Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D103E386D61811EEA448AE63775412E6.roa
File: D103E386D61811EEA448AE63775412E6.roa (raw, json)
Hash identifier: KhnjEOoev7zyjdl5TUXHbiyKxxlhFm1/fjKSa91OB+c=
Subject key identifier: 3B:D4:79:0D:3F:23:D2:14:BD:6C:68:53:4B:7F:81:CF:28:BC:7C:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 77D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D103E386D61811EEA448AE63775412E6.roa
Signing time: Wed 28 Feb 2024 09:07:37 +0000
ROA not before: Wed 28 Feb 2024 09:07:33 +0000
ROA not after: Wed 02 Oct 2024 09:07:33 +0000
asID: 32848
IP address blocks: 45.199.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30681 (0x77d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 09:07:33 2024 GMT
Not After : Oct 2 09:07:33 2024 GMT
Subject: CN=65def7d9-3598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:99:cb:51:28:f1:90:92:89:30:e2:cb:51:
c1:87:fd:6a:85:29:0a:b3:5f:a7:47:fc:72:f8:ee:
87:5c:bc:2b:ec:3e:13:2d:c4:9e:bb:39:d9:83:72:
bc:c6:3f:14:28:f7:69:2b:68:b6:ec:27:6d:ed:27:
bc:4f:86:7b:b1:46:44:14:71:53:19:f8:79:fc:a5:
52:dc:94:70:5c:ca:57:68:d7:1f:d5:37:f0:18:54:
48:2c:87:f7:5f:c8:c1:f9:d8:41:81:7b:e5:91:84:
4a:57:a5:83:e1:e8:7a:7e:17:d9:57:6d:ca:3c:15:
4e:7a:0f:e7:6c:78:a9:37:c0:e0:d7:04:10:7d:b5:
fd:c1:96:17:fe:e3:c3:29:c2:bd:c5:b8:6a:64:be:
61:26:53:7a:68:bd:9f:1b:4a:a0:50:9c:b5:c8:f2:
de:eb:93:ce:26:59:20:ef:32:12:d7:51:53:0a:84:
eb:47:ac:b9:6c:d8:2a:75:87:74:99:2f:4d:fc:6d:
28:9e:5e:c1:74:39:7c:cb:69:ef:ad:64:d6:f4:5e:
81:fb:2b:4b:e3:5c:2e:a8:34:20:76:d0:9a:0d:96:
73:46:b3:65:f7:4b:3c:1a:7b:aa:c9:c6:05:86:c7:
e2:ec:25:5f:8f:dd:6e:8c:07:46:5a:5f:60:c3:dc:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D4:79:0D:3F:23:D2:14:BD:6C:68:53:4B:7F:81:CF:28:BC:7C:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D103E386D61811EEA448AE63775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.175.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8a:49:fa:37:a1:34:4e:fa:43:47:ba:10:74:e6:57:7c:ca:
68:26:b2:7f:11:d3:3f:dc:c8:8a:9f:c7:da:9f:aa:ba:2b:81:
46:22:80:eb:47:58:1d:61:49:f9:b9:20:20:a6:12:57:46:0c:
c7:f1:ca:0d:e1:4a:57:d8:d9:8b:8a:06:32:2d:b4:e5:15:20:
2d:a9:12:b7:d4:44:b5:ed:e1:0c:58:59:28:d5:9b:78:69:16:
30:64:0e:af:ce:a7:b8:c5:98:bf:86:4c:04:af:07:59:89:6d:
8b:ca:4d:ad:4a:78:bd:3c:03:dd:e0:55:e2:ee:27:40:45:b1:
ba:81:2f:c8:80:48:19:1c:10:8e:cd:b3:dd:c8:be:81:fa:dc:
4e:73:45:e9:ed:a6:96:c5:ae:14:90:f8:23:75:bf:92:66:8a:
bf:4d:af:3f:28:a8:fc:d5:ba:5f:b1:6a:fe:a8:8b:bd:a3:5d:
94:e9:3b:1c:f3:7d:95:0c:29:8b:06:6d:86:cd:89:9c:e5:9b:
bc:64:3d:2b:bf:f5:22:1b:21:0e:fb:b9:c4:1d:42:b0:30:3c:
65:92:e4:37:ad:f0:ed:1f:90:d7:9c:21:a2:e0:b8:bd:c9:ca:
78:5d:23:c1:b9:84:ab:c5:16:81:d4:3e:d5:7d:88:09:a4:0b:
1f:99:f6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:17 2024 by rpki-client on console-fra.rpki-client.org