Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17706AA8A64B11EFBFF43FBC762E951A.roa
File: 17706AA8A64B11EFBFF43FBC762E951A.roa (raw, json)
Hash identifier: XuIAxKtZF3L4MYneUGIPJxuxxAREBZzQ0Q6C2fXCA/w=
Subject key identifier: 5A:CA:C9:DC:7F:3C:F0:06:B9:51:66:A9:FD:61:3B:7D:DF:A3:BD:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D562
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17706AA8A64B11EFBFF43FBC762E951A.roa
Signing time: Tue 19 Nov 2024 07:51:32 +0000
ROA not before: Tue 19 Nov 2024 07:51:28 +0000
ROA not after: Sat 21 Dec 2024 07:51:28 +0000
asID: 395793
IP address blocks: 45.201.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54626 (0xd562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 07:51:28 2024 GMT
Not After : Dec 21 07:51:28 2024 GMT
Subject: CN=673c4384-8eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:04:ea:22:b1:8f:a5:e7:a4:da:5d:98:3d:57:
51:65:ac:70:a2:94:9b:19:64:72:a8:24:f9:c4:de:
60:bc:b6:5a:ea:12:a9:10:94:2b:df:28:9a:34:10:
4b:85:8c:fd:f8:ff:58:17:1f:f2:2a:0e:39:a3:88:
c9:28:be:55:93:a7:03:39:63:64:61:95:cb:8e:da:
59:8b:9a:35:bb:25:ee:eb:95:bc:b6:18:5d:2f:5a:
85:ff:a2:af:62:72:9e:13:b7:69:3d:bc:28:a8:c5:
4f:e8:b9:49:f1:e8:cf:dc:a4:fe:a0:50:98:94:70:
5d:c1:c7:cb:80:5a:37:23:fa:0e:28:f7:bd:a2:9d:
c3:1b:9c:46:94:ca:8b:2f:91:85:2d:6d:6b:e4:c5:
ec:4c:7b:d1:79:25:c8:1a:c0:b8:df:5c:c1:e9:19:
fa:dc:f7:d7:1c:41:71:d5:df:c9:01:40:8b:d2:99:
b1:c0:82:b5:61:38:8e:5a:5a:b8:e7:07:dc:94:f8:
b1:4a:c8:e5:02:2c:44:29:b9:78:03:d1:fe:03:87:
a6:33:20:36:f8:1a:94:4c:30:62:03:24:66:eb:a9:
5f:97:2f:f8:c1:68:7a:fd:11:a7:f8:41:92:84:60:
6d:b8:1c:4e:e8:03:f5:e6:a9:0a:09:79:73:f2:34:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CA:C9:DC:7F:3C:F0:06:B9:51:66:A9:FD:61:3B:7D:DF:A3:BD:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17706AA8A64B11EFBFF43FBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.16.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:88:da:48:cc:4b:28:a4:2e:ee:fb:42:d2:bf:96:86:0c:42:
ba:db:0f:a1:3e:d9:70:fa:96:44:c4:f4:4f:af:83:96:fb:41:
30:ce:83:9d:81:14:f5:f8:d9:2d:14:ee:05:bb:65:7b:a5:05:
8e:a1:5b:9b:be:53:b0:f1:36:b4:49:43:4d:fe:aa:98:3b:e1:
1f:60:69:f4:6c:f0:24:a3:56:03:dc:e8:d7:fa:18:87:a8:b2:
c4:44:67:ef:39:c8:d9:99:56:61:7a:ca:53:81:8f:90:3f:18:
c8:60:66:c7:39:ff:89:37:1b:05:2c:91:0d:4e:fa:57:3f:9f:
ad:91:0b:c0:cb:ca:57:e0:6c:66:41:19:d2:9c:32:3a:38:3b:
a6:94:d7:9d:f9:c9:ca:65:c5:35:54:07:1d:7b:a3:b5:b4:a5:
f6:ac:1d:75:bb:f8:11:46:89:b2:9f:c0:a0:d7:11:29:da:6f:
e8:6a:96:57:21:68:6b:53:53:88:e2:fc:92:1e:ff:42:47:c0:
0f:28:26:a4:d3:ec:de:9e:bc:44:c7:4b:3b:17:94:29:9b:b6:
21:1e:0e:da:c1:f1:3c:09:ec:88:50:2c:42:0b:8e:38:67:41:
99:08:22:fd:84:70:74:91:a0:e2:5d:e2:53:a8:9e:28:65:af:
79:13:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:19 2024 by rpki-client on console-fra.rpki-client.org