Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEFE32900A5E11EEBDE316754AD9E6FC.roa
File: FEFE32900A5E11EEBDE316754AD9E6FC.roa (raw, json)
Hash identifier: m3iYmfqdM7/MzZ2tc0ghNn4GZGufSDAzTejnbSjTTdM=
Subject key identifier: 78:35:C3:4B:96:1B:7A:C8:77:1D:B4:CE:5E:CD:60:D2:D8:44:89:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2C2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEFE32900A5E11EEBDE316754AD9E6FC.roa
Signing time: Wed 14 Jun 2023 02:56:02 +0000
ROA not before: Wed 14 Jun 2023 02:55:58 +0000
ROA not after: Sat 25 May 2024 02:55:58 +0000
asID: 55020
IP address blocks: 45.204.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11307 (0x2c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 14 02:55:58 2023 GMT
Not After : May 25 02:55:58 2024 GMT
Subject: CN=64892c42-cfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fe:c0:9a:19:09:6f:ef:7e:59:fc:85:1b:e7:
a3:46:06:84:9d:8c:6e:54:1e:bc:99:ed:c4:cd:5b:
51:94:9e:10:c6:c2:d8:ca:27:02:17:a7:0b:e9:59:
62:c7:e4:e5:0f:3e:70:71:b0:d3:2a:c7:8d:c9:4a:
94:8c:6f:6f:95:86:11:39:09:38:06:a5:c5:c5:92:
8e:0c:bc:dc:17:75:9f:84:44:f3:a4:f5:42:79:45:
16:89:2c:37:8e:93:b9:4c:65:6c:25:74:94:91:b3:
30:4f:80:62:c0:12:79:78:10:28:4d:77:98:5f:da:
ff:73:3f:1d:22:18:71:7e:eb:9a:af:18:7e:7e:cc:
4d:04:8c:50:d7:07:47:72:e3:19:32:49:4e:7b:a7:
ac:39:85:1f:58:8d:10:a3:24:9b:02:e4:d2:af:51:
63:3e:d7:36:ed:fe:35:49:9a:4e:2b:78:9c:16:3b:
f3:72:6d:c9:f5:52:c1:ef:ef:00:9a:f7:2d:43:ee:
c5:c6:de:26:81:9e:d5:2a:9e:f3:3c:7a:1e:fe:ec:
a7:3c:fb:65:b7:71:05:8f:85:bc:4a:40:c1:6d:c3:
31:c3:2f:5a:5c:61:76:80:e3:6e:db:d4:72:49:07:
5a:f1:72:92:01:93:1c:e0:c2:bc:05:3d:b3:a9:3d:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:35:C3:4B:96:1B:7A:C8:77:1D:B4:CE:5E:CD:60:D2:D8:44:89:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEFE32900A5E11EEBDE316754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.4.0/22
Signature Algorithm: sha256WithRSAEncryption
44:f9:e2:cb:a0:eb:19:c9:2a:38:8d:88:80:4e:63:4f:88:4f:
5e:d8:29:9e:b6:a2:46:ab:d3:65:ca:be:9e:a7:43:fe:13:70:
14:57:43:bb:ca:c3:15:cc:81:ae:7a:03:8f:b3:66:c0:ca:3d:
c5:ba:af:97:2f:90:3d:45:3a:3f:e7:6c:d1:e7:75:68:55:92:
9c:86:2c:46:60:8d:39:af:f1:f9:4a:a9:64:30:00:1b:84:63:
4f:74:f4:fa:a5:ad:b3:bd:32:24:f7:13:5e:27:d5:b9:4d:48:
f4:d8:73:8d:73:fd:b2:30:ac:55:0a:9e:09:4a:25:f2:87:d5:
2b:d7:cf:4f:f0:58:b3:6a:18:5a:0a:6c:37:e1:55:c1:95:d6:
39:6c:e4:a8:3d:14:f8:09:2c:93:e3:91:24:88:49:93:cb:a9:
b4:4b:9c:c9:d5:13:e8:f7:72:27:4a:9c:40:85:03:79:4c:c8:
ee:b3:d3:6a:d8:2b:3c:ed:d5:ff:37:2f:98:b3:58:6e:eb:45:
87:dc:5a:69:01:5a:80:4f:a6:0b:c3:a7:d9:42:f7:e9:6b:e0:
4a:24:bf:69:3a:4b:b8:c6:62:11:da:44:36:7b:8a:b3:96:1d:
98:9b:5a:5f:a8:36:5d:9c:f4:59:1e:cc:0b:79:4d:44:39:b1:
dc:24:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:20 2024 by rpki-client on console-fra.rpki-client.org