Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FD80AC0A19811EF9DF588AA762E951A.roa
File: 4FD80AC0A19811EF9DF588AA762E951A.roa (raw, json)
Hash identifier: lcVeXI9zwts2VCyEFqQ5ZD1x1QgyTnxSmc+Kum0Qupw=
Subject key identifier: 06:E8:D6:7B:B0:2B:EB:2A:BF:EE:67:E1:33:00:8C:EF:B3:00:E0:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D23C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FD80AC0A19811EF9DF588AA762E951A.roa
Signing time: Wed 13 Nov 2024 08:21:42 +0000
ROA not before: Wed 13 Nov 2024 08:21:38 +0000
ROA not after: Fri 22 Nov 2024 08:21:38 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 08:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53820 (0xd23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 13 08:21:38 2024 GMT
Not After : Nov 22 08:21:38 2024 GMT
Subject: CN=67346196-ec4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:f2:00:a1:2c:9b:16:e3:b6:34:22:3d:ba:
27:8a:e1:53:f3:c8:6d:31:54:b2:e0:75:4a:c6:b4:
b9:00:64:dc:05:03:d9:25:88:f7:53:8f:03:af:a3:
eb:33:5d:3f:64:34:08:23:14:78:0e:62:7e:22:a0:
15:12:79:34:37:89:1c:3b:17:b4:91:dc:19:03:a4:
df:e3:83:9c:44:34:86:81:60:28:3a:dd:be:67:e3:
34:b0:6f:63:de:87:c5:7a:7f:8d:91:c5:a7:f6:d9:
48:17:95:74:eb:ed:f5:e7:49:c6:8b:0f:e1:ed:80:
fa:06:ec:09:2c:43:0a:eb:4f:f4:08:68:97:2c:67:
93:52:24:25:b7:1c:c3:48:a8:46:db:9f:8d:38:c1:
4e:ca:f5:4e:4a:e0:7a:0a:2e:9b:52:d9:4d:db:d5:
5b:84:a0:7d:3c:29:71:a7:55:a1:00:72:9d:73:75:
89:df:e9:26:2c:81:af:af:6c:5e:16:5b:05:1e:3e:
0e:63:b1:f7:05:f7:15:b8:7f:b8:8d:6a:da:03:cb:
81:a0:8a:b5:70:0b:9b:2a:a7:a7:f9:24:dc:99:4e:
9d:a1:ca:14:45:0d:5c:bd:5f:9f:30:76:e1:ea:a0:
6e:20:96:a5:16:4e:cf:68:96:e1:1e:58:09:16:73:
31:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E8:D6:7B:B0:2B:EB:2A:BF:EE:67:E1:33:00:8C:EF:B3:00:E0:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4FD80AC0A19811EF9DF588AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:03:7f:84:98:8d:a4:01:d9:46:1f:19:fa:b6:2a:15:25:23:
40:7f:50:bb:77:87:3e:e5:63:b0:0d:83:74:a7:fb:a3:55:aa:
b8:40:6c:80:65:b4:82:98:7f:7d:bd:ba:9c:35:d1:f2:a2:45:
fb:4b:e1:5b:d8:a0:61:e8:3e:cf:9f:e8:0c:b7:fe:9a:44:8e:
ce:eb:de:1b:60:de:1c:27:25:4b:79:f1:63:90:36:a7:5d:cd:
76:ea:2b:85:c0:a0:23:f1:3a:f4:20:0f:a4:b0:f3:6d:57:c5:
2a:10:e8:12:e3:43:29:89:42:50:d9:4e:c2:52:29:2c:b6:4c:
58:94:2b:3a:09:e9:76:e4:79:91:36:e3:2a:4e:cb:b6:51:b2:
04:2f:84:a2:b8:2f:57:e0:f5:2e:16:e6:83:36:82:36:25:b7:
88:ad:70:ff:09:e3:2c:5b:b9:3d:ee:a0:d7:b8:c2:04:37:d2:
61:9d:85:49:8a:52:07:78:36:2f:24:24:0a:f4:ff:fe:74:18:
15:9e:52:80:d9:25:85:f5:d3:d4:95:ff:94:f1:90:d0:a3:d6:
30:47:2c:a9:ef:db:ae:12:cd:a4:e8:1e:7f:63:e9:46:2c:cb:
91:55:9f:58:2e:30:3b:ef:a4:f6:b9:75:28:2c:fb:ea:2a:1e:
ab:7f:54:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:28 2024 by rpki-client on console-fra.rpki-client.org