Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68600FFEA0DD11EFB0686B68762E951A.roa
File: 68600FFEA0DD11EFB0686B68762E951A.roa (raw, json)
Hash identifier: CJq54tvDozLkSBKS9Dh/xuiAVa6vYA/m+Z4e4JyoE8E=
Subject key identifier: 65:A9:45:EA:7C:9B:AB:A6:68:FA:C6:26:D0:BE:F8:A0:62:25:D8:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D191
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68600FFEA0DD11EFB0686B68762E951A.roa
Signing time: Tue 12 Nov 2024 10:03:47 +0000
ROA not before: Tue 12 Nov 2024 10:03:43 +0000
ROA not after: Sat 01 Feb 2025 10:03:43 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53649 (0xd191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 10:03:43 2024 GMT
Not After : Feb 1 10:03:43 2025 GMT
Subject: CN=67332803-3a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:b6:b1:01:f5:89:33:4d:41:d8:46:ba:48:
71:56:05:df:b3:df:0d:aa:84:8d:61:8d:c4:37:16:
4e:d3:49:56:d5:87:83:d4:39:6e:1c:14:e1:bb:89:
5a:5d:d9:5b:3b:90:84:36:76:00:1c:94:71:00:09:
b8:64:86:82:b5:41:bf:93:b2:c6:6b:c0:f9:14:f8:
bd:1a:72:dc:66:a5:91:e5:04:0f:7d:24:1d:2d:bf:
f2:d9:10:eb:5b:5b:89:22:28:02:31:47:cb:3b:55:
fb:fb:7c:81:73:7a:b6:b6:da:6b:d0:22:3e:19:b2:
3f:2a:8a:12:6a:e1:56:56:ec:5f:7c:c4:17:65:cf:
cd:86:1f:26:c3:6e:b4:8e:32:26:91:3a:c7:16:0d:
94:cb:1b:df:9e:12:4b:ab:79:44:4f:97:35:4a:24:
29:2b:f2:0d:b4:ec:97:a4:85:b0:a0:85:86:3c:02:
a6:ee:94:90:8f:7c:31:5a:8f:96:e8:8f:ca:2a:ee:
8e:d8:3f:61:ec:94:1b:97:b5:d1:d4:e4:c1:13:4c:
69:96:5b:19:15:42:2a:1c:8d:30:70:7c:1d:79:cf:
3d:73:41:2b:90:12:9d:47:b8:33:19:b5:c6:79:4c:
a3:3e:f5:72:f0:01:bf:62:cc:cb:2e:cf:dc:e2:e7:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A9:45:EA:7C:9B:AB:A6:68:FA:C6:26:D0:BE:F8:A0:62:25:D8:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68600FFEA0DD11EFB0686B68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:96:38:2f:e5:b8:f9:54:c4:37:d6:14:52:c3:39:77:7e:56:
aa:a2:76:75:b7:e2:d2:a4:f9:96:78:9e:51:5c:05:96:9f:86:
ad:cd:dc:ec:af:cc:95:b6:96:96:d8:fe:3a:c1:07:3b:9a:72:
d1:06:f0:39:71:bd:7b:66:38:20:22:cb:53:41:46:93:da:00:
e5:9d:ca:4d:58:1f:78:33:99:4e:db:e0:52:fa:aa:7d:35:fa:
a0:7f:48:99:f2:bc:96:4c:3d:5b:4a:ff:43:49:52:d7:84:e9:
05:98:fe:3d:2c:2d:57:d3:4a:e7:83:e6:11:32:a6:82:9f:9b:
a6:1a:90:71:d6:18:c2:ad:73:fd:74:9c:44:ec:c3:c7:30:09:
e3:64:03:27:44:a9:ad:4e:ce:ce:e0:b5:96:cd:60:c1:e7:35:
e8:67:b6:77:1b:8c:66:b3:64:8a:5f:d2:15:77:a4:de:f1:07:
11:fb:b0:e1:28:a5:dd:9b:9b:f1:d2:1f:5e:4e:6d:fc:52:35:
e7:41:e0:4b:58:57:70:ed:89:36:7c:5b:0f:9e:23:63:c9:5c:
ac:a1:24:65:a6:24:f1:e6:55:3c:5f:ab:8a:30:69:59:04:26:
2c:93:78:ce:e9:18:b8:e1:25:c9:cd:8d:18:29:c5:aa:62:a6:
f4:4d:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:32 2024 by rpki-client on console-fra.rpki-client.org