Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC5F6DA8156311EEB9AEAE604AD9E6FC.roa
File: CC5F6DA8156311EEB9AEAE604AD9E6FC.roa (raw, json)
Hash identifier: D3QKmS5gntH7RC+hwHF3PSKa+zNoqidFswjQxc3UUPw=
Subject key identifier: 12:40:39:71:9F:DA:F1:84:33:EA:72:5E:4A:D2:6B:52:42:E2:1F:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2D96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC5F6DA8156311EEB9AEAE604AD9E6FC.roa
Signing time: Wed 28 Jun 2023 03:28:07 +0000
ROA not before: Wed 28 Jun 2023 03:28:03 +0000
ROA not after: Sun 16 Jun 2024 03:28:03 +0000
asID: 270068
IP address blocks: 45.195.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11670 (0x2d96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 03:28:03 2023 GMT
Not After : Jun 16 03:28:03 2024 GMT
Subject: CN=649ba8c7-d7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0c:e9:9b:65:bd:bb:3b:c6:8c:f2:4e:68:53:
70:ff:7e:81:f2:6e:7f:18:c5:14:19:00:07:97:63:
7f:a0:6e:30:79:57:e7:00:19:32:38:5d:d2:c4:e0:
66:83:3d:02:83:1a:45:29:13:1d:bc:d2:f2:fd:95:
6e:0e:d0:51:35:c8:39:76:63:68:38:32:a9:14:94:
cc:e3:07:62:91:fa:fc:4d:ff:2c:77:8e:61:3c:b1:
97:c2:43:45:40:49:fc:aa:f4:32:21:0a:04:0d:82:
c7:fc:3c:33:97:0d:4d:b3:50:9d:d2:d9:39:60:c3:
5a:2e:94:12:7e:bd:fa:8f:74:f5:8a:71:84:e9:4a:
38:bc:0a:fe:86:a1:31:3c:8d:27:36:1e:f6:32:ee:
e9:94:07:ad:a9:56:bf:9c:0b:b6:46:99:8d:18:74:
2c:d8:4e:b7:6a:4c:ef:6a:53:c3:3c:cd:2c:d7:e8:
41:24:0f:4f:0a:bd:63:86:d7:a8:80:81:b1:9c:ed:
53:d3:04:77:45:28:02:54:16:49:1d:60:4c:2b:74:
ad:ac:d2:de:93:d4:5c:05:50:d2:91:f4:1c:fe:27:
00:b4:52:c1:cc:73:78:a0:93:b4:92:6e:3a:69:13:
1b:4d:fa:af:a4:4c:ab:81:e9:86:3a:e6:26:f8:2c:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:40:39:71:9F:DA:F1:84:33:EA:72:5E:4A:D2:6B:52:42:E2:1F:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC5F6DA8156311EEB9AEAE604AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.90.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:18:5f:2f:2b:dc:68:df:09:86:d3:56:1b:24:0e:24:78:64:
40:5b:25:09:07:83:b6:ed:16:70:ca:30:3f:d3:19:58:48:c2:
e0:e6:0d:24:8e:c9:e9:c7:49:60:b7:c0:f8:1f:b1:37:29:fd:
60:9d:d4:3f:0d:7c:2a:fb:0f:35:1e:51:57:b9:91:1e:a4:0e:
f7:3b:18:c2:41:89:0c:42:58:76:b6:f9:34:2d:a8:18:e3:16:
12:59:86:0d:46:8c:22:93:6f:3d:64:f7:ab:2b:ac:e2:37:9b:
6a:58:f7:99:4c:8d:56:8e:f7:05:8b:44:f8:85:3c:23:de:62:
fa:ba:7d:49:40:25:52:b8:ff:da:75:f0:6a:f0:95:54:44:54:
f2:31:cf:97:fb:2a:f1:ec:5f:60:e4:02:b4:45:5a:5c:e8:9b:
b4:51:39:cf:06:c6:ab:c7:53:5b:ac:42:a1:7c:32:5f:1f:d3:
70:2d:58:e1:f5:c3:fe:b6:a0:fc:37:16:3a:57:44:bb:fc:2c:
ec:a3:c6:9e:a0:b1:6e:2c:6e:db:b4:e9:01:4e:32:9f:8f:8f:
d3:16:8f:95:ca:2e:68:5f:59:55:fe:e1:8a:b4:4f:8b:d1:46:
cc:95:92:7e:02:26:d7:db:0d:15:22:07:bc:b3:dd:8c:0c:b7:
65:21:2f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:58 2024 by rpki-client on console-ams.rpki-client.org