Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC51A858919611EE96054180D25BE465.roa
File: CC51A858919611EE96054180D25BE465.roa (raw, json)
Hash identifier: 9gjtcgfzJZbaAYHyUDjriOlVS/S4VOA/fVawPC+2pNQ=
Subject key identifier: 1F:95:EE:E7:26:94:94:C0:AD:A5:F1:CE:C1:63:C0:DD:63:4A:9E:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4C8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC51A858919611EE96054180D25BE465.roa
Signing time: Sun 03 Dec 2023 04:45:35 +0000
ROA not before: Thu 21 Dec 2023 04:45:31 +0000
ROA not after: Sun 23 Jun 2024 04:45:31 +0000
asID: 273135
IP address blocks: 45.195.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19599 (0x4c8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 21 04:45:31 2023 GMT
Not After : Jun 23 04:45:31 2024 GMT
Subject: CN=656c07ef-8c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:5b:ac:29:f2:c6:a9:fa:15:52:69:43:6f:
6a:0a:65:ee:50:80:cf:19:1a:66:ef:68:ab:cc:1b:
bb:94:9f:bb:9a:39:95:72:db:2c:7b:d2:59:0a:6f:
dc:77:95:d6:2c:95:6f:f6:a2:f5:08:03:85:5e:7f:
80:96:ce:be:ae:3e:28:c5:e0:dd:ca:16:62:e9:e2:
35:79:d6:76:5a:b6:93:3e:13:a6:69:a7:8b:21:49:
84:77:c1:f4:31:96:0b:cb:32:e7:ed:bd:55:e6:8a:
2e:35:6f:08:89:76:e7:9f:4b:7e:d9:1d:e2:71:f1:
b1:3f:82:e3:ef:4b:45:31:37:cd:56:19:5e:e1:5b:
04:21:1d:1d:78:3b:bd:26:73:f1:53:2a:ff:ca:a5:
44:91:e1:37:da:42:af:6c:08:e7:f1:cb:c5:84:b7:
79:07:f6:9f:86:09:47:44:48:c4:66:a4:19:a4:9e:
5d:2d:4a:65:75:77:43:d1:de:94:50:19:89:6b:5b:
0d:46:18:cf:e9:1d:59:b0:d0:cc:8f:d5:34:e7:ec:
56:af:0c:94:52:b4:4f:50:8c:9e:55:85:ac:c1:b3:
3a:18:52:f9:0e:89:51:a8:61:d6:6c:44:5a:fc:e5:
e3:39:c9:0b:97:b0:74:25:8c:86:7a:a2:f7:e6:05:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:95:EE:E7:26:94:94:C0:AD:A5:F1:CE:C1:63:C0:DD:63:4A:9E:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC51A858919611EE96054180D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.15.0/24
Signature Algorithm: sha256WithRSAEncryption
62:37:53:86:ca:51:cc:79:f8:bb:65:35:3c:63:c3:25:f9:91:
c1:9c:91:2f:18:d4:6b:d6:f2:bc:45:af:85:b1:d0:c7:3b:cc:
ff:85:d4:79:4f:73:11:10:98:8d:53:11:a6:34:ce:f4:86:d9:
a0:20:90:9c:33:fe:18:b2:f7:64:96:bd:ee:24:39:60:1a:d9:
a6:53:5d:a7:83:4d:85:a1:9c:c4:88:dd:78:7a:9c:f8:27:65:
08:d0:39:db:3b:8c:30:c0:c4:ac:9a:67:5b:b6:ae:37:1f:96:
fb:31:90:5c:c5:5d:ae:0a:95:b8:2f:4b:5a:9c:ea:9f:bd:63:
47:06:1a:99:cc:15:e2:06:1b:44:aa:c4:9f:8e:d0:6f:73:cd:
e8:63:57:44:1f:77:9b:dd:87:6f:65:d8:fb:62:fe:0e:62:73:
3b:da:b8:20:89:92:a8:7f:e0:be:54:fc:f7:f6:39:47:09:1d:
90:f3:34:f4:53:22:86:42:7f:8d:76:64:0c:fb:d7:3c:90:d1:
83:dc:70:5c:41:ce:d0:e0:cc:d7:84:65:ac:35:67:5a:45:b4:
ff:eb:77:92:ec:58:7e:91:c3:60:06:19:f2:44:c5:2b:bf:12:
1a:e6:8a:f7:fe:0a:05:16:ee:8b:89:62:31:3c:36:04:db:b0:
9c:b7:c9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:17 2024 by rpki-client on console-fra.rpki-client.org