Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5337FF2A38F11EEAE692616D25BE465.roa
File: F5337FF2A38F11EEAE692616D25BE465.roa (raw, json)
Hash identifier: AEJVDUIjuHa8CvWw40QChq4+0WjFLhNE5+ktePpf2fw=
Subject key identifier: 66:02:26:BA:24:41:C7:5A:34:12:4C:3B:C1:95:F8:DC:AA:A2:9D:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5933
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5337FF2A38F11EEAE692616D25BE465.roa
Signing time: Tue 26 Dec 2023 01:41:58 +0000
ROA not before: Tue 26 Dec 2023 01:41:55 +0000
ROA not after: Wed 02 Oct 2024 01:41:55 +0000
asID: 393294
IP address blocks: 45.199.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 May 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22835 (0x5933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 26 01:41:55 2023 GMT
Not After : Oct 2 01:41:55 2024 GMT
Subject: CN=658a2f66-09a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:b4:76:3a:a3:17:10:63:24:b6:5c:0d:b7:
aa:4b:a3:eb:a2:d7:d7:0d:6e:47:1c:28:92:a5:4c:
28:87:3e:29:9e:4d:7d:b6:a4:74:66:26:9b:c8:72:
b8:f3:07:45:91:34:67:ee:8a:13:13:aa:2d:84:bc:
23:e8:c8:4f:17:18:a5:12:75:81:59:5b:0d:2c:98:
ff:b4:eb:e0:01:d8:e9:61:98:af:a6:dd:de:37:ee:
26:52:3e:b7:76:99:60:dd:42:fd:bd:45:80:d8:37:
5b:29:71:dd:b5:ec:ad:41:ab:d7:be:e0:58:b7:2d:
32:a0:57:a6:7f:27:ae:2d:dd:c4:c2:6c:83:1c:25:
da:64:e0:aa:57:25:85:ed:44:25:6a:a0:16:61:96:
ee:58:f6:5e:c8:46:54:cc:cc:68:91:d4:fe:2a:f1:
e6:50:d2:c8:33:39:3f:6d:dd:7b:ce:54:b4:8a:3e:
ab:bb:4b:8d:ad:0d:db:fa:80:a9:06:6a:d3:1c:22:
c7:63:0b:bf:b5:9a:14:87:46:26:66:0f:40:5c:3c:
a6:20:46:9a:c3:96:d7:47:ac:a7:63:17:c4:7b:94:
e3:a3:2d:89:d8:09:12:66:d9:f9:11:51:78:d7:b7:
3d:d7:37:91:ca:f5:38:0e:d7:81:5b:68:f1:82:6a:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:02:26:BA:24:41:C7:5A:34:12:4C:3B:C1:95:F8:DC:AA:A2:9D:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5337FF2A38F11EEAE692616D25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:df:ad:c7:32:46:ab:27:87:75:72:e6:44:90:b2:53:dc:a4:
a5:4f:62:97:10:54:d8:ce:c5:4e:77:5e:5c:da:83:c0:77:2c:
8f:62:79:c0:4f:fe:cc:ab:40:92:c6:1d:f1:78:c8:04:7f:76:
05:0d:66:43:ac:94:85:77:dd:5d:00:a2:8a:ee:2b:ff:53:5c:
cb:7e:87:09:bc:c0:5d:0e:a1:b3:a9:99:1a:4e:5f:b9:b3:38:
5d:00:10:aa:61:ba:f9:bf:dc:3e:45:b2:ff:d0:8f:b8:c6:bf:
ff:57:59:7b:e5:c7:6c:b9:23:06:96:f5:e7:fc:e6:04:57:23:
b9:db:8a:ec:01:8a:74:60:35:f3:42:f9:8a:cd:59:c3:3a:59:
f4:f1:1a:15:96:33:76:db:30:e7:dd:0f:4d:d2:fb:59:52:25:
b3:ce:88:1e:76:12:12:2e:40:9e:86:40:b6:97:5e:43:2c:e7:
82:0d:cf:95:92:76:f9:b1:fd:f6:aa:53:2f:97:00:18:36:fc:
8d:b9:b6:19:f6:5a:26:1e:69:54:19:35:4d:23:13:72:f2:1b:
3c:07:9d:e3:fa:3c:7f:fb:53:0c:82:b6:8b:9f:60:66:29:83:
88:c7:b7:43:20:1d:64:68:cd:f9:ab:56:64:36:78:cd:b1:c9:
f2:85:bc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:14 2024 by rpki-client on console-ams.rpki-client.org