Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11587D86A74011EF88C5A6BB762E951A.roa
File: 11587D86A74011EF88C5A6BB762E951A.roa (raw, json)
Hash identifier: K1sWcdx6/NhmFOI/crHz0IW2wDORU/laWUEZ7ycu2KU=
Subject key identifier: 0B:C8:B2:DD:89:27:53:77:8A:0E:75:F1:61:49:4D:A3:87:17:8F:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D631
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11587D86A74011EF88C5A6BB762E951A.roa
Signing time: Wed 20 Nov 2024 13:05:08 +0000
ROA not before: Wed 20 Nov 2024 13:05:04 +0000
ROA not after: Sat 30 Nov 2024 13:05:04 +0000
asID: 142062
IP address blocks: 45.204.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54833 (0xd631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:05:04 2024 GMT
Not After : Nov 30 13:05:04 2024 GMT
Subject: CN=673dde84-bb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:9e:9c:db:4e:de:fb:50:b0:16:30:93:4d:
0a:75:8d:54:ff:86:95:a5:99:b9:73:b0:43:63:84:
40:55:f2:0f:2b:25:9e:cc:e0:32:5c:02:be:b1:e4:
a7:5c:4b:da:0f:2e:d6:ee:38:2a:7c:02:91:68:8d:
d2:86:34:e5:3a:f2:00:8f:f8:5c:20:c3:dc:45:e2:
26:d0:4f:22:b9:2c:d7:26:d6:c0:ae:70:4c:9a:50:
6a:ed:2b:50:e2:09:05:ad:b1:ea:5a:f6:e2:4b:3c:
2c:3a:b5:f6:a2:87:8f:fd:ab:38:26:52:99:06:eb:
37:5e:72:e9:f8:dc:b4:d4:0c:c2:ed:5c:70:51:03:
e7:45:f8:32:86:a9:33:3f:20:0c:21:3d:ca:8f:ec:
06:7e:53:c4:fc:a1:94:b1:8e:db:88:de:6b:62:09:
63:d4:d3:bb:a5:eb:eb:39:a2:ef:06:ba:a3:d0:60:
1c:82:74:93:4b:d2:97:1e:b5:a8:26:87:64:34:ef:
50:86:75:23:9e:fc:7b:6a:b7:45:5b:22:95:ed:ef:
5c:24:e1:62:66:87:1f:f8:56:6c:10:0c:01:02:1c:
f9:de:9b:ee:89:d4:cc:e2:27:f1:5a:23:b1:1a:66:
55:6f:40:21:08:12:42:da:24:94:85:9a:4c:53:a2:
e8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C8:B2:DD:89:27:53:77:8A:0E:75:F1:61:49:4D:A3:87:17:8F:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11587D86A74011EF88C5A6BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.88.0/23
Signature Algorithm: sha256WithRSAEncryption
64:17:d2:7d:a6:27:49:3a:6e:69:b4:11:c2:3a:19:3c:6b:cc:
a5:bb:d9:c0:b8:08:d0:f1:fe:a8:60:6f:82:70:bc:21:b1:02:
69:dd:13:0b:2f:ed:9d:60:8e:3b:22:b4:0e:50:f6:88:ec:d7:
71:9e:76:bc:d4:71:af:f1:a4:ab:3e:8d:c2:d4:e8:92:dd:70:
8b:95:23:ca:e2:2a:f0:97:88:7c:64:94:e1:df:94:45:c1:47:
9d:a5:40:54:0b:71:1a:83:94:c8:85:ff:fe:a6:b2:10:02:52:
75:44:71:e1:6d:a2:fc:1f:2d:83:dd:3c:26:02:96:17:75:14:
4e:91:89:04:33:7a:89:c1:02:6f:4e:9f:5e:9d:31:93:73:6a:
93:32:4e:b9:03:74:97:67:b6:cc:05:14:54:b3:f6:6c:ad:30:
5f:96:2c:fb:fa:16:30:60:14:95:56:2e:4d:e0:ce:ee:a1:29:
48:4b:de:18:1e:cc:0c:35:c2:41:6a:6c:8d:4d:aa:52:2a:f3:
1d:95:c5:1a:6a:a2:a6:bf:aa:0a:1a:81:c0:0f:e2:0b:5d:26:
f3:1b:af:ae:c0:5e:97:e9:2f:cb:c8:b1:7b:1c:f5:73:37:9e:
f6:45:69:44:0c:a8:90:5b:ad:1c:d0:d6:fe:f1:cf:c8:02:fd:
b7:f2:13:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:18 2024 by rpki-client on console-fra.rpki-client.org