Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67AADA5EA74911EF9EFD5C75762E951A.roa
File: 67AADA5EA74911EF9EFD5C75762E951A.roa (raw, json)
Hash identifier: ovZOVnfmK36NaKbVfWUWzkNB2qAyFuctPXwt+lac9hg=
Subject key identifier: 2D:BE:DA:FC:36:6F:22:AF:9B:26:20:50:8E:6D:C5:93:2C:CC:F5:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D698
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67AADA5EA74911EF9EFD5C75762E951A.roa
Signing time: Wed 20 Nov 2024 14:11:59 +0000
ROA not before: Wed 20 Nov 2024 14:11:55 +0000
ROA not after: Sat 30 Nov 2024 14:11:55 +0000
asID: 202656
IP address blocks: 45.200.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54936 (0xd698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:11:55 2024 GMT
Not After : Nov 30 14:11:55 2024 GMT
Subject: CN=673dee2e-c21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:bc:01:57:27:2b:06:8c:75:0b:eb:30:00:
ec:d6:6d:de:e3:f9:e5:3d:94:74:f8:0e:50:56:10:
d8:aa:b7:dd:6e:d6:d5:2c:8c:3d:56:ed:66:5a:c7:
e5:c9:8b:95:93:d0:e9:25:fb:61:e4:25:6a:68:04:
26:b9:6c:e7:a6:d0:7a:69:b6:89:4d:15:b8:98:3e:
21:93:8f:e0:59:c6:22:ea:84:dd:15:b0:df:ed:60:
f9:d0:04:0b:b6:cd:e8:12:3c:e6:63:5b:b9:50:9b:
40:33:fa:da:65:6f:24:3f:22:00:6c:4b:7e:3c:e2:
40:94:8a:1f:7d:06:6a:7d:50:dd:c6:51:47:a0:51:
d5:af:22:d8:40:ce:16:f6:f2:af:55:02:59:09:04:
9d:be:0f:58:01:c9:9b:81:9a:56:fe:d4:65:fe:18:
24:3d:a0:2d:d2:b5:36:69:a7:39:e7:1d:5f:1a:0c:
20:6e:f6:0a:b2:f3:a8:e2:34:e9:03:53:d0:c0:a0:
00:6a:1a:8c:01:1c:a8:5d:ab:0d:f1:43:d2:f5:7a:
97:cb:2c:d2:11:89:11:b9:3f:55:b6:de:63:3e:8b:
2b:6d:ed:b9:8d:f0:1b:c9:ec:fd:62:84:6c:05:af:
36:2b:07:2e:8f:5b:01:8f:df:24:54:29:7c:b6:8a:
d0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BE:DA:FC:36:6F:22:AF:9B:26:20:50:8E:6D:C5:93:2C:CC:F5:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67AADA5EA74911EF9EFD5C75762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.176.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:76:46:6d:b4:67:aa:0d:88:83:cc:24:a9:49:bb:1c:a6:fc:
cb:3d:9c:d9:2a:fe:5b:39:4f:61:c9:50:5d:3a:d5:fb:bb:3c:
1a:56:51:41:3f:db:37:9e:d1:7c:47:67:65:6b:b0:a4:cb:1a:
1f:83:c0:8d:92:73:02:e2:4a:ed:a5:3a:72:18:b6:8d:15:5c:
c2:73:02:44:48:5b:fc:97:fe:05:40:85:83:17:6e:63:c7:f6:
be:cf:88:3c:11:c3:f7:54:53:10:cf:97:41:46:b8:27:4f:84:
e8:32:56:65:c8:95:83:68:52:ec:b3:b4:60:2f:34:b8:6a:b7:
60:bf:29:f0:64:a5:96:96:cd:a7:93:fd:27:65:74:86:97:99:
32:08:74:56:18:eb:51:6f:08:56:12:de:ba:12:d1:62:42:a3:
3c:d2:03:d8:6c:7c:f6:75:2b:72:93:ff:e5:a5:77:16:4d:f7:
f1:06:cc:23:38:2b:a6:75:fc:88:a5:d3:91:3a:bc:97:0f:98:
15:55:5f:8a:2c:0a:03:e6:91:1f:be:8b:bf:e9:2b:6e:f0:ac:
5a:b7:2f:55:4f:98:ed:ba:98:ec:ce:d5:16:f1:84:44:d0:2e:
8b:52:f9:90:1f:47:c5:17:b1:74:e3:2b:de:fa:b7:83:9d:7d:
b8:e9:6c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:34 2024 by rpki-client on console-ams.rpki-client.org