Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E549D7747EBB11EE842104644AD9E6FC.roa
File: E549D7747EBB11EE842104644AD9E6FC.roa (raw, json)
Hash identifier: PEW/qTJ/AbvXYte35o/TQMHbry/Kdi8XYzs3+5eVcPg=
Subject key identifier: E8:68:D2:C8:DD:63:0C:6C:CD:72:C4:46:28:1B:77:20:99:11:80:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 44E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E549D7747EBB11EE842104644AD9E6FC.roa
Signing time: Thu 09 Nov 2023 04:53:17 +0000
ROA not before: Thu 09 Nov 2023 04:53:13 +0000
ROA not after: Thu 08 Aug 2024 04:53:13 +0000
asID: 133861
IP address blocks: 45.204.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17637 (0x44e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 04:53:13 2023 GMT
Not After : Aug 8 04:53:13 2024 GMT
Subject: CN=654c65bc-9678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:76:88:64:d9:66:70:91:33:cf:4e:26:22:
3f:bb:40:a3:34:73:f1:29:5f:e9:d6:57:a3:67:2b:
80:5c:db:69:ae:e9:33:ac:37:66:8d:77:f7:62:9a:
e4:f8:74:fc:c9:79:44:d8:cc:32:15:f1:1f:82:2a:
b3:21:ae:1b:00:91:52:4a:d1:85:20:f1:ed:7a:0d:
5e:7f:31:cb:1d:61:e7:70:0d:e0:22:fa:70:f3:aa:
35:b2:03:84:2f:46:31:48:20:71:f4:e1:95:86:4f:
db:d3:10:b8:5a:e7:82:18:bf:2c:bf:6d:e4:77:02:
06:49:96:98:17:2b:a2:8d:ea:9f:99:3b:51:31:93:
41:ed:30:2f:85:5a:0b:e3:ff:8b:a1:1e:22:20:cf:
bb:e9:ec:8f:24:8f:b3:f3:71:0a:69:80:c7:a7:48:
cd:41:54:7a:4d:a9:ee:d3:dd:c1:d0:f0:8f:bb:64:
a3:8f:8e:9a:7e:0a:6a:8d:a4:71:ae:82:78:f3:b8:
27:c1:67:66:e7:99:a6:89:7e:c8:02:42:f5:74:7b:
23:49:f4:59:76:0f:c3:d6:54:3e:3f:84:00:7e:3d:
86:bd:96:76:e0:27:43:d2:d5:f9:26:b9:f7:4a:6e:
ee:15:69:d5:b3:0a:16:43:88:b6:16:55:73:22:8e:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:D2:C8:DD:63:0C:6C:CD:72:C4:46:28:1B:77:20:99:11:80:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E549D7747EBB11EE842104644AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.3.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1a:2e:aa:0a:88:69:da:33:49:59:4b:e6:89:1e:55:6d:50:
9b:f5:5a:ea:df:20:25:4e:cc:91:ab:c8:22:76:c3:c1:0e:2d:
2b:c6:26:ce:24:2a:17:f7:f2:66:81:a1:2a:d3:05:42:0f:70:
c0:01:10:71:69:10:16:9f:96:83:48:a3:93:9d:f9:37:da:38:
cc:2d:01:61:fd:9a:4f:35:3c:f1:e1:b7:1c:e0:63:6e:71:b1:
f1:89:42:a3:db:11:a4:4f:4d:98:ec:80:de:99:d3:5f:21:70:
2b:19:a3:5b:79:cf:5b:23:b2:94:2c:35:f3:46:a3:87:ba:03:
25:e3:21:f4:9c:9a:d6:ab:e1:e6:b5:87:8e:a0:2c:6b:8a:cf:
7d:c5:f9:cd:da:7e:54:30:5c:a6:1e:50:fc:14:95:81:ba:72:
08:9c:62:39:70:bb:03:9e:c5:c2:da:7b:00:cf:fa:2e:2f:43:
60:ac:70:07:e2:2b:32:d6:11:b5:97:26:d4:e0:a6:ad:08:c7:
ed:30:30:ab:3d:94:e4:bf:1a:f9:fd:2c:f7:c7:14:8c:95:2d:
38:40:cc:2f:81:ba:6b:88:bc:92:ea:6e:1b:e8:b1:70:3e:81:
7a:6b:1a:b2:9d:1b:b8:86:e4:e4:b0:36:d3:e5:dc:11:d0:fe:
5e:19:aa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:05:00 2024 by rpki-client on console-ams.rpki-client.org