Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67DF3AC0ACA211EF8E892CA9762E951A.roa
File: 67DF3AC0ACA211EF8E892CA9762E951A.roa (raw, json)
Hash identifier: QcssIoKswz28tmCTVS3S6AdjD8rNZeoHssbqP+C2uro=
Subject key identifier: 24:B6:ED:59:7D:76:70:B2:A2:76:8C:F0:A6:CC:06:96:E4:0F:BA:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DBE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67DF3AC0ACA211EF8E892CA9762E951A.roa
Signing time: Wed 27 Nov 2024 09:31:40 +0000
ROA not before: Wed 27 Nov 2024 09:31:36 +0000
ROA not after: Tue 11 Feb 2025 09:31:36 +0000
asID: 9009
IP address blocks: 45.192.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Dec 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56288 (0xdbe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 27 09:31:36 2024 GMT
Not After : Feb 11 09:31:36 2025 GMT
Subject: CN=6746e6fc-2c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:0b:d3:3c:07:53:f6:92:d3:2b:74:a8:f8:
a6:6b:75:cf:1c:98:6b:f5:14:1b:64:0a:18:ef:6f:
31:bc:3c:e2:66:45:5e:da:51:25:00:82:3a:3a:17:
7c:f7:5b:cc:56:33:34:b8:f7:3c:92:7b:dd:0f:6b:
85:98:9c:a7:f5:01:e7:f0:20:53:d5:9f:14:71:2d:
ac:87:ac:49:9b:74:f1:46:74:ae:e0:c9:ba:06:8d:
d5:ec:f1:88:80:53:35:94:bb:30:02:9a:d5:33:f1:
55:35:0b:70:0a:da:cc:a2:a6:90:d8:51:3a:d8:93:
29:db:64:af:70:b4:8d:e8:7a:89:5b:5c:b2:d7:66:
6b:70:11:02:36:d0:6c:dc:d3:a7:46:11:f7:50:58:
ad:c0:ff:70:a8:41:bc:85:f3:a7:f5:dd:1a:98:a8:
ad:44:70:61:66:d3:31:a1:ef:69:0c:65:72:6c:93:
bd:d7:d6:86:e6:cb:0b:8c:57:24:2e:ef:7a:d0:2e:
3e:f0:fe:b4:51:46:04:03:0d:1c:7d:14:76:9c:6f:
dc:6f:65:a3:f0:88:c2:45:f0:ce:47:42:38:14:5f:
c4:08:ed:f5:81:da:c6:1a:d4:68:e1:52:6a:c6:65:
e4:d4:e0:96:91:e0:d3:0c:d8:e2:67:17:20:e1:6d:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B6:ED:59:7D:76:70:B2:A2:76:8C:F0:A6:CC:06:96:E4:0F:BA:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67DF3AC0ACA211EF8E892CA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.130.0/23
Signature Algorithm: sha256WithRSAEncryption
77:78:d7:61:8c:1d:3f:f8:e9:a5:72:8c:98:0c:3f:26:4e:9f:
5d:db:b1:f6:b1:e1:b9:55:36:96:4a:5e:e3:08:a5:b1:15:91:
ab:14:69:6b:c0:49:9f:d4:1c:5f:e3:d3:2b:e9:75:c7:a5:3b:
81:46:55:6d:26:c2:bd:b3:f8:3b:a3:77:24:51:a7:30:a2:29:
fb:38:33:db:2b:53:c0:3e:00:72:92:5e:0b:dc:cc:d7:9e:5a:
80:33:b7:36:55:a1:6b:73:b6:60:ff:81:4f:1f:76:98:ee:c6:
f0:e3:da:51:fd:96:26:53:5e:db:d7:09:69:5e:b5:45:80:83:
ad:27:d2:52:f6:63:f5:20:10:2c:f5:02:d8:7f:73:3c:59:5f:
92:9f:6c:f7:48:0f:d5:62:8e:d5:a7:6c:e1:f5:45:ca:04:2a:
10:48:64:19:49:28:ca:cb:2b:63:67:cd:cc:f6:54:0c:fc:f8:
da:c8:be:0e:96:a2:9d:a8:46:f7:eb:08:46:9b:74:af:8b:cf:
19:b9:87:4b:3e:5f:e6:dd:1d:6f:e1:8b:a0:47:39:77:e2:87:
5f:28:1c:ca:eb:bf:7c:53:d5:73:f4:3f:00:69:2d:e8:be:ad:
99:bf:e3:83:8a:78:47:3f:66:f6:d0:66:ef:7a:b6:6b:e9:12:
74:02:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 15:16:15 2024 by rpki-client on console-ams.rpki-client.org