Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5CFFA2AB66911EEA565A7B4775412E6.roa
File: F5CFFA2AB66911EEA565A7B4775412E6.roa (raw, json)
Hash identifier: tguW42xh5CCK3Qp4iuImZ4Dgc/7oznQ1WKVz8nfC41I=
Subject key identifier: 5B:96:3E:C9:60:9B:31:52:49:90:EF:3A:B0:56:32:25:39:D9:62:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 6308
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5CFFA2AB66911EEA565A7B4775412E6.roa
Signing time: Fri 19 Jan 2024 01:27:51 +0000
ROA not before: Fri 19 Jan 2024 01:27:47 +0000
ROA not after: Thu 18 Jul 2024 01:27:47 +0000
asID: 138456
IP address blocks: 45.194.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25352 (0x6308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 19 01:27:47 2024 GMT
Not After : Jul 18 01:27:47 2024 GMT
Subject: CN=65a9d017-dd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e7:84:01:c1:d8:6e:86:32:02:85:87:f2:a5:
50:e8:e9:64:67:57:34:19:ca:f2:58:2a:3b:c1:8f:
52:29:cc:fe:14:51:7e:50:8e:ba:64:f3:8f:ad:7f:
1e:eb:f8:9f:b0:ba:5d:fe:96:6f:7e:b4:d2:63:cb:
a5:92:80:00:ea:0c:52:8c:fd:1b:23:23:b3:87:5a:
a5:94:2a:bc:79:35:47:74:ee:63:c7:a2:4a:0e:68:
93:5a:eb:2f:c2:59:89:0c:f5:40:dc:83:45:e8:b9:
0f:a8:23:b4:19:65:28:9d:da:0f:1e:33:f3:e7:57:
b9:60:3a:a8:61:33:b3:4f:22:9a:c1:dd:cf:ec:aa:
a5:91:ce:ac:43:82:21:f5:65:54:2e:04:fa:7a:3a:
89:c7:71:e2:7a:e8:4d:83:b3:96:70:49:8c:b3:f5:
44:4c:4b:90:87:42:5b:3d:26:21:93:77:30:04:bb:
bb:26:e7:e7:76:17:2d:53:06:c6:b4:4d:af:03:54:
ab:18:7c:28:24:17:66:09:a6:bc:80:5d:a4:59:28:
ed:a3:fe:49:74:a3:d2:67:e5:2c:b1:85:88:99:5b:
fc:34:5f:7a:b1:61:f3:df:c4:a1:05:0a:75:0b:3c:
b8:97:c0:96:44:43:93:04:89:f0:e9:38:5a:8f:a8:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:96:3E:C9:60:9B:31:52:49:90:EF:3A:B0:56:32:25:39:D9:62:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5CFFA2AB66911EEA565A7B4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:65:17:36:ca:10:fd:c5:1c:83:37:f6:5f:90:9a:e6:56:9b:
9b:ea:8e:3a:cd:01:d8:a3:0d:55:a3:0a:f9:20:eb:70:ab:15:
3d:bb:c8:67:9b:5d:60:c5:2c:2e:15:61:81:87:e3:a0:18:c7:
0f:e2:6d:a1:d9:ef:e0:a0:f3:1e:58:39:f5:7e:1a:00:18:48:
54:6b:2d:e4:82:83:e3:18:c6:da:53:5e:77:82:17:29:8f:a8:
6b:e8:fd:5b:d1:e3:1a:ef:1d:a8:5d:21:7b:ed:04:3f:4c:e2:
81:fb:ff:35:91:94:34:15:70:ef:e4:7b:2c:17:7e:f2:d6:d0:
b2:5a:06:4d:db:76:2b:08:96:4d:09:3e:ee:71:7d:f6:2c:33:
44:75:28:de:90:0f:9e:fd:ba:88:f1:9e:e1:83:69:72:19:35:
70:53:2f:37:f4:00:9a:39:53:34:91:10:d6:46:d0:ef:00:3c:
6f:d0:82:ab:20:e7:4a:28:25:05:ae:f1:83:7e:02:a1:d9:9a:
52:ec:83:b1:d5:e6:a2:bb:b1:50:ca:a6:0c:0d:32:64:28:fa:
bb:00:d6:1b:34:82:54:0d:00:27:0b:f5:f4:54:b7:e7:61:f8:
8a:ff:b7:26:f3:d2:95:63:65:8f:e2:3b:2b:0b:03:72:65:76:
d6:3b:7d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:05:00 2024 by rpki-client on console-ams.rpki-client.org