Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CEFB846A44011EF8FAB5460762E951A.roa
File: 2CEFB846A44011EF8FAB5460762E951A.roa (raw, json)
Hash identifier: fFWdbTq5aqxeNuAsiJovXIvUrbINlFZkB2Hf6Z1Zzac=
Subject key identifier: 64:87:44:6B:20:C3:4D:82:53:9F:C2:CD:B6:5F:BE:23:E0:6A:45:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D360
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CEFB846A44011EF8FAB5460762E951A.roa
Signing time: Sat 16 Nov 2024 17:28:21 +0000
ROA not before: Sat 16 Nov 2024 17:28:17 +0000
ROA not after: Sat 21 Dec 2024 17:28:17 +0000
asID: 140869
IP address blocks: 45.203.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54112 (0xd360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 17:28:17 2024 GMT
Not After : Dec 21 17:28:17 2024 GMT
Subject: CN=6738d635-6628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:8f:49:14:4c:51:f1:87:de:c3:59:b3:bc:
dc:c7:05:28:61:1b:c1:71:ff:2e:de:7d:ca:00:ba:
6e:e5:60:36:5e:54:62:6d:8d:00:36:d0:58:f3:30:
af:77:a9:99:4a:2b:23:4e:e5:ba:d5:cc:4a:89:f0:
9e:6b:40:52:8b:c2:50:96:91:89:62:7a:98:0b:55:
4b:b6:35:2b:12:39:67:40:29:e9:ac:af:0f:77:91:
08:31:06:02:93:08:ce:a8:66:0a:5d:3d:ec:bd:5a:
91:98:fa:5c:1d:68:62:ec:0d:4e:2e:93:57:90:52:
7b:3f:66:15:ef:59:d3:c5:48:d1:e7:c7:19:96:2a:
be:f7:8f:76:d4:81:67:96:f8:4b:52:ed:99:2a:55:
4e:8f:6f:50:a2:d1:d9:e3:a7:f9:e8:cd:eb:b1:aa:
81:9e:73:fd:d6:e1:b8:c2:fa:21:c4:b2:9b:c2:31:
46:f6:17:8c:95:f5:3e:2f:d9:40:84:23:dd:a4:5c:
71:69:ee:f2:3b:0c:f3:cf:33:f0:64:d1:6d:79:b5:
45:34:80:35:e5:a2:7d:47:83:b4:8b:ba:5b:8d:62:
91:a8:55:b3:7d:ba:ef:42:29:7f:76:f8:15:71:e9:
02:d4:37:21:c3:f0:1f:d2:36:4e:db:f0:00:1a:18:
66:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:44:6B:20:C3:4D:82:53:9F:C2:CD:B6:5F:BE:23:E0:6A:45:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CEFB846A44011EF8FAB5460762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.213.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:3b:e1:31:8d:83:f5:43:0f:c5:f4:8d:28:8f:44:98:0b:68:
5c:e2:2c:a8:51:6c:87:13:d3:49:52:f8:b1:b7:7a:95:0e:e5:
c3:33:cd:1e:59:dc:34:36:0d:a5:c2:23:3f:c4:ff:f6:5a:11:
bb:b1:76:b5:c3:91:80:44:76:0e:b9:3a:bf:f3:41:12:9f:21:
d7:66:e4:9b:48:df:ec:c2:ba:90:be:4c:94:e4:d6:be:70:09:
41:4c:a7:58:c4:69:e7:bb:df:d0:9e:73:8c:9f:c4:d1:5e:4f:
e9:8a:b5:7f:ec:1d:d3:f6:5f:25:f3:e3:69:ab:77:7b:ab:ef:
a7:f7:06:d0:6f:dc:7e:9f:61:cf:72:c1:c3:ea:99:9b:a3:e9:
e4:a0:5e:00:b8:88:7f:39:38:15:63:10:02:5c:7d:8d:69:30:
0e:80:38:dd:0b:f4:76:18:7f:e0:7a:e5:cb:fe:82:68:c2:12:
63:0d:ee:ed:c8:f5:73:24:7b:f6:93:8a:bc:00:f6:ee:ca:3a:
97:d3:50:5c:19:67:bc:e4:47:73:61:4b:41:17:3e:aa:57:ce:
2d:78:c9:5b:a1:63:8b:87:5c:d4:64:7a:54:af:80:8b:54:9c:
6c:8a:e9:11:23:ae:d5:73:24:67:04:41:88:6a:6e:3c:5e:2e:
67:13:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:24 2024 by rpki-client on console-ams.rpki-client.org