Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/11C56CCAA6B111ED8134E59FF1222468.roa
File: 11C56CCAA6B111ED8134E59FF1222468.roa (raw, json)
Hash identifier: ojBySmq/MYKoeATyk2uzqne3+7nTaIko3QoLM9GZYfk=
Subject key identifier: 0D:99:61:DB:D7:1E:FE:2C:B7:81:2A:37:7B:13:46:C4:B4:F8:F0:7A
Certificate issuer: /CN=F36D8D30AR/serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
Certificate serial: 02
Authority key identifier: 5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
Authority info access: rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/11C56CCAA6B111ED8134E59FF1222468.roa
Signing time: Tue 07 Feb 2023 06:31:36 +0000
ROA not before: Tue 07 Feb 2023 06:31:30 +0000
ROA not after: Fri 07 Feb 2025 06:31:30 +0000
asID: 328422
IP address blocks: 45.222.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8D30AR/serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
Validity
Not Before: Feb 7 06:31:30 2023 GMT
Not After : Feb 7 06:31:30 2025 GMT
Subject: CN=63e1f048-5acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:70:63:ce:1f:67:ef:3c:f1:f2:3c:30:64:
5e:5e:ba:d3:f0:df:3e:3b:32:36:2c:f3:5c:e7:29:
fc:84:10:e5:53:63:8f:8c:17:a4:f9:52:af:df:0c:
d2:1d:13:bc:57:7b:b4:94:04:61:12:91:47:c6:e1:
5a:ab:5f:f3:73:35:4e:87:65:92:39:1f:02:9c:a2:
e0:be:01:dd:59:fa:ba:e3:a3:8b:0f:21:18:2f:4a:
14:e5:f1:ec:b6:13:a1:be:37:23:69:83:ce:3f:0b:
5b:34:b3:cc:48:4b:f5:c2:98:0b:35:e2:22:44:99:
3c:50:7b:ef:18:91:f2:52:01:12:92:03:1d:55:ea:
ff:72:dd:e2:24:3b:0f:84:28:b1:1a:da:e6:0e:72:
1a:e4:0a:65:f3:26:c3:47:f4:7f:5a:e1:ef:90:7a:
8b:b2:14:54:60:f8:3b:08:be:7e:6a:58:e4:de:f5:
70:32:d2:cc:89:a5:0a:c2:17:8e:33:c0:f9:ac:32:
01:3a:1b:a3:4f:a7:a5:cb:db:c2:95:67:76:83:7b:
21:73:c3:c9:a0:2e:5d:cd:95:95:fb:a3:19:7e:1c:
91:66:77:b8:e7:9b:c0:84:55:41:eb:d9:11:57:13:
b5:9c:bb:41:9c:0c:84:dc:5b:74:83:37:fe:aa:46:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:99:61:DB:D7:1E:FE:2C:B7:81:2A:37:7B:13:46:C4:B4:F8:F0:7A
X509v3 Authority Key Identifier:
keyid:5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/11C56CCAA6B111ED8134E59FF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.222.112.0/20
Signature Algorithm: sha256WithRSAEncryption
82:f5:57:3c:17:ab:04:25:f6:c5:92:d6:13:09:5a:6c:72:6c:
b6:29:91:e0:af:c7:52:f6:69:5f:ae:c4:57:8a:2d:79:5a:73:
02:ee:60:f4:52:aa:a5:12:f2:b8:d8:3c:64:9f:df:e4:11:2d:
a2:2f:48:0f:10:d2:20:eb:fd:50:1f:ba:a1:12:51:91:75:56:
ab:01:54:4e:1d:27:aa:fd:08:37:ec:ab:03:ba:73:4a:a9:9e:
e9:8d:c8:bc:f0:f9:d9:48:3c:b9:c2:f7:db:0a:d5:8f:63:d6:
77:8f:4b:ad:33:ad:6c:e7:f5:97:69:25:e7:3a:c2:db:10:6e:
00:97:21:74:a6:ad:4d:ad:1b:12:b3:6d:52:ac:8b:16:3b:5a:
ca:01:4e:45:0e:41:81:ab:2c:6b:51:8c:a9:30:78:38:c9:c2:
23:a5:39:68:56:2c:01:32:d2:98:3a:22:51:a7:5d:77:b1:4a:
24:0b:b0:c2:db:33:88:bd:8a:45:ce:be:dc:6f:61:be:57:d5:
c2:85:86:bc:fa:3e:6c:1d:33:08:98:f7:a5:8b:cd:77:c2:a3:
62:98:db:37:d2:a3:85:59:4a:67:d3:13:cb:0e:cb:89:79:18:
74:56:5c:d6:cc:cd:75:a9:34:21:fb:0c:2a:38:b3:fd:fe:73:
a5:31:8b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:28 2024 by rpki-client on console-ams.rpki-client.org