Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8847166DF8211EEA7E2F86F775412E6.roa
File: D8847166DF8211EEA7E2F86F775412E6.roa (raw, json)
Hash identifier: Oz+F5L+Sg6CgIE9mcmhpUSdMMC+WYMFbShUuA1BrMEA=
Subject key identifier: E0:C8:F5:9F:53:DB:F7:9E:D0:B5:F3:73:1B:A8:8E:B7:96:99:22:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7E11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8847166DF8211EEA7E2F86F775412E6.roa
Signing time: Mon 11 Mar 2024 08:39:17 +0000
ROA not before: Mon 11 Mar 2024 08:39:13 +0000
ROA not after: Sun 09 Mar 2025 08:39:13 +0000
asID: 140403
IP address blocks: 45.195.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32273 (0x7e11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 08:39:13 2024 GMT
Not After : Mar 9 08:39:13 2025 GMT
Subject: CN=65eec335-133b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:be:e6:0d:e2:bf:3a:e8:54:2a:c0:b2:1d:
53:24:9d:66:6d:70:61:2e:4b:f4:e0:fe:77:9f:55:
47:51:1a:4f:5d:de:ed:36:24:0e:bd:60:10:43:a6:
98:22:66:7e:ec:a9:dd:a2:1e:f1:a7:25:fd:61:84:
7c:fc:f9:24:78:1c:2a:7c:ba:99:97:65:21:77:5c:
d4:ac:82:cb:c2:82:b7:9e:22:65:65:c6:cb:29:b5:
7b:22:d9:9d:e3:d2:39:4e:77:e8:7c:bc:9e:4e:4d:
57:45:18:8a:c3:27:da:0f:55:93:8c:18:35:8e:ea:
bf:e6:ac:49:ca:4b:10:99:f2:e5:dd:fd:1d:7e:95:
01:3a:65:ce:d2:66:7c:e1:2b:99:c8:9b:ad:3e:4f:
89:72:67:6b:c1:5d:7e:35:da:24:97:a1:d3:d7:78:
b0:85:46:56:5d:c0:93:7c:33:7b:d8:9c:6d:37:a3:
44:dc:14:df:68:83:b3:5f:25:17:bc:15:a5:4f:7b:
4c:86:32:98:2a:28:23:54:24:1a:61:8c:1d:c6:ae:
c2:e3:ad:e7:7e:ea:1f:c1:02:fc:8c:cf:69:3e:11:
3d:d6:20:76:c1:8c:ab:10:7e:79:22:a9:f7:61:58:
42:2c:35:e5:58:76:29:88:85:f1:77:2e:63:7d:6a:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C8:F5:9F:53:DB:F7:9E:D0:B5:F3:73:1B:A8:8E:B7:96:99:22:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8847166DF8211EEA7E2F86F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:74:df:ad:d9:e3:59:0c:24:c8:e6:90:b8:35:61:90:e1:39:
3c:49:13:b5:82:00:6e:88:a6:fa:87:5a:e5:4e:5e:71:c4:7f:
aa:0c:ae:6c:71:6c:6f:65:32:57:67:d6:9b:3c:34:e9:12:8e:
57:18:26:be:e3:0a:e7:23:d6:71:2a:94:b8:15:f8:02:7e:7c:
37:da:cf:36:73:fc:ae:3d:c7:76:33:5f:bc:65:5b:0f:1b:12:
c6:e0:70:97:5a:57:63:e6:53:13:f7:88:66:9d:30:6e:37:78:
13:92:29:ae:67:7c:50:35:c9:5f:24:db:0b:36:b4:68:54:6d:
87:c3:a6:50:bd:80:76:8b:23:47:28:6b:0e:a0:95:c2:10:69:
bd:ea:6a:c9:57:ed:5f:be:19:1e:bb:4a:c0:10:f4:6b:12:75:
23:7b:94:24:fd:0a:27:6f:c8:ed:98:48:03:76:58:45:bb:06:
33:cc:a9:eb:14:0a:4f:f4:a4:44:3b:8b:92:10:09:76:59:52:
cf:47:11:40:f6:82:0b:13:c2:c6:bb:99:01:6d:d6:15:79:ee:
8a:25:c4:7c:f1:34:04:73:e9:0b:47:bc:47:e2:c9:7a:99:6d:
73:84:44:0c:25:78:7e:81:54:0f:ef:50:b5:c5:00:18:50:f9:
ef:08:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:51 2024 by rpki-client on console-ams.rpki-client.org