Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2499EFB2931C11EEA3AF554DD25BE465.roa
File: 2499EFB2931C11EEA3AF554DD25BE465.roa (raw, json)
Hash identifier: rbcYKCkA0T6U02RXjTgEsTgHErvNJYpyS9Lm18rk3WI=
Subject key identifier: 74:BA:97:8B:52:1C:7B:CE:EE:30:D4:E5:56:8B:D3:6B:D1:E1:CD:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4F07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2499EFB2931C11EEA3AF554DD25BE465.roa
Signing time: Tue 05 Dec 2023 03:12:38 +0000
ROA not before: Tue 05 Dec 2023 03:12:35 +0000
ROA not after: Sat 07 Dec 2024 03:12:35 +0000
asID: 149024
IP address blocks: 45.195.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20231 (0x4f07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 5 03:12:35 2023 GMT
Not After : Dec 7 03:12:35 2024 GMT
Subject: CN=656e9526-92e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:32:15:03:a9:b6:42:7a:a0:fe:49:b2:8f:
ae:69:aa:06:d1:44:03:68:d5:2b:6e:2c:11:b5:dd:
92:7b:a3:4b:5b:fb:2d:d1:d1:a3:82:fd:6c:76:1f:
79:c9:c5:7a:7c:13:c5:24:e8:03:e4:d1:82:cc:54:
88:0c:78:34:bd:f3:a5:5d:3f:6d:cd:f5:f7:1e:12:
49:18:f4:02:cf:9a:e9:ca:b2:37:dd:ad:c7:61:a0:
37:4f:ce:6b:5b:59:ac:37:c7:ac:4a:1e:96:7e:27:
47:b5:30:af:4e:5c:0b:cd:a3:ab:be:3a:e1:a3:7c:
05:ba:b6:32:fd:86:1b:13:ba:2b:fd:78:98:92:80:
c1:8d:45:52:80:0b:cd:39:11:f0:12:78:44:b8:ec:
37:d4:42:2b:89:5c:2a:de:a0:a0:c6:a2:f0:38:e7:
1b:94:6b:dc:53:a8:9c:28:1c:9b:04:85:85:48:c5:
3a:70:4a:cd:a4:0b:17:04:80:7a:72:a8:3b:fe:9d:
51:5f:7e:43:17:6a:4c:7b:bc:60:64:fe:a0:f7:0b:
cc:b0:23:4b:f4:d9:7c:c8:7d:72:58:2c:0b:e3:ae:
e1:4e:49:41:7b:74:e0:16:e1:f1:60:71:38:51:66:
54:73:d2:94:8b:7c:69:02:94:88:0a:2b:b1:50:1b:
ab:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:97:8B:52:1C:7B:CE:EE:30:D4:E5:56:8B:D3:6B:D1:E1:CD:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2499EFB2931C11EEA3AF554DD25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.135.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b9:37:95:7b:ba:d0:50:95:8c:6d:3a:f5:66:cd:01:47:e5:
50:4d:c8:50:37:4d:9d:bc:e5:d4:2a:93:d6:bf:fe:1f:f7:e7:
f2:12:aa:c8:48:02:58:48:75:2f:d1:37:4d:9b:aa:4f:fa:4e:
9e:af:e8:45:1d:3a:21:8d:26:ce:d7:9c:56:48:e8:d8:73:ef:
43:b8:d8:09:58:f8:c5:91:f5:8e:7f:4a:63:9a:97:20:25:eb:
a7:32:6a:29:85:98:08:06:e3:85:d2:88:37:bb:30:55:7a:0c:
ce:77:f7:a1:f4:4e:b6:3d:6d:d5:55:f1:11:35:18:98:37:1d:
e9:4e:41:7d:c6:ff:fc:ce:07:98:6c:23:58:04:61:30:89:5c:
7d:f1:04:23:89:72:ce:7b:97:80:d6:c2:70:1a:45:a4:90:69:
5c:04:17:2d:9e:91:27:5b:ec:ed:93:1b:47:92:2d:79:71:cc:
c6:04:75:ce:03:9e:39:71:14:79:5f:4f:5a:fc:0a:77:bc:36:
26:aa:c2:68:cd:91:36:03:95:ea:e0:2d:44:56:33:38:4b:58:
54:84:b9:c6:80:3e:b9:ae:bc:49:ef:57:4e:8c:7c:e9:41:26:
1f:24:28:37:e2:58:a0:41:31:e3:85:3e:4d:ed:eb:34:cf:dd:
60:ce:0e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:21 2024 by rpki-client on console-fra.rpki-client.org