Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA6F613208EC11EEB31A850E4AD9E6FC.roa
File: EA6F613208EC11EEB31A850E4AD9E6FC.roa (raw, json)
Hash identifier: CWZUCXUptkhGWU1pvbWYrNjpFtNymQOp3tKPNCGYa5Y=
Subject key identifier: FC:7D:F2:BD:6E:35:B5:3A:0F:9D:F2:50:E4:AA:1F:10:6F:6F:6B:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2AA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA6F613208EC11EEB31A850E4AD9E6FC.roa
Signing time: Mon 12 Jun 2023 06:46:53 +0000
ROA not before: Mon 12 Jun 2023 06:46:50 +0000
ROA not after: Sat 25 May 2024 06:46:50 +0000
asID: 131178
IP address blocks: 45.201.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10914 (0x2aa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 06:46:50 2023 GMT
Not After : May 25 06:46:50 2024 GMT
Subject: CN=6486bf5d-b235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:6a:5f:d3:86:9f:fe:36:47:c1:45:47:de:
3f:01:4a:5f:e8:89:65:d0:a9:f2:7b:b8:35:dc:d5:
5c:ff:d2:30:b6:1b:e9:30:5e:6c:58:65:62:3b:f8:
26:cf:67:3f:24:76:87:4b:4f:75:90:22:78:ed:55:
5a:55:c5:83:1a:8e:dd:8c:68:d5:b7:7d:e8:26:4c:
65:b0:69:3a:7b:20:b8:dd:39:b4:c9:f2:87:6a:fc:
17:ba:45:f9:ed:6a:d4:12:5d:9a:5c:91:62:54:34:
0d:97:b8:82:5a:ae:ea:6e:6c:6a:46:a5:a4:e9:25:
3c:b5:e5:11:06:69:f1:51:82:d7:ca:1b:f5:85:b3:
fc:86:03:46:e6:17:23:53:7e:12:82:04:b7:fd:f2:
a9:9d:20:73:29:23:3d:28:92:19:b1:60:97:66:3e:
da:33:a9:72:fa:a5:cb:dd:46:7f:f6:ed:74:ef:9d:
5a:aa:1b:77:7f:55:13:c1:3c:1d:f9:37:2e:88:5a:
11:a6:18:85:53:78:f5:18:1f:19:51:24:2e:da:fa:
7d:68:a9:c5:2b:00:c9:02:8d:a0:7d:e1:41:09:6d:
0e:0c:4b:14:ab:bf:85:00:06:4c:0a:71:e4:30:13:
91:e9:2f:df:96:59:2e:57:d8:bf:ae:c9:27:ec:34:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7D:F2:BD:6E:35:B5:3A:0F:9D:F2:50:E4:AA:1F:10:6F:6F:6B:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA6F613208EC11EEB31A850E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:55:4b:7f:4c:2d:40:90:22:18:7c:1a:1f:26:b4:b6:a1:f4:
bb:33:af:f7:56:c0:ab:ea:1d:f5:10:08:1f:fd:e2:9f:d6:04:
3e:a7:45:6d:0e:13:46:77:82:e3:cb:6b:3e:93:9a:d9:84:0e:
df:c6:c2:8d:08:d5:dc:19:b6:ad:fe:7a:cf:e4:65:5a:12:14:
6f:9b:b7:31:d0:61:a7:ba:2c:12:91:91:30:8b:19:c1:e8:18:
af:ba:a8:30:41:16:e8:33:cf:e8:65:4b:11:d8:cf:87:c5:bf:
cf:f6:7f:69:d3:7b:a0:80:1c:32:e6:79:0e:4f:7a:d6:cc:a3:
fc:c7:03:d2:3f:be:ab:07:2b:96:f7:7a:4f:c8:c4:92:e4:86:
ad:15:a2:7d:51:14:54:b1:53:ef:2e:33:bc:94:3b:fe:db:a6:
89:40:d4:fa:0f:c4:f7:42:5b:15:aa:61:93:4b:e3:ab:9c:7d:
b8:e1:08:2d:e3:85:03:74:b4:a4:8c:45:73:91:29:eb:d4:af:
d8:13:ff:26:3a:c4:42:95:a8:ee:4f:6a:81:18:27:75:0a:a2:
40:a9:26:9e:21:73:36:fc:b2:5d:97:ff:04:b4:77:ff:30:ff:
47:0e:73:e5:a2:06:d5:28:12:14:ca:3b:b1:61:0a:3c:44:51:
73:28:4b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:43:00 2024 by rpki-client on console-fra.rpki-client.org