Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCFC2F4A33A511EE8ED7C4794AD9E6FC.roa
File: FCFC2F4A33A511EE8ED7C4794AD9E6FC.roa (raw, json)
Hash identifier: VXCkBXqzNxvB8nrOTNFO/GTbtFc6CzYK1fBf5VxBml8=
Subject key identifier: EA:B6:19:C5:F8:A2:5D:35:58:E7:53:01:01:C5:02:EC:58:92:B7:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 337F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCFC2F4A33A511EE8ED7C4794AD9E6FC.roa
Signing time: Sat 05 Aug 2023 15:37:30 +0000
ROA not before: Sat 05 Aug 2023 15:37:26 +0000
ROA not after: Fri 24 May 2024 15:37:26 +0000
asID: 38901
IP address blocks: 45.201.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13183 (0x337f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 5 15:37:26 2023 GMT
Not After : May 24 15:37:26 2024 GMT
Subject: CN=64ce6cba-076f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:93:ec:b5:5f:79:58:92:d9:f5:23:21:93:
cf:9f:61:61:c3:e5:d3:88:66:eb:f4:24:11:3d:ce:
db:a4:00:d4:47:fb:3a:bb:2a:06:fd:41:2d:76:d7:
2c:95:1a:55:56:24:85:45:32:06:6d:00:06:60:9a:
3c:ec:b3:da:9d:a3:ba:7c:dd:a1:c9:24:4b:44:0d:
70:e0:73:b4:64:29:04:27:5a:b0:f0:51:82:06:df:
d6:dc:9f:32:93:d5:39:7b:8b:8f:06:d4:b8:b6:57:
25:46:63:4d:76:e0:ee:25:c5:0d:39:43:76:cc:fa:
22:ea:08:a6:3f:38:4d:7e:4c:b8:10:bd:a3:ee:79:
2c:8a:c9:76:06:34:2c:a6:4b:e3:4e:94:31:63:08:
41:86:e7:1a:cb:0a:5b:f8:b3:da:42:1e:d9:b9:23:
14:16:5e:c3:ef:86:bf:40:40:d1:dc:91:d5:2d:16:
47:fc:5d:be:f4:f9:d6:f0:60:8a:79:ea:01:6c:15:
41:95:b6:4c:a6:1d:d4:5f:17:04:77:0a:57:9b:e6:
72:75:52:36:c3:38:71:bc:a2:54:37:c8:46:df:2a:
23:79:43:4e:64:68:85:3d:60:6a:8b:49:94:c8:aa:
d4:05:87:23:af:b2:03:93:77:62:41:ab:9e:ed:f3:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B6:19:C5:F8:A2:5D:35:58:E7:53:01:01:C5:02:EC:58:92:B7:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCFC2F4A33A511EE8ED7C4794AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:73:c2:f2:1a:b2:3a:19:6b:d0:b2:64:92:bf:a7:ff:f9:ed:
43:57:f2:55:11:84:04:59:84:68:8b:98:34:bf:e6:f8:d4:16:
ae:d9:42:fd:7c:33:ba:b6:f8:3b:02:d3:bb:48:ef:02:22:4f:
4c:9b:73:9b:af:9f:81:2d:d5:b2:9f:9c:59:a5:68:75:30:47:
fd:aa:f3:2a:0c:b6:c0:28:99:0b:e4:f5:5d:28:51:68:7e:cb:
09:ac:63:87:55:e0:5d:90:26:80:85:5e:0b:cb:5e:d3:a3:74:
80:23:80:2a:f3:ac:21:7c:7b:5f:ef:69:83:20:f9:56:34:ad:
82:09:04:33:64:34:79:49:5b:f1:ec:70:3e:ff:d0:de:c7:8d:
03:76:3c:1a:37:7e:9c:d4:8c:b5:68:41:7e:98:16:84:c2:88:
99:da:de:c7:a9:02:b4:a8:86:13:69:b8:f3:51:ec:03:73:b9:
95:5d:32:7e:20:54:2c:fb:56:1d:b6:10:33:40:38:22:96:78:
23:82:39:e9:f3:6b:00:0f:90:83:a2:f8:ed:45:8b:54:b2:d4:
18:58:6c:ef:57:43:33:0d:d0:38:22:56:7c:e0:79:72:5c:49:
77:84:b0:ef:64:ed:97:c0:24:27:fb:d2:54:97:a2:46:e2:bd:
80:b7:79:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:05:01 2024 by rpki-client on console-ams.rpki-client.org