Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E7F3A5EA0E311EF87C1588A762E951A.roa
File: 0E7F3A5EA0E311EF87C1588A762E951A.roa (raw, json)
Hash identifier: Wo6ZGC7NHWgua3Zgvgrov97R7B6yO12/0wcmPXj3emc=
Subject key identifier: 58:69:95:3B:5F:6C:EB:27:E3:3D:99:1C:B7:53:16:25:40:65:F5:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D19F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E7F3A5EA0E311EF87C1588A762E951A.roa
Signing time: Tue 12 Nov 2024 10:44:13 +0000
ROA not before: Tue 12 Nov 2024 10:44:09 +0000
ROA not after: Fri 22 Nov 2024 10:44:09 +0000
asID: 39600
IP address blocks: 45.197.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:44:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53663 (0xd19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 10:44:09 2024 GMT
Not After : Nov 22 10:44:09 2024 GMT
Subject: CN=6733317d-0711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:3d:ed:7a:2c:5e:8c:23:98:a5:c8:cf:66:
cc:2d:9e:f8:84:6a:42:cd:20:1e:83:7e:b8:b7:d1:
2c:f3:d1:9b:a9:cd:25:47:ac:7b:63:04:1d:bf:27:
fd:f8:da:1b:0d:dc:3d:72:b7:02:f4:7b:ee:87:87:
b1:08:ea:18:56:dc:c9:8c:e1:7b:8f:4b:76:90:30:
6d:fb:3e:a4:2c:36:81:73:e4:0b:80:7e:19:fd:b4:
fc:6e:75:63:a7:12:0e:88:55:11:43:c2:26:52:79:
7b:f6:7b:2d:a9:33:ad:7b:af:de:ec:38:f0:8a:fd:
44:a1:77:05:4c:88:bc:3e:8a:aa:7f:13:5b:f4:d9:
7b:08:f1:e2:07:0c:72:60:6c:11:dc:47:54:35:92:
77:df:42:1f:f0:c8:2f:df:50:d9:34:f3:3f:d3:ae:
0a:7d:f9:29:56:14:bc:c6:c9:57:1f:92:25:ef:5f:
09:2a:79:4c:ba:2d:c2:08:fd:43:93:5c:c8:8f:fd:
2f:70:24:43:0f:c3:c6:18:20:e8:a1:f1:ab:fe:9d:
4a:17:92:cc:b0:e0:a2:5a:4e:47:9a:2c:ed:3e:9b:
21:93:8f:6c:4a:8e:97:3b:68:b7:02:d8:2a:c7:39:
18:1a:cc:45:57:d3:2f:3a:dc:5c:c8:41:5b:a8:26:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:69:95:3B:5F:6C:EB:27:E3:3D:99:1C:B7:53:16:25:40:65:F5:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E7F3A5EA0E311EF87C1588A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:b4:1d:43:d7:bc:c2:dd:8b:75:4b:03:25:9e:9d:ff:99:85:
2c:b5:9a:de:5e:ae:42:48:b0:71:f7:4e:1b:a5:21:2e:80:f6:
ef:22:2a:46:cc:43:2f:9d:4d:27:ec:4f:d4:fc:63:7a:2b:d8:
92:c7:96:43:c5:fb:d5:0e:7c:50:67:03:c2:aa:bc:b9:ec:23:
1f:a5:c0:41:5a:09:2e:8a:80:8c:bc:35:b8:a1:a5:86:3d:cd:
57:6d:99:cd:c7:6c:c1:b7:15:ac:de:cd:25:28:36:31:12:ec:
67:df:a4:65:b9:1b:6b:89:0d:b0:cf:73:a2:50:b2:80:00:08:
7f:9f:cb:9a:97:fa:b3:72:be:bc:67:b2:3d:ff:95:e8:e1:16:
dd:dd:2b:ab:26:59:64:38:fb:10:91:44:ba:26:92:49:9f:2f:
d1:74:ec:fe:f2:65:e9:fa:47:1e:e8:11:24:15:6f:85:59:3e:
58:ba:ed:4f:6b:8d:e1:a4:84:01:0b:01:fc:c6:78:42:b4:58:
10:64:db:df:bf:3e:86:76:78:ab:b6:e3:d3:a0:d6:7c:a3:30:
27:7c:df:8c:69:7c:6d:39:b7:88:cc:9b:4c:7b:3a:27:44:c1:
0e:cd:78:fb:05:4c:cb:84:56:6a:0b:07:0e:e8:4e:d1:fa:f8:
1d:68:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:19 2024 by rpki-client on console-ams.rpki-client.org