Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC972CD87EC711EE98A217894AD9E6FC.roa
File: DC972CD87EC711EE98A217894AD9E6FC.roa (raw, json)
Hash identifier: JtldHHm8Pqd/QX9ELiF/iyQdewfRf01fzSF7+PCUP7Q=
Subject key identifier: C5:F8:89:E3:9F:2F:7F:5D:8C:25:1B:01:23:23:24:F5:FA:B4:DC:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4529
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC972CD87EC711EE98A217894AD9E6FC.roa
Signing time: Thu 09 Nov 2023 06:18:56 +0000
ROA not before: Thu 09 Nov 2023 06:18:52 +0000
ROA not after: Thu 07 Nov 2024 06:18:52 +0000
asID: 133847
IP address blocks: 45.200.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17705 (0x4529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 06:18:52 2023 GMT
Not After : Nov 7 06:18:52 2024 GMT
Subject: CN=654c79d0-a61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:71:aa:a9:96:50:6f:2c:b7:fb:4c:00:d7:
38:99:d2:f1:cc:ea:30:36:2c:aa:3d:f5:41:51:11:
48:a7:da:16:11:c4:7b:ae:92:31:83:bd:81:ab:38:
98:29:b3:fe:64:8b:6d:c9:cf:e4:70:a8:8b:c5:32:
50:be:a3:fe:fc:22:0f:0d:29:89:c0:b4:a1:b6:c9:
3f:07:b1:e3:dd:9a:63:bc:0b:b9:86:dc:0f:26:3b:
86:fd:6d:29:ad:81:d2:89:62:73:03:17:d1:83:62:
17:a2:43:e1:2b:f7:f6:15:59:8d:6c:7d:8f:23:4b:
55:bd:d1:ad:76:d6:a9:ab:84:c2:8b:84:1c:3d:15:
f8:24:84:55:28:4f:c2:a0:a1:86:25:27:ef:45:3b:
93:d2:1d:84:8b:b1:ab:7f:5b:29:90:24:74:f8:16:
7d:1d:f8:03:5d:27:07:12:e1:75:ec:3c:6c:ff:8f:
e4:ee:35:fd:de:a9:9d:7f:1a:df:61:03:ba:c4:a5:
04:05:39:ba:fc:7d:3e:cd:7c:c6:f9:3a:0c:02:51:
3e:8c:7a:92:52:35:c9:74:33:71:31:65:4e:a4:d5:
2a:cf:c1:c1:4d:f1:f9:38:ce:65:6c:cf:ab:ae:b1:
4d:a7:75:74:ac:1a:f3:2d:d0:f1:4e:c5:8a:be:8d:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F8:89:E3:9F:2F:7F:5D:8C:25:1B:01:23:23:24:F5:FA:B4:DC:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC972CD87EC711EE98A217894AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.94.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:36:59:17:0f:bf:2b:77:df:c8:b9:e0:f7:ec:0a:e7:d4:62:
1c:32:5a:92:d4:be:84:ce:ee:74:f9:05:95:9c:6e:94:b1:e4:
9a:4a:d4:2c:51:8f:ac:e6:a6:d2:79:99:a5:b1:5c:c1:16:03:
07:79:f4:d3:84:5f:b4:40:d5:73:c4:1b:d2:8d:4d:73:f9:68:
cd:48:28:cd:68:9c:27:37:38:ac:0e:a6:bc:4f:27:41:e5:f1:
93:f4:b7:0e:e5:f1:e5:71:aa:c7:78:2b:c5:67:45:b6:0c:7b:
7d:55:60:eb:d3:6d:1c:fc:7b:8e:7c:1d:42:7e:af:3e:d8:f2:
4d:00:de:89:c6:0b:19:f2:97:71:bc:63:1d:a0:8f:88:83:fe:
68:7d:21:77:d7:57:12:cb:4a:ec:19:d2:18:f0:3e:e0:69:13:
e4:e3:1a:26:26:57:1b:4d:91:67:da:f9:8c:bd:12:fe:a8:8d:
55:5b:07:f9:52:ca:f9:74:a6:ae:bf:45:5e:b8:38:a2:44:6d:
85:20:93:37:6b:e9:1e:a1:44:ce:8b:49:a9:a8:30:3e:59:1d:
11:10:f4:3e:16:d4:37:15:9a:87:80:f4:84:a6:a8:c6:f9:81:
c0:c2:83:76:a4:f1:70:4b:8f:4f:88:31:43:e7:03:50:1d:56:
a9:8d:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:18 2024 by rpki-client on console-fra.rpki-client.org