Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3D605F4C8DD11EE8CAC5FB0775412E6.roa
File: E3D605F4C8DD11EE8CAC5FB0775412E6.roa (raw, json)
Hash identifier: rZjpujpA6z6LdU5hcZuI/jKu8W2EWpwxYOzHC1nIc4Y=
Subject key identifier: E7:80:22:B6:D8:B6:33:0C:F5:BC:E2:C8:8E:A7:15:1C:84:FD:07:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 6F2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3D605F4C8DD11EE8CAC5FB0775412E6.roa
Signing time: Sun 11 Feb 2024 13:03:03 +0000
ROA not before: Sun 11 Feb 2024 13:03:00 +0000
ROA not after: Thu 13 Feb 2025 13:03:00 +0000
asID: 28458
IP address blocks: 45.195.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28458 (0x6f2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 13:03:00 2024 GMT
Not After : Feb 13 13:03:00 2025 GMT
Subject: CN=65c8c587-c95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:dc:3e:10:a5:9c:e6:d1:e1:39:bb:5d:eb:
37:67:ff:31:6c:04:f8:f1:aa:15:8d:cb:d3:c9:6e:
a9:40:20:28:36:7a:ff:85:12:2c:44:4a:48:2e:ca:
6e:42:d3:56:f3:ba:76:79:2a:c3:a6:71:46:00:30:
1a:f7:cd:93:19:b8:cd:66:e6:b7:43:8f:57:fc:7c:
f6:da:5b:74:21:36:c4:53:00:74:37:20:ba:9e:7f:
4f:ed:d4:22:a4:4c:ab:0d:d2:8f:21:ce:5a:1b:5f:
6b:ed:77:98:bc:e8:58:96:bf:64:95:58:f6:2a:a0:
4c:0d:5a:7a:45:cf:43:b1:d2:e4:ab:66:05:ea:13:
a1:c8:6d:42:c3:1f:97:ef:57:f7:c8:65:4c:aa:89:
81:ee:4a:9c:d6:fe:55:88:73:73:19:75:19:77:67:
76:98:59:0d:c8:e7:86:22:8c:85:ab:7f:24:d9:fc:
2a:8f:1f:05:58:90:6f:11:24:8d:c1:f6:b1:24:18:
cb:5f:cd:f7:9f:d4:1a:65:22:69:5c:3e:76:06:5b:
23:a2:02:dd:f5:59:7b:af:05:8c:1d:54:17:04:ec:
4d:66:d0:64:8b:76:df:83:16:b1:64:b7:78:48:10:
de:83:e2:7c:2d:cb:58:42:21:8a:cc:80:aa:79:39:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:80:22:B6:D8:B6:33:0C:F5:BC:E2:C8:8E:A7:15:1C:84:FD:07:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3D605F4C8DD11EE8CAC5FB0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4b:73:14:4f:9b:22:dd:8e:65:e7:83:05:da:37:06:6c:dc:
70:cb:9b:ca:53:9d:c5:ef:63:50:6b:3d:54:8d:0b:aa:86:a7:
f1:0a:af:d6:f2:3b:dd:34:0b:49:09:03:2d:da:03:d0:0b:9d:
cc:b1:a7:26:11:8b:17:d9:ef:c5:55:a6:c8:09:88:6b:64:64:
57:75:a9:75:66:9d:ff:08:ac:ef:57:88:0b:62:7f:f5:ac:5c:
16:5f:6d:08:99:81:99:51:8a:40:97:48:de:89:4b:5b:d3:6a:
21:5b:64:6f:1f:62:24:aa:13:1d:1c:ef:63:9b:9f:cf:09:95:
68:ea:37:3b:d9:92:bf:d3:08:37:53:38:99:a4:1c:89:b2:96:
da:63:67:71:06:b4:ed:61:d5:47:0c:27:36:1e:d6:4a:15:b3:
42:9d:f1:71:bb:94:5c:90:39:ae:e1:45:b7:38:bb:fe:ff:4c:
9c:78:13:af:be:28:a1:bb:a6:ea:b0:68:39:62:a5:66:dc:78:
50:7e:2b:2b:52:6f:81:a5:93:13:ac:c7:cf:5b:5c:0a:08:89:
5e:f9:59:38:db:ff:62:08:29:d6:0b:dd:af:ec:7d:23:c3:0e:
51:48:b8:c1:e8:13:98:b4:6f:8a:54:db:a3:ad:34:87:41:91:
ee:09:2c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:45:00 2024 by rpki-client on console-fra.rpki-client.org