Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/617AE4F2A73B11EFBB1ECD9D762E951A.roa
File: 617AE4F2A73B11EFBB1ECD9D762E951A.roa (raw, json)
Hash identifier: BnRVkEtlouQ8UVAw10f71+46HGCLDtUK2O2bQ098JcA=
Subject key identifier: A8:56:9F:DC:A7:0B:43:65:37:97:B0:F9:F3:E0:B4:24:39:66:D3:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D611
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/617AE4F2A73B11EFBB1ECD9D762E951A.roa
Signing time: Wed 20 Nov 2024 12:31:35 +0000
ROA not before: Wed 20 Nov 2024 12:31:31 +0000
ROA not after: Sat 30 Nov 2024 12:31:31 +0000
asID: 138630
IP address blocks: 45.204.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54801 (0xd611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 12:31:31 2024 GMT
Not After : Nov 30 12:31:31 2024 GMT
Subject: CN=673dd6a7-4dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7f:f4:a4:25:6f:09:cd:3d:f0:2d:ed:92:4d:
71:71:cd:85:1b:33:cd:5e:fa:43:7a:b7:3e:9d:8c:
1a:09:c9:0e:aa:ca:76:7b:94:ec:b3:de:15:47:33:
23:78:ea:2c:05:2d:2d:69:6a:bb:57:f7:16:2f:3f:
a4:de:b4:0b:5b:99:49:71:38:2b:d8:4a:48:eb:03:
63:e4:8b:c3:4f:83:30:e6:0e:a7:4e:f2:90:13:59:
3f:4d:b2:87:06:ff:26:3c:cb:e8:99:ec:7b:74:e5:
95:7b:f4:67:8d:38:ca:10:3b:e9:cf:94:9b:49:4a:
c6:9c:30:14:da:9b:e3:21:17:7a:f9:8a:a0:57:ee:
c5:90:a1:73:47:47:ca:91:62:14:a1:77:e2:4e:08:
f7:79:d6:f3:de:66:31:6a:ff:7e:a3:ec:39:c1:a6:
79:dc:47:81:37:a6:2d:58:a3:f7:8f:64:f5:6b:58:
dd:4d:8c:a1:36:6f:14:c3:f8:8c:ef:9a:af:dd:23:
13:cb:6d:1f:85:8f:51:cb:47:82:b9:5d:ea:6c:95:
85:2c:0f:98:99:dc:a5:b4:99:17:78:fd:8f:03:8c:
5e:bc:d5:1a:97:bc:b7:1f:65:f0:43:ee:a7:e9:fe:
69:b2:fb:04:ab:3d:71:6b:6c:d9:90:8e:8a:4d:82:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:56:9F:DC:A7:0B:43:65:37:97:B0:F9:F3:E0:B4:24:39:66:D3:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/617AE4F2A73B11EFBB1ECD9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.80.0/20
Signature Algorithm: sha256WithRSAEncryption
65:02:e5:7b:7c:d1:b1:f9:9e:92:ed:70:57:1e:11:73:86:b3:
92:93:0b:81:19:3d:4c:f1:c9:d6:11:12:88:51:ef:9e:d3:1c:
66:4b:1a:c1:cb:61:1f:7e:62:78:dd:30:22:81:f2:6b:56:2f:
a5:f0:61:19:b2:33:9b:72:79:67:3a:83:1f:1b:fa:53:74:23:
14:82:c7:ea:9b:b9:4a:ef:30:b0:e8:59:a3:e9:96:5d:bc:c3:
fb:2a:19:1f:2b:74:df:ea:29:b7:35:d2:a1:0d:0e:7f:97:e6:
f9:1f:5b:be:d7:da:95:30:73:d3:f5:c2:23:e1:3b:fa:77:c3:
89:8c:68:0b:1b:26:ae:fe:b3:4c:f8:d8:72:7f:e2:d9:73:9d:
cc:0d:fb:ca:01:8b:de:d7:4b:d9:8c:e3:b1:da:10:dd:95:f8:
92:41:f5:36:d5:94:3b:b6:36:ba:53:ab:cc:9c:c5:54:81:c2:
59:86:e7:70:08:d2:48:bd:8d:71:43:fd:13:c1:5f:b3:63:f1:
a7:b7:f1:3a:c7:76:db:d3:f5:cb:19:63:c1:40:95:99:5c:f9:
b9:f1:0c:30:5c:c9:2b:d1:64:5d:fa:ac:52:71:df:2e:49:6f:
5e:f3:e4:68:2f:97:4b:b2:1a:28:93:17:1e:ec:27:03:94:0a:
37:7b:45:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:31 2024 by rpki-client on console-fra.rpki-client.org