Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDE4B7E0385411EE968C971E4AD9E6FC.roa
File: DDE4B7E0385411EE968C971E4AD9E6FC.roa (raw, json)
Hash identifier: aZr5AYlijVqyziFCYahiWKy0Fiws7yIPOzWeaddzfBo=
Subject key identifier: AB:F4:83:7D:A3:B5:A0:73:35:78:07:83:75:70:86:0C:A3:AA:E9:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3481
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDE4B7E0385411EE968C971E4AD9E6FC.roa
Signing time: Fri 11 Aug 2023 14:39:25 +0000
ROA not before: Fri 11 Aug 2023 14:39:21 +0000
ROA not after: Thu 13 Jun 2024 14:39:21 +0000
asID: 139811
IP address blocks: 45.195.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13441 (0x3481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 11 14:39:21 2023 GMT
Not After : Jun 13 14:39:21 2024 GMT
Subject: CN=64d6481d-82d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:36:76:22:15:4d:2b:47:49:0f:28:4a:61:
28:d5:02:cb:f5:03:cb:df:16:a0:86:0e:6f:7b:fb:
75:9e:72:d3:bf:11:5f:a0:e8:90:4d:1c:ba:87:e5:
5e:64:5b:96:3f:7d:00:ee:06:dc:30:af:03:8d:b4:
77:2a:28:55:ac:f8:21:2d:80:37:e0:64:3c:00:53:
29:b8:19:af:bf:b4:5c:ae:a2:81:a7:7b:1c:c3:f8:
75:3f:73:16:45:63:44:98:b8:6c:39:53:6e:8c:53:
f2:5c:e2:46:0e:b3:e6:7c:0f:45:b9:11:24:7e:cc:
10:bd:5a:c5:ec:2b:e4:dd:6d:26:5a:72:ef:92:55:
78:2b:d2:b9:61:fa:ba:21:cc:e3:10:26:bf:fa:b0:
c0:99:b0:4a:57:16:a6:b1:4e:24:96:31:48:ea:86:
b1:ea:6b:e4:17:f8:45:8c:47:db:f2:9b:5f:0b:0d:
a6:75:f8:49:4b:af:88:d4:54:62:c5:c8:e8:08:fc:
8b:df:ff:c2:07:92:ce:2a:8e:6e:b4:49:df:95:3f:
64:65:07:4c:91:12:92:1e:31:05:7b:11:40:a3:3e:
ae:8d:19:ca:05:03:4d:8c:d4:a7:c4:15:cf:0b:42:
00:d9:6b:fc:c2:08:4f:6b:26:71:0d:1c:c1:b9:92:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F4:83:7D:A3:B5:A0:73:35:78:07:83:75:70:86:0C:A3:AA:E9:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDE4B7E0385411EE968C971E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:01:60:47:43:d6:32:ef:c0:15:2e:53:5a:d1:c6:65:71:66:
c5:9a:47:9f:6f:a9:53:e3:3a:ff:e1:0b:92:76:8c:be:76:13:
59:40:49:55:cc:b4:d7:ba:4a:e3:e8:0a:6f:42:bb:fc:57:c3:
12:f1:c4:18:92:03:56:22:69:2f:78:16:60:55:b5:6b:9e:01:
b1:cf:e4:b8:b4:44:04:be:cb:3a:15:b8:0b:c4:50:f6:df:17:
c7:c1:2a:f0:6a:92:1a:a7:b4:63:b9:8c:78:65:67:0d:e0:95:
59:3b:15:41:d2:76:b1:9e:94:00:e8:ac:64:03:cb:82:9a:b4:
d9:74:bb:52:f3:d7:6c:25:01:53:11:4d:4a:b8:3c:43:b1:3f:
a5:82:65:05:24:6e:b6:c5:e9:20:30:78:34:d7:6d:38:b8:5c:
1d:f4:44:b1:0e:02:37:09:46:2c:8b:ee:7e:fb:36:a0:ac:ac:
3c:b0:3a:88:b1:9b:fa:5b:68:5b:01:d2:09:e2:44:a0:b2:8d:
86:f6:f0:46:0d:32:37:31:ed:96:3a:35:af:af:56:e0:e8:81:
b1:0f:21:19:08:68:65:2c:fe:e6:e5:37:e1:da:20:c0:66:40:
12:a5:4d:1c:48:2e:c5:2c:5b:52:fb:30:e5:98:72:5f:aa:96:
ba:ef:b1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:52 2024 by rpki-client on console-ams.rpki-client.org