Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20FA5CB28D3411EF84824083762E951A.roa
File: 20FA5CB28D3411EF84824083762E951A.roa (raw, json)
Hash identifier: wwoeRzS2+VgZDoHcnQMrL3XsGS6KRKk1SXCeis+TgS0=
Subject key identifier: 00:5C:64:74:DC:28:D6:1E:CA:C4:C9:EB:CD:5E:3E:3B:61:0C:5B:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C6BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20FA5CB28D3411EF84824083762E951A.roa
Signing time: Fri 18 Oct 2024 09:34:10 +0000
ROA not before: Fri 18 Oct 2024 09:34:07 +0000
ROA not after: Sat 23 Nov 2024 09:34:07 +0000
asID: 202656
IP address blocks: 45.200.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50878 (0xc6be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 18 09:34:07 2024 GMT
Not After : Nov 23 09:34:07 2024 GMT
Subject: CN=67122b92-bbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:03:39:1f:37:6d:29:f3:b7:57:94:1a:21:
4e:ec:2d:9e:59:5a:06:da:b6:81:c3:60:fb:67:17:
57:b3:43:86:34:6e:8e:d0:30:ea:16:26:a9:68:1e:
8b:ee:3e:23:89:58:56:46:f9:1f:96:6f:66:e1:13:
63:90:82:e9:fc:91:ad:f9:a1:db:8f:0c:5d:0c:97:
de:e9:b4:c1:03:d4:ae:32:f0:22:1d:79:af:2c:e5:
35:67:b3:d7:7f:e9:c7:30:75:e6:08:3c:7b:25:f0:
2c:b5:97:f1:49:9c:8c:15:0c:7e:0b:00:38:fd:c5:
23:24:46:03:cc:8c:a3:e2:e1:82:2b:55:8b:65:81:
ee:fa:d6:8a:fb:95:74:da:e1:0b:17:7a:b2:07:f4:
a6:c6:74:d4:e2:f3:4e:8c:29:ae:56:df:2f:2d:d3:
0b:56:2e:c0:9a:a8:91:51:87:28:06:31:49:94:ab:
0c:fd:f8:b4:4d:66:6e:97:6e:60:9f:33:6a:15:3b:
54:0b:0e:48:d9:3c:d3:64:e3:ec:38:14:4b:e9:ca:
e0:01:88:24:94:bf:14:2f:20:74:1f:5b:c1:61:8e:
17:b2:0d:27:cd:c2:f4:38:a7:0b:8a:cf:25:fc:73:
76:95:36:c1:76:c2:44:b1:b9:62:cb:e6:63:23:0e:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5C:64:74:DC:28:D6:1E:CA:C4:C9:EB:CD:5E:3E:3B:61:0C:5B:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20FA5CB28D3411EF84824083762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.160.0/19
Signature Algorithm: sha256WithRSAEncryption
96:a9:e2:33:8f:35:40:b2:fd:2c:90:b6:f7:75:4c:d3:8d:54:
c3:56:9d:b6:9e:80:b5:dd:3e:73:f8:79:1a:ed:9d:04:2d:47:
37:70:18:fe:f3:01:c9:af:45:78:a0:8b:17:83:f7:ce:34:3b:
c1:3a:11:ef:25:50:0f:9b:d6:71:1d:09:31:bc:69:8b:3e:45:
98:46:e6:12:91:9d:c3:37:e3:3c:d1:42:1d:a1:ca:5e:19:22:
63:b7:0d:84:cb:fa:2b:99:d8:6d:9d:45:35:4d:09:51:54:fa:
76:c3:d3:42:52:49:a9:5d:aa:e2:79:47:fb:d1:9a:a3:7e:7e:
75:5e:1c:43:30:67:1d:4a:60:10:39:ba:89:ea:0d:d6:00:f1:
9c:88:77:48:61:52:a2:d4:71:a4:9b:9b:2b:11:f1:d4:62:9e:
65:33:9c:b5:fe:18:ff:d4:4a:1c:c4:60:86:ca:0b:9b:90:7a:
50:00:49:2b:de:08:1f:9d:4a:bf:d6:1e:39:f5:33:52:ba:11:
05:e1:d6:57:00:ad:3e:ef:59:32:aa:26:aa:22:7c:a1:11:c2:
4f:b7:38:e8:71:fd:18:fc:63:27:85:cf:0f:c1:60:de:f8:5a:
e1:b9:08:1b:08:09:5d:7f:93:03:e4:4a:01:46:54:10:85:6e:
bd:70:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:21 2024 by rpki-client on console-fra.rpki-client.org