Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F100037A0B5D11EF8BF07706017001B1.roa
File: F100037A0B5D11EF8BF07706017001B1.roa (raw, json)
Hash identifier: vT18RBeNovI+lM8Hau6yBAebwEvH3DnzVS2sTNSoFc4=
Subject key identifier: 13:BC:0C:09:8B:E0:5F:A6:49:C0:88:61:25:2C:AF:79:74:ED:1A:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 87B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F100037A0B5D11EF8BF07706017001B1.roa
Signing time: Mon 06 May 2024 04:05:58 +0000
ROA not before: Mon 06 May 2024 04:05:54 +0000
ROA not after: Sun 04 May 2025 04:05:54 +0000
asID: 137510
IP address blocks: 45.204.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34736 (0x87b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 04:05:54 2024 GMT
Not After : May 4 04:05:54 2025 GMT
Subject: CN=66385725-99e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:74:c7:25:42:06:c0:c9:a3:b6:17:46:ac:
4b:b8:2c:07:96:36:5f:0f:0f:7f:1f:96:b3:73:6e:
e5:ee:a9:ac:89:9a:64:d2:5e:13:a5:1b:da:03:f5:
03:43:e5:0c:8c:cb:17:4d:04:5d:be:70:bf:a8:03:
42:a2:88:19:18:18:ec:6a:45:de:b7:af:b1:c8:52:
f6:fb:e5:27:be:ad:f8:c4:75:b3:05:8a:fa:e1:b2:
59:96:ab:08:46:52:35:c2:7a:ce:fd:48:04:c6:86:
9e:44:b2:bc:1f:eb:5a:ea:45:28:aa:6c:ae:5f:eb:
c1:62:2e:2d:3b:11:3e:50:a1:db:63:59:3d:d6:9c:
22:6d:69:a1:c5:09:66:28:5f:e9:07:05:c0:91:7d:
33:08:5c:60:5e:8e:c8:4f:ad:92:18:12:63:d4:6e:
20:4d:59:dc:6a:d4:bf:a8:1f:79:ce:b4:42:81:34:
7c:a7:d2:80:28:eb:55:bb:a0:67:cd:39:7f:6e:6e:
14:99:e8:24:32:bd:2c:51:0e:8e:eb:a2:5d:65:8b:
a1:c4:63:cd:06:fd:c3:b5:97:3e:0d:23:07:eb:6f:
14:35:02:19:ed:84:01:67:6c:8b:b1:4b:1d:b2:9f:
cf:cc:75:d9:57:84:b1:e0:4d:bc:c3:f5:9e:66:de:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BC:0C:09:8B:E0:5F:A6:49:C0:88:61:25:2C:AF:79:74:ED:1A:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F100037A0B5D11EF8BF07706017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.68.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:f4:e8:61:36:06:2c:58:55:be:16:f5:b4:c0:fe:c0:10:b6:
04:a0:9a:1c:fe:7d:c9:d9:b7:72:f8:23:6d:3e:32:f5:e9:40:
88:1a:c4:84:59:09:09:6b:3d:3f:55:77:4b:8e:d5:28:fc:aa:
7c:9f:a6:e5:ac:b7:52:c5:f1:06:c6:65:d0:41:eb:fc:1b:77:
ea:60:dd:d5:c1:c8:f5:ed:1c:49:ae:ec:70:3a:23:75:c2:ce:
a1:54:90:26:05:c1:86:c5:61:94:db:cd:2a:53:25:70:e1:96:
c4:f5:74:46:85:ba:da:45:fa:84:ec:95:c3:4c:be:be:9c:fb:
53:9c:8a:0a:69:63:63:02:09:d0:83:d1:7c:66:0e:ba:cd:24:
84:4e:ae:a6:92:fe:27:0b:fb:8d:11:cb:4c:80:22:e5:1f:5e:
75:29:ac:0f:eb:0d:ba:80:cb:c6:68:89:a4:b5:2e:d8:95:07:
b9:af:ba:d0:41:31:03:3f:41:14:d9:f5:45:db:11:c5:56:b1:
48:35:2e:f8:dd:be:a3:95:56:ca:6a:60:76:22:19:32:6c:5b:
dc:78:30:9e:c8:0f:e7:52:98:53:22:02:c4:7d:d2:d0:d9:24:
04:0e:35:12:d2:57:c3:36:00:5f:16:24:9a:b3:76:d5:1b:81:
ea:4c:a8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:11 2024 by rpki-client on console-ams.rpki-client.org