AE:70:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4535
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C97494AA7EC811EEAA64930D4AD9E6FC.roa
Signing time: Thu 09 Nov 2023 06:25:34 +0000
ROA not before: Thu 09 Nov 2023 06:25:30 +0000
ROA not after: Thu 07 Nov 2024 06:25:30 +0000
asID: 133847
IP address blocks: 45.200.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17717 (0x4535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 06:25:30 2023 GMT
Not After : Nov 7 06:25:30 2024 GMT
Subject: CN=654c7b5d-0eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:38:ec:1f:7b:4d:c2:5d:da:1c:db:b2:4e:
64:19:94:5a:17:e0:31:10:66:77:34:d0:67:db:e3:
55:7f:56:c9:7a:05:df:99:01:e7:5d:9e:10:a8:f3:
71:0e:e5:c4:21:8a:af:b0:36:c3:68:17:aa:8c:f6:
2c:08:bf:ef:7f:25:02:a7:bd:0f:ba:68:33:09:1c:
fa:e9:8e:9c:26:a5:a0:cb:10:76:0b:7f:b3:94:62:
12:35:9b:74:65:e3:e7:8b:bd:ed:bb:cd:b3:c4:c4:
e3:7a:9a:9b:37:cb:5c:63:50:6e:90:91:48:91:38:
05:97:a8:fe:04:41:45:01:eb:eb:2d:b9:94:12:54:
98:66:a0:53:f2:26:48:04:fe:11:9c:a4:51:58:87:
bf:b3:41:b7:bb:79:d3:6a:e0:f2:ce:de:ee:3d:22:
ea:b0:57:1e:07:4d:84:8e:50:ac:bd:92:42:57:13:
db:6a:2f:55:8a:01:57:e5:ea:14:fb:22:d4:64:a7:
13:9b:6d:d6:b4:04:59:e6:0e:0f:8b:e9:fd:db:18:
93:8d:0d:90:dc:c1:1d:13:ac:96:42:8b:83:45:24:
21:f8:f3:01:79:82:98:e0:78:1e:90:14:54:59:6c:
78:36:4a:2a:67:5c:ed:58:48:ae:ac:70:c2:47:d2:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:62:56:34:37:F2:26:C1:22:56:D7:64:5D:EE:A9:5E:51:AE:70:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C97494AA7EC811EEAA64930D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:3e:33:15:39:cd:2a:65:81:09:f4:ca:ab:8a:4f:8e:97:e2:
1b:aa:27:f5:f2:bf:8b:b2:20:83:74:1c:f5:f7:72:44:03:37:
9c:4c:78:2b:6f:9d:1f:47:f0:1c:1d:0b:88:49:de:11:30:b9:
17:15:8b:ce:ea:c2:8e:2a:5d:6b:e8:71:00:ea:84:bc:fc:a8:
a8:4e:01:0c:5a:14:0a:c9:48:8e:ea:d9:f5:e3:af:fa:cf:7a:
e0:a1:db:39:c1:20:c9:0f:80:0e:a2:ab:b2:7f:fc:c1:14:94:
9d:24:50:ef:7c:63:25:da:fd:45:9b:69:38:37:0e:de:2b:b8:
1c:58:6c:4f:67:c3:0a:87:a4:7d:09:fa:c1:ee:9a:a2:73:fe:
6c:b1:d8:d1:3a:c2:8b:31:ed:4a:b6:d2:86:8d:9f:d2:8b:82:
cc:bd:04:04:4c:05:de:34:2f:d0:df:89:2c:77:72:66:8a:4b:
3b:8a:77:13:7d:4d:94:e8:c7:fc:f0:6a:09:b7:28:c7:a3:67:
7a:a3:c2:c8:3b:2e:0b:9a:26:8c:c8:70:c5:11:b8:3a:64:da:
bb:f2:9e:d4:38:5d:96:70:c4:c9:2b:79:37:29:4c:12:4a:bb:
88:28:f6:fb:10:96:d1:76:c9:4f:1d:ac:b8:79:07:dc:47:30:
0f:24:24:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:17 2024 by rpki-client on console-fra.rpki-client.org