Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF37E1633A311EEA30619734AD9E6FC.roa
File: CEF37E1633A311EEA30619734AD9E6FC.roa (raw, json)
Hash identifier: cDYy7S9QKaAQe2zf0lvPuiLvMuPuVwwAwW/yT2Wn550=
Subject key identifier: D7:20:76:C1:84:D3:F5:32:68:52:3B:F9:C9:F7:A5:1E:EA:6D:42:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 335F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF37E1633A311EEA30619734AD9E6FC.roa
Signing time: Sat 05 Aug 2023 15:21:54 +0000
ROA not before: Sat 05 Aug 2023 15:21:50 +0000
ROA not after: Fri 24 May 2024 15:21:50 +0000
asID: 38901
IP address blocks: 45.201.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13151 (0x335f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 5 15:21:50 2023 GMT
Not After : May 24 15:21:50 2024 GMT
Subject: CN=64ce6912-1bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:29:15:3f:ba:46:51:5e:8c:96:c6:72:c9:
0b:de:c8:3b:c2:f5:07:f8:72:fa:9b:b2:88:a1:d5:
5d:ca:e8:f3:fb:b3:c1:c1:5e:db:ce:c5:ca:98:24:
3a:c6:6b:41:32:76:b5:bb:40:ba:97:cc:86:62:4f:
48:db:29:a6:16:3a:d4:69:0f:57:38:56:68:31:04:
c5:cf:86:9f:e9:5f:91:8f:be:37:85:64:2b:36:6c:
6e:2c:02:db:09:eb:4e:a4:d0:d1:c7:99:1e:67:1a:
10:9d:99:8d:e2:d9:a9:d6:8b:90:df:96:0a:61:02:
7f:8b:cc:c8:a3:fe:eb:66:ee:a7:e2:9e:57:44:f3:
5d:64:b0:26:80:ee:20:87:f6:e3:76:d9:e5:af:05:
9d:fc:39:74:16:74:d4:34:39:76:e1:3b:69:2a:15:
f3:9d:ab:03:83:04:db:dd:d4:15:9e:a8:6a:d7:f3:
59:44:7b:eb:8e:70:9d:ce:50:fa:04:69:40:d3:04:
a9:e9:bf:7f:6c:bc:d8:03:f7:5f:60:f4:70:38:c3:
31:ea:43:c4:5a:7b:e6:f1:25:e5:64:fb:b6:d8:b7:
d8:5c:b4:36:c4:dd:d1:20:c7:0e:4b:1d:97:7e:d4:
22:d0:af:c4:85:8e:53:c8:0e:42:81:75:0f:eb:7b:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:20:76:C1:84:D3:F5:32:68:52:3B:F9:C9:F7:A5:1E:EA:6D:42:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF37E1633A311EEA30619734AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1a:82:d0:f3:3b:2d:f2:8d:45:5d:65:77:3a:66:eb:e5:9d:
d4:0b:9b:6c:42:fb:c4:5e:fb:7a:ff:43:be:9f:f6:ed:87:49:
51:f0:22:08:b5:b1:37:85:e4:2c:e8:59:80:c1:05:5b:30:d0:
aa:4d:14:47:5c:4f:6b:3a:cd:cc:86:15:57:20:b8:fd:e5:a1:
36:b7:92:f4:8c:38:d5:5e:17:79:0d:4e:aa:21:cf:bd:4f:0b:
8c:1e:34:18:f0:55:a1:5c:cc:ae:bb:18:72:7d:4a:ba:1c:03:
15:6e:f8:e9:02:91:25:5d:4c:68:94:d6:0b:22:fd:9d:65:e7:
f0:2b:ff:28:ef:3f:64:bf:38:f6:8b:1e:bc:41:4f:a6:51:59:
77:9c:15:a8:fe:0e:4b:78:ac:e6:ea:d1:b8:d0:60:73:54:99:
49:69:71:7a:dd:23:2f:05:cf:44:25:5f:e0:95:1a:5c:99:02:
6b:f4:54:da:61:cc:dd:79:85:59:1a:c1:de:84:17:7b:3d:35:
8c:f0:eb:4e:9b:52:33:44:dd:09:36:54:e2:07:03:f9:71:bf:
a0:fd:ae:b2:6b:dd:15:0a:0c:3b:1a:ed:73:37:90:96:74:70:
cc:10:93:85:40:1f:cb:8a:d7:ab:5d:a0:8f:d2:d3:22:67:d7:
b3:04:17:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:17 2024 by rpki-client on console-fra.rpki-client.org