Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1E6A4B48DCF11EE9F763B694AD9E6FC.roa
File: D1E6A4B48DCF11EE9F763B694AD9E6FC.roa (raw, json)
Hash identifier: I0a0eFR1bg9/AkzapLAyY1TH4wF1cdXJ1zQR3oYdTuI=
Subject key identifier: 92:10:04:34:7D:AF:13:B6:87:AB:23:17:FB:04:33:15:AD:6D:87:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4C4D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1E6A4B48DCF11EE9F763B694AD9E6FC.roa
Signing time: Tue 28 Nov 2023 09:23:41 +0000
ROA not before: Sat 03 Feb 2024 09:23:38 +0000
ROA not after: Thu 08 Aug 2024 09:23:38 +0000
asID: 133199
IP address blocks: 45.207.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19533 (0x4c4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 3 09:23:38 2024 GMT
Not After : Aug 8 09:23:38 2024 GMT
Subject: CN=6565b19d-c0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:7c:f4:6f:b0:9d:02:0d:29:2c:e7:1d:91:
fb:b3:89:74:40:a9:65:91:e8:6c:b6:d2:f2:d1:77:
e5:31:a3:ad:c1:de:91:da:06:35:16:82:90:5f:d3:
52:fb:f6:29:ae:50:8e:ec:cc:7a:17:61:55:70:6c:
c2:77:42:67:b7:e2:04:72:93:7f:8f:94:02:bd:8c:
90:cd:09:ed:19:80:67:64:f2:90:e5:ac:88:b8:e7:
5f:4c:35:8a:d1:66:94:93:9d:e0:86:75:25:61:24:
52:f5:8b:32:23:02:18:05:f6:29:e1:13:30:f7:7c:
9d:f8:60:35:d6:bd:31:8d:8b:31:09:0b:44:00:ea:
ed:b3:c0:dd:8e:c8:0f:db:00:64:d9:3b:37:93:fa:
25:dc:6f:48:2b:7d:f1:ef:36:f6:78:18:4d:00:0c:
53:f4:74:73:0b:3c:b0:f6:ff:1d:9e:f8:06:77:56:
05:e5:1c:8b:c9:14:f4:fb:19:01:1f:db:ce:65:f0:
06:37:48:5b:64:fe:be:fe:08:4b:f6:a8:34:47:94:
f1:29:cf:06:48:61:19:59:ec:9f:a0:62:db:d0:cb:
56:9f:ca:25:cb:eb:cf:38:db:81:f4:cf:bb:14:92:
93:5f:21:e0:c1:8f:1b:6a:4a:00:79:c9:e5:01:9b:
2a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:10:04:34:7D:AF:13:B6:87:AB:23:17:FB:04:33:15:AD:6D:87:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1E6A4B48DCF11EE9F763B694AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.33.0/24
Signature Algorithm: sha256WithRSAEncryption
58:29:bc:2b:e5:6d:04:3e:64:43:93:43:7b:8e:17:f7:7c:1c:
3e:30:31:9f:3b:f7:7f:1c:a8:d1:7a:22:d9:ee:2e:cd:9c:b1:
fc:3a:48:87:50:29:26:be:3e:3d:7c:e5:85:0b:e6:15:a8:2f:
d7:bf:0a:33:97:f0:5e:91:d2:2f:31:ec:e1:32:83:8b:eb:72:
e5:08:b8:2e:0f:7a:1c:be:12:95:f9:ac:76:bf:a6:09:d3:b4:
13:e0:6a:5a:1c:0b:91:08:db:05:f0:11:b3:e3:ba:1d:07:aa:
0a:f3:ab:93:e7:f0:2f:f5:6b:a3:7c:e0:d9:e0:9e:e3:bd:9a:
c4:58:92:b5:68:1e:76:f5:b7:50:42:a7:d4:1e:f8:f2:01:bc:
90:bb:7a:41:33:17:92:e2:c0:d5:fc:e4:56:b1:5f:af:b6:11:
fb:be:b9:ff:c8:4e:c5:28:7a:b6:cb:2d:1c:0c:5a:8d:2d:a4:
4a:6c:55:7c:7e:a7:c2:34:a1:cb:f0:d8:6e:0b:d8:31:0c:14:
e3:bc:f5:ac:a9:4c:d1:61:e0:c4:16:db:44:d5:b7:f1:17:cc:
3c:57:9e:3c:c6:67:e8:32:ae:92:b7:43:78:7a:09:95:20:a8:
11:a8:a5:57:3a:20:ac:2a:42:fb:67:7a:07:b6:3e:14:b5:6c:
c2:4d:cd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:17 2024 by rpki-client on console-fra.rpki-client.org