Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11E1C19C22EB11EFA26AF9407DDC24C2.roa
File: 11E1C19C22EB11EFA26AF9407DDC24C2.roa (raw, json)
Hash identifier: mZqLQxrN3qXbl3WJKXysppugeaJtniW1AjgM6tMepiE=
Subject key identifier: 8F:8B:E4:B0:85:2F:04:C3:25:80:C6:38:8C:F3:D1:3A:7B:E3:82:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8F15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11E1C19C22EB11EFA26AF9407DDC24C2.roa
Signing time: Wed 05 Jun 2024 03:24:08 +0000
ROA not before: Wed 05 Jun 2024 03:24:05 +0000
ROA not after: Sat 24 May 2025 03:24:05 +0000
asID: 38901
IP address blocks: 45.201.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36629 (0x8f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 03:24:05 2024 GMT
Not After : May 24 03:24:05 2025 GMT
Subject: CN=665fda58-291a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:84:6e:7c:cb:f0:e6:dc:18:81:d7:ec:d0:
1b:9b:af:15:c2:33:0a:6c:8e:7b:4d:8b:f6:5c:d1:
b0:1e:ab:db:a3:b8:42:94:e6:86:c9:c4:ab:38:63:
9a:46:8f:c9:8f:00:5e:1a:a2:1a:85:0f:fa:79:f3:
91:94:8e:83:18:57:e6:de:70:a3:ae:8e:1d:97:81:
61:49:fb:24:fd:f8:5d:64:34:bd:15:44:a0:02:90:
9d:7f:73:8c:df:53:71:93:27:f6:10:bd:eb:b7:bf:
ef:c6:32:ec:de:05:7a:97:6e:18:42:7e:c3:4d:fd:
99:98:b7:ba:fc:18:33:e2:a4:98:70:b8:7f:17:db:
5f:8b:f0:e8:0b:c0:2f:01:92:ba:f2:27:06:51:30:
5f:a6:be:b8:89:75:1a:b0:dd:16:a7:da:8e:3b:71:
c5:c6:cc:5c:9d:be:70:cf:3e:96:1a:4a:bd:40:60:
bb:33:11:82:1c:8e:42:93:5f:e1:c9:d8:7c:96:d6:
bb:c8:54:c7:e5:ae:b7:84:4b:ac:7e:18:89:1e:92:
fd:9c:9f:d8:70:40:a1:22:12:73:d5:a1:8c:61:d0:
48:1d:f1:99:16:1d:63:ec:3c:21:b8:b3:e0:a4:4f:
05:d4:25:f3:e8:84:3e:23:47:f3:d9:84:1d:dd:2d:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:E4:B0:85:2F:04:C3:25:80:C6:38:8C:F3:D1:3A:7B:E3:82:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11E1C19C22EB11EFA26AF9407DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.210.0/24
Signature Algorithm: sha256WithRSAEncryption
47:c7:ff:9e:d7:b4:e3:c1:0b:10:ae:ef:55:08:f1:40:7a:30:
d8:31:cb:0d:bf:b3:8a:2e:50:4d:6f:23:11:53:0b:04:9e:04:
e9:d4:c5:96:d8:ad:5f:dd:ed:fc:5f:32:30:13:76:c2:9f:7e:
34:64:0a:5c:41:ed:b9:80:b3:f8:0c:21:98:6a:54:bd:31:3b:
25:9f:ec:0e:f1:17:61:83:3a:3e:1f:38:a6:62:13:fc:52:9b:
e2:5a:18:5c:d7:83:75:8b:d5:c3:00:c4:8c:02:cc:97:f2:49:
27:2d:46:75:a5:32:82:27:cd:3b:b1:b7:14:8d:d4:59:26:68:
ca:d5:e5:4b:bb:39:9a:9e:26:8d:7d:83:64:e2:8e:c1:69:42:
a3:6d:eb:bc:b3:3a:ed:2f:ca:c0:87:89:e5:69:74:a2:d9:c8:
91:da:42:09:3e:c7:cc:ac:fc:1c:50:4e:96:25:63:f9:12:81:
6c:d5:88:8f:a1:46:66:f9:6c:cb:e7:58:02:d9:d7:cb:17:b2:
02:56:1c:49:0d:df:4a:2d:f8:b9:3d:2d:77:d6:1a:57:88:bc:
bb:bb:be:c1:d8:02:b9:9c:23:d8:c8:60:43:a2:ef:c0:53:1a:
e6:39:54:fd:7f:c0:4d:8f:f7:78:d1:2d:c5:25:a3:22:34:cb:
f6:84:42:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:20 2024 by rpki-client on console-ams.rpki-client.org