Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB7223E8037A11EFA6F59E41017001B1.roa
File: DB7223E8037A11EFA6F59E41017001B1.roa (raw, json)
Hash identifier: m8mIzTcJgmxkH6hy7Plx0GVZrpN8HaaMR8tc64tksRI=
Subject key identifier: 84:5E:37:F6:BE:4D:DB:71:CE:19:CE:65:2A:D9:25:34:DC:92:59:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 856A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB7223E8037A11EFA6F59E41017001B1.roa
Signing time: Fri 26 Apr 2024 03:12:47 +0000
ROA not before: Fri 26 Apr 2024 03:12:44 +0000
ROA not after: Wed 29 May 2024 03:12:44 +0000
asID: 149440
IP address blocks: 45.195.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34154 (0x856a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 03:12:44 2024 GMT
Not After : May 29 03:12:44 2024 GMT
Subject: CN=662b1baf-b54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b1:7f:53:53:1a:0f:e9:96:eb:f0:49:a2:2a:
a6:7e:eb:d0:25:a2:fc:c1:eb:71:51:a7:f3:f0:8a:
a2:0d:89:7b:eb:cd:e4:d0:07:94:e1:42:8a:93:52:
64:8d:bd:a8:de:dd:cf:a9:11:03:48:34:ff:51:75:
4d:e0:4f:92:ec:e3:5e:b1:ea:aa:1a:51:f3:d3:6a:
c0:2f:31:75:d9:38:6d:6d:ce:ca:14:71:a4:98:fa:
9c:46:d4:6a:ad:15:39:d5:27:b1:06:1f:a4:39:de:
44:00:8d:d1:4b:7a:24:6e:6d:ee:6d:da:bb:01:58:
fb:42:67:dd:06:89:b6:7a:4a:ea:ea:9e:86:f8:7c:
35:f1:73:d1:60:67:f6:7a:20:63:b8:70:72:c8:2a:
8d:ff:a6:12:af:3c:4b:20:f7:95:fb:e2:ee:c8:63:
b2:fd:a3:d5:ea:a2:03:e6:22:2f:ab:30:f2:5f:f2:
a2:73:73:b5:65:1b:d2:34:2a:af:1a:64:c4:d0:42:
2c:d9:d1:5f:3e:4e:ca:57:94:d4:30:6a:be:74:b8:
09:a9:68:04:a8:15:0b:e1:f7:09:04:26:84:4e:95:
9b:5f:e9:87:c1:1a:b2:ba:ca:4d:0e:ac:0e:f0:3b:
8b:f0:ff:07:d1:8f:93:cd:73:2c:b1:02:55:0a:a7:
c4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5E:37:F6:BE:4D:DB:71:CE:19:CE:65:2A:D9:25:34:DC:92:59:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB7223E8037A11EFA6F59E41017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.69.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9f:27:08:94:14:15:c9:68:ab:35:ba:ec:63:88:39:d5:9e:
5c:e6:9f:b3:da:6b:31:88:97:bd:e2:d5:70:80:f9:28:7f:cd:
79:e1:3f:4a:e4:a1:9b:b8:6c:d7:aa:a1:c6:46:73:3a:9f:03:
81:56:58:8f:b5:2b:88:30:e5:41:ef:de:ed:6b:da:1b:7f:16:
1b:fc:77:2d:be:6a:64:8c:ae:b7:51:ac:bd:3c:7f:2c:3c:bf:
98:41:04:c1:9d:f4:b0:1c:d4:f3:c6:8d:8d:85:3d:ef:70:c6:
e5:c1:b3:a3:5f:c6:c5:96:74:df:39:54:25:29:87:0b:3c:f3:
c6:1a:7e:6d:e9:fd:92:71:43:3c:df:a9:84:e6:b9:f7:4e:68:
27:ac:54:c6:51:11:93:d0:b7:49:3b:a9:84:f5:5d:05:1a:b7:
68:79:4f:dc:21:b4:44:40:e6:81:d6:a6:e7:bb:52:97:65:39:
6e:69:60:58:ad:72:77:76:6c:84:98:ef:e3:73:2e:24:1c:0c:
e8:a9:6b:7f:42:a5:5a:ae:b2:cf:c9:e6:69:ed:38:41:ed:b3:
85:6a:3a:6c:89:60:1d:62:63:d9:9b:93:d0:ce:03:75:3b:a9:
bb:d0:23:76:92:30:f4:97:cf:32:40:cc:c5:a9:64:cd:35:4e:
ad:9b:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:00:51 2024 by rpki-client on console-ams.rpki-client.org