Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/330E5028A19A11EFA4E35CB8762E951A.roa
File: 330E5028A19A11EFA4E35CB8762E951A.roa (raw, json)
Hash identifier: 1t2l3egn0C/h334LXj/UHLWFQEVa2JzgX2VCVHZeaHU=
Subject key identifier: DE:67:8A:AA:7A:D5:46:51:67:D3:E1:9B:BA:9D:BA:B6:D2:30:9F:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D250
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/330E5028A19A11EFA4E35CB8762E951A.roa
Signing time: Wed 13 Nov 2024 08:35:13 +0000
ROA not before: Wed 13 Nov 2024 08:35:09 +0000
ROA not after: Sat 23 Nov 2024 08:35:09 +0000
asID: 136950
IP address blocks: 45.204.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53840 (0xd250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 13 08:35:09 2024 GMT
Not After : Nov 23 08:35:09 2024 GMT
Subject: CN=673464c0-fed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:1f:1e:c5:de:b5:44:05:86:ee:a6:b6:10:
45:50:ec:e4:ef:95:f1:76:f8:58:1e:47:34:0d:79:
6b:82:ff:48:af:a5:7f:7c:ab:71:d0:8b:ea:f0:3b:
cd:ca:6e:00:7b:d6:67:31:de:67:82:45:a8:c0:17:
b7:16:8c:e1:13:35:ae:eb:25:33:ae:20:64:a9:ca:
ae:40:b7:f0:7b:68:aa:7f:62:b3:22:c3:fa:c3:22:
10:5f:6c:ae:4b:c3:2f:29:d7:0b:18:ee:3c:84:26:
26:b8:44:67:43:10:7e:7c:f4:51:ea:a4:d1:56:6e:
31:b3:c8:54:56:50:22:b1:3a:74:60:b2:70:e5:ba:
19:49:3e:08:e3:cf:27:65:58:8c:be:d3:04:69:b4:
69:ef:f2:ba:b1:e0:f6:00:c2:13:27:47:06:fc:81:
92:09:a0:bc:41:22:1c:31:76:70:ed:00:2b:9b:a4:
7e:44:f9:ba:11:12:e0:e0:fc:c2:21:33:f3:a3:b5:
05:a7:14:b3:5a:3e:8f:f7:b3:24:a4:d3:29:30:09:
08:73:f5:0b:51:49:ca:16:50:55:5c:45:00:aa:b5:
c9:e2:ef:45:e9:02:e6:4c:99:b8:3d:2a:bd:99:75:
27:40:64:c0:b7:6e:6e:73:ef:fc:0a:8e:6b:a7:91:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:67:8A:AA:7A:D5:46:51:67:D3:E1:9B:BA:9D:BA:B6:D2:30:9F:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/330E5028A19A11EFA4E35CB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.83.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c9:ba:c7:d3:61:f7:0e:88:69:19:1e:c7:f5:fd:4e:59:48:
83:32:c0:ad:d4:95:18:89:e7:77:8b:b8:e2:e3:35:cc:24:1a:
ff:74:91:08:0d:9a:07:a4:b6:66:1c:25:8c:dd:74:72:e1:30:
a6:74:33:36:8f:65:b4:41:0b:71:22:7c:75:f9:c1:28:11:31:
bd:93:d8:35:e9:1d:b8:86:eb:d2:d0:9a:71:0d:bb:f7:69:37:
4f:f6:a7:8b:82:d5:7f:db:37:71:57:21:d3:8b:0b:cc:6b:9c:
d1:d5:3d:a5:52:95:70:d7:0a:c3:b8:d6:e8:b1:ca:af:90:35:
bb:01:25:16:cf:a8:65:3b:7f:5d:58:22:b4:4a:a6:00:b4:b0:
19:68:e0:7a:3d:74:a3:51:a2:87:62:e5:be:eb:af:c2:78:31:
e3:31:bc:89:87:a2:b7:cc:17:9b:f8:e7:fb:59:5c:15:c5:17:
58:81:27:98:dd:ed:30:b7:06:31:12:31:6d:ab:16:4c:6c:54:
f6:aa:77:22:50:4d:72:1b:03:04:f4:30:56:2b:01:b5:c4:fe:
25:a0:8a:2d:03:ba:87:54:ef:07:e3:30:d6:13:c6:2e:9d:4c:
0d:a6:06:d0:5c:86:56:95:d4:a3:a0:75:85:1e:58:37:dd:87:
bb:64:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:25 2024 by rpki-client on console-ams.rpki-client.org