Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E18EE7CA44A11EFB618619C762E951A.roa
File: 2E18EE7CA44A11EFB618619C762E951A.roa (raw, json)
Hash identifier: BuGxDFmy8dFz9oiHdT/7zID2blGtM6yP9Emk6lXEfOU=
Subject key identifier: 43:59:93:9E:00:87:DB:FE:48:8B:05:B5:F2:EE:24:71:C7:71:28:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D3A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E18EE7CA44A11EFB618619C762E951A.roa
Signing time: Sat 16 Nov 2024 18:39:58 +0000
ROA not before: Sat 16 Nov 2024 18:39:54 +0000
ROA not after: Mon 25 Nov 2024 18:39:54 +0000
asID: 9009
IP address blocks: 45.192.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54178 (0xd3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 18:39:54 2024 GMT
Not After : Nov 25 18:39:54 2024 GMT
Subject: CN=6738e6fe-995f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:3f:7c:08:d6:6f:cc:f2:02:69:26:ad:5b:
d2:34:55:07:bd:d8:9a:96:b2:22:66:e1:2a:31:04:
06:43:77:3d:f2:ae:f2:a8:db:31:42:29:0c:4a:19:
63:98:fd:96:9a:1c:26:4f:50:18:ea:0c:06:dd:63:
c4:28:0e:cc:c4:e7:d0:6c:7e:f2:2b:34:af:2a:f1:
30:9b:38:f4:c4:25:ac:17:c1:b5:5c:e4:ce:40:56:
18:9a:4f:a4:9e:1b:04:ad:b5:f5:b5:f8:8a:cd:05:
46:f8:3e:6d:05:86:e1:98:96:ae:97:17:8f:70:c9:
e3:a0:4d:29:4c:fd:3e:a1:1a:21:8f:ae:76:33:3a:
4f:c5:5c:b7:0a:bc:bc:0b:fd:c1:ad:3c:09:f0:9b:
53:73:0f:2b:66:45:ce:86:a0:ed:86:44:bf:9c:c5:
e3:d1:0a:b2:d4:18:4e:25:64:93:3c:f1:ba:d9:69:
f4:d3:9c:91:8e:55:48:bd:64:dc:d0:32:c1:d9:b6:
7c:22:31:01:02:49:c6:09:6d:03:38:6e:a1:5f:7b:
92:b9:39:39:59:fd:b4:b1:81:f3:1c:ef:d0:e3:fb:
93:5f:4c:a5:a6:51:d0:ac:07:a1:7c:c9:fa:dd:7e:
ae:7d:88:c7:5a:a1:4e:12:ae:87:10:08:72:7e:53:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:59:93:9E:00:87:DB:FE:48:8B:05:B5:F2:EE:24:71:C7:71:28:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E18EE7CA44A11EFB618619C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.131.0/24
Signature Algorithm: sha256WithRSAEncryption
14:71:7b:de:db:65:db:73:2a:17:a5:23:64:f8:7a:fe:4a:b3:
2a:86:d5:aa:2e:45:a5:aa:f0:45:2c:b7:ad:33:74:4e:88:f5:
b8:50:56:4e:08:89:9e:4c:ec:f5:96:fe:b2:40:52:58:a0:c9:
49:35:14:fe:c3:89:ce:81:0f:f8:8d:58:3d:0e:09:cd:20:86:
8b:d5:f8:a9:12:2d:22:22:7a:94:52:99:a7:88:30:85:b1:a2:
12:8a:35:7f:2c:cf:9d:8d:d5:a9:81:3c:59:60:4b:bc:60:fa:
92:db:bf:6b:ef:8b:5b:ba:52:4c:e1:a8:e4:9c:2f:99:4e:aa:
c0:d6:9e:eb:bb:43:5f:30:d4:6d:ba:44:90:7a:8a:38:0a:c5:
b0:54:20:73:ea:d2:fa:58:29:10:1f:e1:c9:57:01:63:a5:f1:
ad:5b:86:7b:d2:18:23:e3:11:1e:7e:2d:db:b6:78:09:f9:8b:
ee:86:c3:7e:87:a6:8b:42:a4:5c:06:b1:44:58:27:cd:44:b4:
6b:32:c0:ba:31:0b:6c:a6:42:6f:e4:7e:a2:b0:7e:ed:69:61:
64:3d:b8:13:52:85:5e:30:c1:cb:7b:06:ca:b0:29:bd:5d:7e:
2e:86:b5:c2:1c:ca:cb:01:a1:74:ee:73:37:a8:09:ac:3f:fa:
aa:c0:9c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:23 2024 by rpki-client on console-fra.rpki-client.org