Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30D3D4969AB411EFB692139A762E951A.roa
File: 30D3D4969AB411EFB692139A762E951A.roa (raw, json)
Hash identifier: s1AHzWA/4Fp2HlSNlYRE15Uk66pUmYKDWJLPTGdHeGY=
Subject key identifier: 38:F2:3B:30:9F:6C:65:40:94:70:20:7A:3D:4F:A2:1E:6E:E8:6C:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CDE2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30D3D4969AB411EFB692139A762E951A.roa
Signing time: Mon 04 Nov 2024 13:53:38 +0000
ROA not before: Mon 04 Nov 2024 13:53:34 +0000
ROA not after: Wed 04 Dec 2024 13:53:34 +0000
asID: 215691
IP address blocks: 45.198.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52706 (0xcde2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 13:53:34 2024 GMT
Not After : Dec 4 13:53:34 2024 GMT
Subject: CN=6728d1e1-65b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:91:d5:b1:bb:f5:ca:b5:2d:83:32:0e:4a:
72:db:61:bc:a2:f3:89:cf:30:0e:c1:90:7b:7f:f3:
5e:58:2c:7f:d8:ed:c1:4f:47:3b:2a:7c:a2:5e:62:
d2:a5:a5:50:69:41:17:d9:aa:7a:a0:a0:78:d6:d4:
f4:2e:64:8d:ac:5d:f4:1b:e1:9a:98:aa:12:12:75:
94:99:95:53:52:4b:b4:d0:0a:90:fa:59:30:a9:64:
2c:17:3b:42:8a:c3:c3:e9:86:24:f9:4d:6a:74:0d:
37:0d:b3:ef:e3:e9:2d:08:c1:44:d0:0f:20:35:c3:
7f:76:ad:25:ce:e7:92:28:f2:9a:53:95:6c:d8:aa:
31:1f:d0:e2:9a:10:fe:f3:b7:e4:53:80:6f:6f:16:
98:e9:53:b2:4f:3f:13:ee:4f:47:e2:6c:dc:ec:38:
85:2b:05:a2:96:b6:41:6c:78:f8:e9:a2:db:3d:6e:
d7:87:79:f3:c7:ac:97:0b:c4:1b:75:74:e8:59:1f:
42:13:80:cc:21:9d:73:f9:01:93:fd:90:f0:bd:67:
d6:a1:80:e5:3f:df:a6:da:f6:df:f4:4d:6c:25:81:
f7:a6:b1:34:e1:0f:25:23:3a:0d:ec:83:61:99:79:
1b:ec:9e:e2:3c:8a:54:47:58:92:36:ab:92:41:aa:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F2:3B:30:9F:6C:65:40:94:70:20:7A:3D:4F:A2:1E:6E:E8:6C:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30D3D4969AB411EFB692139A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.54.0/24
Signature Algorithm: sha256WithRSAEncryption
50:81:41:1b:d3:ab:30:6f:39:27:aa:a6:80:4b:80:c9:b6:ab:
4f:f5:0f:97:11:78:dc:be:91:0e:27:1d:37:9e:47:16:f2:ef:
a5:10:cd:c8:36:89:85:8c:56:46:e0:6e:3a:6e:68:64:5a:c8:
8b:88:11:f1:4a:f8:da:45:d5:fc:53:a7:13:b3:14:ad:1e:3d:
8a:e4:ac:73:c3:24:a8:a8:ed:09:f7:0a:35:4a:22:25:a8:d1:
4d:82:22:01:61:9e:3b:54:87:51:47:3d:e9:29:6a:9b:05:b8:
c7:8d:ff:7f:9c:f6:92:f5:97:2b:af:bf:a1:dd:00:ab:f6:f1:
b1:a6:0b:0f:90:49:d7:c8:7a:bd:b8:b3:3a:c8:6a:5a:06:dc:
8c:85:4b:04:63:75:f0:af:46:e6:f1:1b:47:96:08:ca:75:9c:
1b:9a:c6:c5:cf:db:d2:d4:23:79:5d:b7:81:c5:40:f7:31:37:
1c:9c:2d:30:a7:23:e7:91:02:21:f5:99:ea:d4:23:78:e7:28:
aa:ab:c1:b3:a8:2c:15:a9:7f:14:ba:2d:fa:40:6d:94:2b:f7:
51:f2:df:f7:45:51:a8:b2:46:05:64:3b:a1:5e:ea:a4:ef:6e:
98:7d:b0:25:61:d2:ce:2e:4a:ae:d9:37:0a:e8:b7:0f:99:c0:
d6:89:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:23 2024 by rpki-client on console-fra.rpki-client.org