Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E749C7A6014611EFB45CAD4B017001B1.roa
File: E749C7A6014611EFB45CAD4B017001B1.roa (raw, json)
Hash identifier: 7Ln+kVOgES+wmocZOqrCb405s0DVsR39u6sdSyXn3bs=
Subject key identifier: 7A:E9:AA:B4:E6:3A:D0:2A:BB:2B:C0:1C:B0:83:15:9D:B2:73:06:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 842A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E749C7A6014611EFB45CAD4B017001B1.roa
Signing time: Tue 23 Apr 2024 07:55:51 +0000
ROA not before: Tue 23 Apr 2024 07:55:48 +0000
ROA not after: Sat 11 May 2024 07:55:48 +0000
asID: 9009
IP address blocks: 45.192.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33834 (0x842a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 07:55:48 2024 GMT
Not After : May 11 07:55:48 2024 GMT
Subject: CN=66276987-8043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:51:9c:6f:be:c6:e3:27:2a:5a:03:b4:7f:
9b:83:c1:6b:ee:72:8d:e4:7e:0a:6a:cd:80:73:0a:
48:4b:2c:40:5d:98:a4:9b:c3:1f:0a:b6:dc:13:8e:
08:d9:75:02:0e:09:44:5d:09:65:79:49:6a:62:f1:
ec:b5:7f:69:f7:03:c3:16:f5:d8:93:22:f8:75:9e:
84:72:8c:e6:ae:8e:6b:2d:9f:8a:0c:0a:8a:4b:0c:
a0:a6:89:52:62:d9:1f:9b:e5:d7:4d:53:b8:a0:26:
03:e2:ca:55:5a:16:1f:d2:ac:66:0c:4a:4b:de:af:
ab:57:89:95:29:89:bc:91:fb:c7:3a:05:b2:9e:f0:
87:46:04:9e:d7:63:bf:30:b1:8b:9c:75:da:2a:e6:
a3:b2:e6:d5:89:2b:ba:a2:f5:99:82:51:c0:a2:6c:
e2:c4:af:96:62:10:cf:c4:19:8d:8d:8e:94:da:ff:
c1:74:d1:ca:99:30:6d:f6:94:99:bd:8f:64:f9:49:
50:4f:4c:7a:5b:41:d2:89:28:b9:4f:8f:e7:54:8e:
ea:14:75:af:d4:25:ed:2a:dc:b0:3c:d8:a0:1c:6a:
2a:bd:6b:af:23:57:42:04:45:8b:c2:d5:fa:cb:d2:
03:2d:de:2a:25:2a:df:16:70:9f:25:37:af:c5:31:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E9:AA:B4:E6:3A:D0:2A:BB:2B:C0:1C:B0:83:15:9D:B2:73:06:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E749C7A6014611EFB45CAD4B017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.136.0/22
Signature Algorithm: sha256WithRSAEncryption
21:91:ac:c1:22:51:c2:f8:64:2e:ae:5e:ca:53:d8:df:34:31:
68:f3:f9:ff:98:57:60:fc:84:7a:cc:23:81:ae:f1:d0:bd:ca:
42:73:3a:3c:e3:f1:8b:18:d0:c4:db:b1:57:ba:cf:3e:98:16:
97:30:60:b3:c5:7e:f5:e9:ee:ba:52:cb:a8:a6:0b:bd:9f:6b:
7d:a8:ee:02:1e:25:d0:2b:62:e9:2e:6e:11:43:87:d5:ad:dd:
27:7f:46:9b:49:9c:4a:37:6a:23:5a:c0:fd:f2:50:c2:45:62:
46:fd:15:d0:f2:8a:a0:91:54:57:8e:b6:96:d9:2a:5a:9f:81:
61:7d:36:31:e2:af:22:cb:db:22:74:f5:f2:c1:21:be:05:cd:
3d:1e:7b:d0:12:87:f4:18:22:3b:d3:fa:71:3e:0d:60:d4:2e:
2a:c5:ca:eb:fc:47:49:1a:d8:ed:ce:a5:e9:b7:73:78:b4:7c:
db:af:a0:2e:0f:23:a4:38:21:99:6b:ae:9a:5d:3e:7d:9f:bb:
43:3a:08:b5:2b:54:ab:0d:c0:d7:56:43:43:df:48:5d:6c:4c:
9a:32:5a:86:39:7f:91:89:e8:56:97:27:ec:ca:4a:db:5a:23:
e5:d2:2b:80:aa:1c:28:ba:1c:ec:97:ea:cd:de:34:32:da:63:
ce:d6:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:05:00 2024 by rpki-client on console-ams.rpki-client.org