Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAD6A43408EF11EE8276B0174AD9E6FC.roa
File: EAD6A43408EF11EE8276B0174AD9E6FC.roa (raw, json)
Hash identifier: ajJz2oyydtmqAuqZ4dUcGyGj+wMgfuZPFE8a4IAwGUI=
Subject key identifier: F4:C6:9A:52:66:C8:99:04:93:24:D9:BE:45:02:6C:5D:B6:80:17:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2AC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAD6A43408EF11EE8276B0174AD9E6FC.roa
Signing time: Mon 12 Jun 2023 07:08:23 +0000
ROA not before: Mon 12 Jun 2023 07:08:19 +0000
ROA not after: Sat 25 May 2024 07:08:19 +0000
asID: 131178
IP address blocks: 45.201.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10947 (0x2ac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 12 07:08:19 2023 GMT
Not After : May 25 07:08:19 2024 GMT
Subject: CN=6486c466-162a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:95:a0:2c:68:14:80:e0:ea:da:07:d4:0e:
f3:80:8f:10:eb:6b:bf:38:34:44:7f:0d:2f:a0:66:
47:a4:81:15:54:6c:aa:c9:88:d2:83:ef:e2:f1:f4:
05:79:4f:29:7d:70:97:6b:e1:b7:aa:b4:00:8a:d4:
ca:60:fc:d3:8e:fa:74:68:ed:97:9d:e8:c3:b0:e0:
e2:06:71:9b:ef:f8:c9:eb:3e:96:6a:e7:73:2c:cb:
76:5a:3b:17:c7:b1:42:60:22:5f:01:aa:c9:20:9e:
27:6e:36:cb:37:49:52:13:40:4a:d4:5b:bd:4e:76:
2b:6a:b6:1c:50:f8:df:45:eb:ab:f7:66:c0:38:a6:
f8:81:cd:5f:71:37:d1:1b:15:90:8c:8b:72:6c:66:
24:0f:78:3e:6b:02:29:e0:4d:41:4c:0e:c1:7a:bd:
98:3c:7d:ff:b6:2c:bb:e8:c4:52:1d:8f:6b:a8:5f:
24:8b:ed:a1:e8:2b:02:88:45:51:64:c4:77:f2:b1:
56:4c:0a:7f:bd:df:c0:c7:45:82:66:29:5e:ea:45:
bc:b4:d6:9b:8e:73:c2:a9:44:aa:86:74:2f:62:dc:
fc:f4:00:e5:0c:db:94:7f:95:bc:44:15:94:e6:cf:
a0:83:49:d6:a4:56:8b:9a:e1:a0:d2:f5:fd:03:77:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C6:9A:52:66:C8:99:04:93:24:D9:BE:45:02:6C:5D:B6:80:17:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAD6A43408EF11EE8276B0174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:11:e6:86:9b:33:20:67:a2:7a:cb:7d:cb:3b:fa:e8:f5:12:
2b:77:2a:c5:9c:24:55:68:7e:29:e7:e5:11:5b:a5:0d:77:00:
ab:c6:fd:df:3a:81:9d:80:41:8c:b3:67:de:f1:eb:86:60:32:
4c:6b:b0:c6:f2:86:f7:78:89:80:77:69:03:49:7a:38:f1:e6:
00:fa:c4:f4:8e:98:43:54:ca:2a:87:1f:84:8f:47:75:15:d1:
29:d7:56:c2:60:01:64:61:25:23:02:fb:ad:4d:f0:ee:e0:44:
a5:cd:a6:9d:b8:0b:97:ff:e2:f2:d8:2d:2d:40:d3:6e:aa:42:
7e:a3:33:76:61:9f:80:5a:de:92:40:48:1b:2a:ee:a8:98:96:
84:62:5a:be:94:c2:53:54:e2:0a:3a:7e:e0:e8:94:f7:31:23:
0a:2c:49:85:29:2f:64:b3:34:63:42:c1:74:9c:5d:3d:99:a0:
e1:b8:eb:b5:ea:55:21:28:31:e0:ac:61:25:37:f5:4b:c8:55:
b4:c2:71:fa:3c:73:0d:c7:b0:76:f1:93:f0:33:c1:a9:41:18:
ee:20:b2:b0:81:2e:6d:5a:5b:6d:cf:75:48:e5:f1:4b:1c:31:
b8:00:22:86:42:71:4f:e7:00:92:21:24:9f:ff:e7:e5:76:a0:
19:bf:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:25 2024 by rpki-client on console-ams.rpki-client.org