Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E6B0E8A74C611EFA59B7E99762E951A.roa
File: 3E6B0E8A74C611EFA59B7E99762E951A.roa (raw, json)
Hash identifier: xsfixunhMD9r3lg03sY/V1L/aSrhSm+wvXJBCLnfd0Q=
Subject key identifier: 43:49:9B:CB:2D:F9:D6:4A:4F:5D:95:8C:77:D1:8E:BF:B8:F0:7C:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B7A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E6B0E8A74C611EFA59B7E99762E951A.roa
Signing time: Tue 17 Sep 2024 07:27:07 +0000
ROA not before: Tue 17 Sep 2024 07:27:04 +0000
ROA not after: Fri 08 Aug 2025 07:27:04 +0000
asID: 133199
IP address blocks: 45.204.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47010 (0xb7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 07:27:04 2024 GMT
Not After : Aug 8 07:27:04 2025 GMT
Subject: CN=66e92f4b-00d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:d5:b4:a3:19:00:e2:96:54:73:94:95:00:
90:bc:90:cf:bd:94:88:3c:1b:18:b3:f7:41:8b:5c:
29:e2:61:76:76:35:2e:c5:67:d2:42:7c:e0:cd:16:
27:12:46:b5:72:36:0c:f5:60:a8:db:4c:94:7d:5f:
25:ea:d0:79:88:74:32:84:4e:62:a0:8c:94:73:91:
87:a1:81:df:a8:e0:7c:3d:df:1b:d7:94:06:44:c7:
70:d1:45:17:d7:55:aa:36:c1:c1:0c:96:94:47:21:
f8:5a:88:9e:a3:56:9b:d7:63:5d:8e:5d:e2:0c:ff:
0f:62:4c:1f:05:3f:03:8e:69:7a:80:b2:f0:d5:db:
70:7a:bb:a6:10:e2:9d:cc:39:fd:fa:a4:da:e4:08:
80:0e:6a:13:e9:d1:a9:1f:6b:0e:53:0b:47:ba:5d:
e1:7f:e1:eb:c9:90:ef:14:f3:ab:91:93:eb:2a:f0:
3d:d1:4f:13:e2:1a:49:f9:5d:b5:cd:10:db:0b:1d:
ee:c1:9b:b4:78:9c:d2:09:91:bb:c1:df:66:94:5c:
fb:89:53:f2:05:86:53:8d:84:a7:2e:5c:a2:08:b3:
0e:63:5e:ec:8b:92:74:2a:8d:a4:44:04:8a:d3:8c:
46:ab:37:1d:25:fc:4c:a4:70:f5:fb:94:ef:6f:6d:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:49:9B:CB:2D:F9:D6:4A:4F:5D:95:8C:77:D1:8E:BF:B8:F0:7C:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E6B0E8A74C611EFA59B7E99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.2.0/23
Signature Algorithm: sha256WithRSAEncryption
86:9f:0b:b5:b1:ee:73:ac:8f:7e:dd:9b:61:b2:4d:78:89:4d:
aa:6b:70:00:f6:2f:e1:b5:a2:c9:6e:e4:1f:0c:55:7b:70:37:
e6:57:16:02:c4:31:3a:cd:d8:22:4d:1b:2d:2e:b2:67:1b:29:
bb:04:73:9c:43:6e:12:9c:41:60:1f:e6:78:69:c7:89:b2:f5:
b2:9b:af:cd:e6:40:ef:83:47:35:0b:22:78:a2:8c:be:7c:c2:
f9:17:15:91:58:71:5e:18:d7:47:ce:d3:45:ed:33:8c:ea:a8:
39:55:f1:a8:90:9a:8e:60:ff:fb:17:d8:62:b7:fb:eb:ff:ed:
91:18:5e:7e:4b:a6:5f:52:d3:c9:d7:16:d3:0b:ea:8a:0a:00:
48:28:2e:86:8d:f2:b2:57:d7:cd:2a:63:84:b7:dc:ef:7c:9f:
dd:52:c1:16:c5:e2:be:fe:25:d8:ec:90:a3:c3:81:37:c9:88:
c4:48:bb:c6:fa:99:c5:c8:fa:12:58:ae:be:2d:19:6e:3e:d8:
47:af:9c:04:1a:ce:6a:08:64:1c:1e:1d:02:ea:04:97:b3:ee:
28:39:99:df:06:d5:a5:58:22:fc:73:78:ce:30:6c:b1:cd:d3:
df:fc:ee:8b:d4:f3:b9:4b:91:72:bb:3a:53:b0:c5:4e:ab:ea:
52:ae:0c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:26 2024 by rpki-client on console-fra.rpki-client.org