Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA5107C9F7C11EFAD240AB8762E951A.roa
File: 2FA5107C9F7C11EFAD240AB8762E951A.roa (raw, json)
Hash identifier: +wqvpXc23Mum6a22vg9mA+RwPQdCZfinKmc4NBFv/w4=
Subject key identifier: 0F:21:F3:D5:F7:28:2E:BD:B5:E1:9B:68:FA:D3:8C:2D:52:11:1F:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D0F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA5107C9F7C11EFAD240AB8762E951A.roa
Signing time: Sun 10 Nov 2024 15:55:20 +0000
ROA not before: Sun 10 Nov 2024 15:55:16 +0000
ROA not after: Thu 12 Dec 2024 15:55:16 +0000
asID: 54600
IP address blocks: 45.205.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53488 (0xd0f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 15:55:16 2024 GMT
Not After : Dec 12 15:55:16 2024 GMT
Subject: CN=6730d767-d81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ab:98:c6:62:7a:99:d0:cd:66:bf:73:ef:f2:
82:e0:27:96:3c:37:93:e0:f2:b3:11:ff:60:01:41:
be:8d:dc:09:17:9d:59:9c:3a:6b:7c:21:6b:b9:69:
3d:6a:80:78:01:36:c2:e8:da:f7:03:42:6c:eb:77:
e1:51:7b:6b:f0:f9:78:51:bc:db:af:d9:ec:7e:0c:
aa:72:ed:a1:f3:0f:f0:0e:b5:ac:6f:3b:c0:d3:aa:
63:db:d2:7e:ae:b8:b6:f0:36:53:d3:eb:2b:f1:d2:
ca:93:63:3a:02:f3:ba:f2:84:17:f4:c3:78:e9:92:
18:82:61:50:37:61:2d:26:35:bb:50:23:5b:96:39:
c9:0f:2d:64:c1:2e:a4:8d:b4:42:e6:f3:88:f3:92:
14:12:bf:a1:80:86:3a:6e:97:8a:89:c2:a8:d3:fb:
bd:43:b1:a7:68:7d:db:09:e6:4f:fe:ad:e3:ca:ae:
a6:41:f0:19:5e:d1:6a:22:82:d2:b3:87:e7:ec:c1:
ba:a0:9d:63:8f:8a:26:b7:6d:c6:d0:40:f9:86:7c:
15:ff:6f:ea:ec:02:91:8b:7d:e0:c4:ae:1a:80:fb:
f5:f2:dd:dc:fb:3f:21:38:eb:4b:ce:06:6e:b7:c1:
cc:d0:d0:93:3c:46:25:0b:53:bb:94:9e:4b:36:3a:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:21:F3:D5:F7:28:2E:BD:B5:E1:9B:68:FA:D3:8C:2D:52:11:1F:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA5107C9F7C11EFAD240AB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:f4:a2:99:2b:00:55:9a:27:33:34:a7:26:2e:44:97:9c:e5:
bf:95:25:06:f2:92:af:25:9d:a2:83:31:90:d0:79:51:81:5f:
f9:44:b7:08:d0:2c:5b:64:5c:d0:27:a8:82:c9:b8:b7:57:0f:
29:0e:77:93:c6:8a:ce:0b:27:ca:80:4f:fa:08:81:db:79:61:
4d:8c:56:e1:55:03:4e:ed:e2:4d:6b:d3:ee:c3:c3:30:3c:ad:
08:e3:52:f5:90:ac:97:64:bf:aa:93:44:97:93:e3:2c:0c:66:
ea:0e:ef:ec:00:c8:ac:b2:da:57:8a:ae:5f:ea:81:b6:41:b4:
c5:38:e6:b7:5f:2c:59:e2:ca:f7:76:e8:cc:1b:b7:ab:02:47:
5f:e1:13:d0:6b:40:29:69:3c:63:b1:ae:a8:3d:b7:90:cd:50:
20:f1:ea:02:c6:5c:aa:41:6a:68:7b:98:ed:69:02:4c:7c:ea:
d0:ea:60:48:3e:54:d2:af:d2:ce:71:f2:dd:ac:89:98:2f:f9:
83:f0:de:fc:c3:8e:39:19:a4:df:64:4a:f9:29:8b:7f:ff:d3:
98:c6:32:c2:24:6f:11:fe:06:03:aa:43:fd:61:97:d4:a0:0a:
6e:ef:c3:5a:d9:88:3d:09:79:6b:cf:5b:3f:cc:0d:69:7b:33:
a9:87:18:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:24 2024 by rpki-client on console-ams.rpki-client.org