Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/291A76F8A74B11EF8624F27F762E951A.roa
File: 291A76F8A74B11EF8624F27F762E951A.roa (raw, json)
Hash identifier: mGcg5Z6azESkAbpyP7Pn20UGFPF2FduxOM4UKHPQgbg=
Subject key identifier: FF:91:65:45:C9:C6:A1:56:46:9C:79:32:7C:F1:55:54:29:68:A6:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/291A76F8A74B11EF8624F27F762E951A.roa
Signing time: Wed 20 Nov 2024 14:24:33 +0000
ROA not before: Wed 20 Nov 2024 14:24:29 +0000
ROA not after: Sat 30 Nov 2024 14:24:29 +0000
asID: 202656
IP address blocks: 45.199.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54956 (0xd6ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:24:29 2024 GMT
Not After : Nov 30 14:24:29 2024 GMT
Subject: CN=673df120-1204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:08:7d:5f:22:e6:85:cb:81:d0:43:14:7c:
37:8c:18:ff:12:14:a0:86:55:9b:9e:13:46:b3:59:
41:63:f0:31:3a:85:cc:da:8b:af:1a:f2:61:23:cc:
6f:b7:6f:1b:a7:55:c2:b6:8c:ca:58:4c:ec:5c:f7:
20:8f:71:a8:ba:26:35:4f:c1:07:f3:19:99:a1:d2:
f3:16:fa:e7:6b:67:8d:bb:a8:16:32:05:f6:ba:7e:
cd:2e:24:ff:2e:44:4f:b7:59:d8:1c:b5:45:ed:c6:
f2:65:3d:fb:f6:d9:99:af:08:31:bb:d2:f5:74:52:
4a:60:da:31:08:36:5b:11:70:35:58:db:3a:9c:66:
95:ee:c1:15:df:4b:ac:04:3a:bc:38:9e:82:4e:c0:
4d:bc:1b:1c:99:23:38:ea:85:7a:49:ae:99:ec:f3:
75:f4:9d:87:a6:a0:74:86:8d:8a:9d:8e:de:8a:6d:
28:3a:3f:09:97:a0:0d:da:d2:39:41:4a:cc:9d:6b:
78:a3:0e:0a:8c:3c:9c:70:64:c4:8f:b7:a3:11:36:
2c:4e:8b:6e:7c:8d:8f:7f:24:5a:d9:10:4b:96:da:
2b:f9:a7:ce:02:47:31:b9:93:af:05:86:d7:5b:1d:
d7:37:b9:2e:7b:dc:d8:4d:1c:65:24:4d:d2:f6:ef:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:91:65:45:C9:C6:A1:56:46:9C:79:32:7C:F1:55:54:29:68:A6:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/291A76F8A74B11EF8624F27F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.200.0/24
Signature Algorithm: sha256WithRSAEncryption
63:06:85:e4:47:ca:a9:e9:56:96:d5:48:ee:45:f3:e0:d3:59:
be:02:b0:cd:3b:a6:65:82:67:e0:c2:12:9b:58:3e:ef:a9:a4:
16:8d:19:a7:de:70:23:7a:71:df:69:5d:c9:d7:af:f5:f5:cc:
66:dd:a4:5c:af:30:72:13:55:e1:51:bc:d9:69:69:5a:ab:00:
4a:4f:37:b7:33:00:76:27:e6:49:6b:90:87:54:3b:c5:8e:6e:
df:4f:b1:10:b6:38:35:21:8c:e9:1d:d4:ff:97:d4:08:d2:f0:
cc:2a:89:cb:fe:52:58:e4:65:77:02:d2:c9:ad:38:6d:a9:de:
3c:e5:23:37:4f:6d:00:06:40:09:1c:47:54:92:bc:7f:ff:18:
88:06:4e:b7:da:88:ac:00:cd:0f:aa:d8:55:c5:03:d7:5b:be:
ec:50:e9:47:76:c9:36:0a:7b:49:4a:5a:86:3e:c2:0d:12:f9:
bf:43:9f:cd:bb:0b:ff:0b:89:36:7d:16:30:d4:9d:2a:d4:01:
a5:e1:92:13:fe:84:f0:05:dd:ed:d7:e0:21:58:16:eb:14:58:
ca:42:7b:2c:bf:55:8a:e4:f1:71:a0:8f:80:11:a6:7c:21:a9:
2f:e6:b9:4c:c3:0a:e7:b5:90:f6:3f:3f:70:66:3c:f6:ca:d6:
61:e2:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:22 2024 by rpki-client on console-fra.rpki-client.org