Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD308454F0C711EE89C90DA8775412E6.roa
File: FD308454F0C711EE89C90DA8775412E6.roa (raw, json)
Hash identifier: 48sx5M8Wg0ctP+Rl77IBXeSmsBngKXnTTDl3fgX+YFY=
Subject key identifier: 02:9E:08:74:D8:3A:C9:B0:BA:49:D2:73:B8:27:B4:53:1B:CB:5C:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 816A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD308454F0C711EE89C90DA8775412E6.roa
Signing time: Tue 02 Apr 2024 08:07:03 +0000
ROA not before: Tue 02 Apr 2024 08:07:00 +0000
ROA not after: Mon 29 Apr 2024 08:07:00 +0000
asID: 139646
IP address blocks: 45.201.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 08:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33130 (0x816a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 08:07:00 2024 GMT
Not After : Apr 29 08:07:00 2024 GMT
Subject: CN=660bbca7-ab0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:27:f3:48:36:86:7b:f3:a5:20:68:53:36:e0:
b0:79:b4:9e:39:3b:f7:e1:1f:96:a6:49:25:97:ff:
b1:f6:89:1d:4c:5b:b6:d6:42:04:9d:b2:ea:ed:4a:
ef:d9:13:8e:16:b0:1f:94:37:a8:af:49:34:3d:3e:
61:1a:ce:6a:8f:5a:98:66:68:9c:f0:95:31:4f:ca:
be:a4:45:71:1d:08:34:24:92:6f:6b:78:6f:e3:66:
8a:cd:b6:71:cb:5b:8a:c6:38:58:6d:ba:bc:14:18:
0d:ef:e6:e3:79:9a:05:32:31:f4:ca:3f:cd:24:4d:
63:d9:ef:f3:6c:56:2c:ac:4a:26:3d:7b:80:bf:b5:
15:c5:7a:67:14:1e:82:07:3b:98:ea:ef:6d:c1:be:
58:23:e7:ee:8d:43:4d:f4:35:34:fe:bf:9f:83:b7:
b3:bb:fa:2b:bb:49:20:54:c8:59:8d:01:59:92:78:
1e:17:f2:56:ba:de:9d:a8:eb:4c:c2:a4:4f:16:b3:
e5:f4:ef:17:53:55:08:44:4e:06:74:16:c7:d2:6b:
59:f0:25:20:ae:86:b9:59:7e:73:41:12:84:d1:ba:
e8:e6:7d:81:f6:14:67:55:1f:4e:31:fc:03:43:23:
5e:12:00:ca:5a:0d:12:b6:1f:85:11:9b:18:c2:77:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9E:08:74:D8:3A:C9:B0:BA:49:D2:73:B8:27:B4:53:1B:CB:5C:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD308454F0C711EE89C90DA8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.230.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:70:55:92:ae:24:3b:88:50:5b:c7:17:7f:d0:09:04:d8:80:
0c:51:2b:11:14:82:a6:bf:73:ab:07:91:6d:5e:5f:62:39:0a:
08:76:33:80:11:f8:3e:84:9c:14:3d:d2:f8:c9:18:d6:57:06:
7f:17:10:f2:bf:93:cd:04:f0:56:5c:bf:39:55:69:76:3e:61:
d6:d2:91:17:49:80:8e:fa:ba:be:c2:af:35:b9:a9:de:9a:63:
b9:e3:c5:7a:6d:03:15:6b:32:e5:d5:e8:d4:bd:96:c7:a7:ac:
a0:bf:ef:4f:8b:35:29:a0:c8:07:7b:72:8a:9d:12:68:3c:50:
cb:15:e8:2f:01:a4:70:44:02:f1:19:9b:76:fc:f4:95:da:d5:
af:8b:af:c1:bd:6f:31:d3:0d:e5:b5:21:2a:70:c9:ec:58:db:
36:1a:55:6a:20:9c:ec:0f:6f:8e:94:eb:9f:2c:8b:e0:53:98:
50:a7:83:4f:45:79:65:9f:48:02:34:e2:92:a8:fe:a6:af:33:
4c:39:89:f8:b3:d5:71:87:a3:bf:a8:ca:73:b2:d9:13:c0:01:
7b:4e:35:fa:00:3d:2c:80:02:ae:af:0e:91:6d:b5:c1:31:d5:
31:0c:61:6c:41:1c:71:bd:6f:91:3e:fe:d3:b6:67:67:45:24:
95:c4:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 07:56:26 2024 by rpki-client on console-ams.rpki-client.org