Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A993696C614A11EFBF1BCF42762E951A.roa
File: A993696C614A11EFBF1BCF42762E951A.roa (raw, json)
Hash identifier: xwBVd0vbOx4CmsJrEIPDhp0iLCJR0ZoO3rfGCQCzlJ8=
Subject key identifier: 52:A2:FA:C2:59:E7:EA:CF:FB:A6:36:F5:EC:55:CB:88:A9:FF:65:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AD12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A993696C614A11EFBF1BCF42762E951A.roa
Signing time: Fri 23 Aug 2024 12:24:37 +0000
ROA not before: Fri 23 Aug 2024 12:24:32 +0000
ROA not after: Mon 25 Aug 2025 12:24:32 +0000
asID: 393559
IP address blocks: 45.199.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Sep 2024 00:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44306 (0xad12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 12:24:32 2024 GMT
Not After : Aug 25 12:24:32 2025 GMT
Subject: CN=66c87f85-ad1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:d2:bd:12:7e:80:26:62:2b:37:83:7f:c6:
1e:4f:74:c4:88:d3:95:c1:f8:25:4e:e7:60:df:1b:
94:d5:83:f1:53:54:7e:0e:9e:2d:35:97:a0:2c:f5:
87:4f:17:4b:56:26:ed:30:db:d0:c6:29:ec:be:ec:
e5:a0:39:85:46:57:35:05:b1:6b:7e:68:4e:6f:47:
5f:10:2b:cd:1d:f0:78:8f:8c:f9:9f:da:92:c5:ff:
fc:2d:75:ac:bf:75:07:a2:a6:24:6a:de:47:0a:2d:
4a:45:3e:cb:d0:b5:16:40:a0:ee:49:17:d7:65:7b:
08:54:44:4d:42:3a:c5:34:92:c6:75:7f:4d:56:1e:
74:01:33:bd:f4:3a:83:4d:5d:40:cd:d5:7a:5f:a8:
43:dc:7b:6b:55:f3:26:0e:26:07:16:e1:81:1e:10:
23:d3:a7:42:2a:dd:2c:7a:ea:b4:da:13:2f:d0:09:
23:bc:69:79:c8:18:4b:cc:30:fb:dd:ce:08:60:21:
95:a5:52:36:52:da:76:8f:6c:c0:74:03:db:2e:5a:
f8:cd:a8:4f:81:35:0c:90:fa:35:e3:34:b0:0a:f6:
0e:d0:d4:19:7b:ed:6f:e9:6e:f1:51:88:4f:50:82:
31:ec:c3:e8:bb:69:c0:78:17:61:c5:8c:94:3b:df:
4b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:FA:C2:59:E7:EA:CF:FB:A6:36:F5:EC:55:CB:88:A9:FF:65:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A993696C614A11EFBF1BCF42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.176.0/24
Signature Algorithm: sha256WithRSAEncryption
94:dc:5d:39:2c:88:8a:d0:a8:b6:34:98:85:48:d8:42:d0:c7:
e0:c7:62:94:38:58:10:fa:62:fc:2a:be:1f:90:3c:87:5a:71:
89:f2:49:b0:4b:d3:ce:a3:60:a3:96:15:78:fd:0e:12:b8:5e:
de:94:b8:e6:dc:7f:03:22:08:bf:19:de:19:1e:a3:45:d5:4f:
37:f0:c3:75:fe:d0:97:cf:3b:4f:d8:1a:31:f6:d0:0e:bd:77:
3e:78:03:f0:1c:59:fb:f2:96:3c:8d:73:62:5a:fc:67:a4:50:
b8:4d:02:a1:62:dc:13:15:8c:de:4e:cb:4e:e1:f6:fd:ff:6b:
eb:5e:ac:63:61:03:72:00:b8:7f:d8:b4:1a:82:b5:f4:59:5b:
eb:46:54:d6:18:e9:f0:d5:7a:b0:40:ec:94:d7:81:a1:b7:13:
f5:01:45:f1:93:c7:99:b0:ec:33:e1:59:ab:28:ab:38:dd:9a:
1f:13:91:58:29:a0:13:c5:28:93:01:50:38:c8:23:3f:eb:cf:
55:5c:67:f9:4c:b8:df:45:77:2a:62:2e:3b:f0:ee:23:5f:06:
4d:a7:76:dd:db:c5:5b:b3:a8:81:53:62:a6:ea:9b:ae:8a:76:
4d:c3:fb:bc:62:ce:12:99:d8:f9:e8:f8:38:ec:a6:82:70:12:
dd:de:22:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:20:06 2024 by rpki-client on console-ams.rpki-client.org