Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FBA7F2CA25E11EF9C648085762E951A.roa
File: 2FBA7F2CA25E11EF9C648085762E951A.roa (raw, json)
Hash identifier: fiYSlEIp4JbqG6TERHeY8whtw1Vofa4XVovFHVU9bOs=
Subject key identifier: 8E:18:30:5A:21:C1:16:77:0A:75:CA:4F:AE:BA:3A:27:B9:1A:8E:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D287
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FBA7F2CA25E11EF9C648085762E951A.roa
Signing time: Thu 14 Nov 2024 07:58:08 +0000
ROA not before: Thu 14 Nov 2024 07:58:05 +0000
ROA not after: Sat 14 Dec 2024 07:58:05 +0000
asID: 6079
IP address blocks: 45.205.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53895 (0xd287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 07:58:05 2024 GMT
Not After : Dec 14 07:58:05 2024 GMT
Subject: CN=6735ad90-eaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ee:07:aa:ae:b1:2f:26:ab:33:96:bb:09:31:
45:56:08:29:88:10:3a:2b:86:84:d0:0a:dc:59:ca:
f0:af:59:25:b2:b9:a9:67:95:79:e1:d2:be:a6:bf:
bb:38:38:07:95:1d:54:91:8f:57:6a:e2:40:06:cf:
42:63:0e:de:a9:0f:4c:8b:e6:bb:90:3c:60:9b:35:
66:68:5f:ff:b1:f3:ae:d9:20:76:5f:6a:69:80:83:
7b:4d:72:14:95:2f:00:76:44:14:5c:e4:91:0c:2e:
bd:46:6f:3c:4c:1d:50:c4:5b:5d:1a:b6:19:69:62:
6f:d4:64:cf:4c:dc:b6:d1:b8:92:b6:90:e5:b4:82:
34:96:88:ce:a2:7d:7d:e0:23:b2:35:1f:5f:54:67:
71:21:de:ca:a4:d2:e3:14:e4:f6:f4:81:0c:0c:6a:
fa:20:8b:1e:83:ec:3a:ac:03:d1:07:84:4d:31:5a:
ef:45:3f:a5:b9:30:2c:40:e1:d6:8e:b4:bc:7c:85:
12:a5:64:63:58:61:ee:c4:f7:38:bc:2e:70:95:35:
fa:99:87:75:67:b4:ff:e3:6f:98:bf:9c:e0:5d:e8:
a6:c7:cc:15:90:07:fe:2c:8f:08:5d:3b:33:1b:f0:
71:52:d6:46:05:33:f8:78:05:4c:6e:6e:22:9c:58:
e1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:18:30:5A:21:C1:16:77:0A:75:CA:4F:AE:BA:3A:27:B9:1A:8E:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FBA7F2CA25E11EF9C648085762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.76.0/22
Signature Algorithm: sha256WithRSAEncryption
95:78:1d:41:11:50:78:28:0b:73:5a:fe:82:5f:6b:48:77:a4:
07:f4:fd:58:1a:2d:e5:ba:7a:5b:1c:c2:a7:0e:5e:b2:78:15:
dc:f8:01:e5:a2:36:f5:21:03:a6:2c:a6:0a:ea:d9:90:4d:83:
e2:b6:db:28:b8:d6:23:cc:ca:c4:27:93:1b:c7:20:e6:4d:29:
d4:b4:47:c4:b5:78:65:60:10:5a:30:4a:36:da:40:a0:4c:09:
4f:97:65:8e:5a:72:46:e4:2e:97:e6:e2:1b:eb:37:31:64:9c:
6f:fd:09:bb:28:b8:89:c1:6c:02:1b:e6:ed:20:19:03:56:c7:
08:ea:d4:23:54:8e:83:e3:69:f8:50:d6:4e:ac:7c:89:39:52:
be:98:ac:db:90:c2:03:d2:91:1e:23:f7:1d:ff:23:39:0b:7d:
ff:63:26:b6:e4:d2:b3:1c:26:93:b8:c1:fd:dc:98:3e:85:e7:
c4:2c:2e:24:7f:94:b2:d0:33:8b:98:2a:26:b1:25:5a:64:35:
7e:b7:85:e1:fd:9f:ea:97:c6:36:61:bf:24:09:a4:5c:91:82:
7c:6b:0a:85:3e:45:1e:f3:a2:92:9f:0f:4d:46:73:59:d7:4e:
f8:e9:32:74:3b:64:03:05:1c:e7:fb:00:f2:bb:fa:75:18:39:
22:02:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:23 2024 by rpki-client on console-fra.rpki-client.org