Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68BE5E227E3E11EFBC518EB2762E951A.roa
File: 68BE5E227E3E11EFBC518EB2762E951A.roa (raw, json)
Hash identifier: EgzSvO+MAoyKnhc1Hpwfmm5B0DaSju236h13/vOpiXo=
Subject key identifier: E6:B6:3E:FB:CD:A2:D5:E0:C7:8A:DE:45:E7:B2:12:4B:C9:C1:51:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BC87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68BE5E227E3E11EFBC518EB2762E951A.roa
Signing time: Sun 29 Sep 2024 08:39:58 +0000
ROA not before: Sun 29 Sep 2024 08:39:55 +0000
ROA not after: Mon 30 Dec 2024 08:39:55 +0000
asID: 17561
IP address blocks: 45.194.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48263 (0xbc87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:39:55 2024 GMT
Not After : Dec 30 08:39:55 2024 GMT
Subject: CN=66f9125e-ca30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:cc:1c:24:57:ad:f7:fc:d0:7d:93:78:e9:
70:09:29:70:c2:f1:eb:70:be:a9:4f:c5:e3:c2:63:
60:4c:e5:e0:02:cf:de:b4:1a:61:7b:70:a9:99:db:
f9:05:a2:99:3c:13:4f:24:da:79:91:b3:ce:42:ce:
8f:aa:a9:eb:5d:60:5c:9b:80:9c:a2:e9:c3:39:6a:
ec:fa:35:c2:58:c0:84:8c:01:ae:91:13:f4:59:b2:
2e:22:66:c2:60:26:88:2d:5c:09:b8:ba:5a:18:4a:
f1:8b:d2:8b:90:63:bb:0a:62:4c:8c:df:44:8e:69:
9f:5f:cf:be:9f:ac:ec:18:8a:33:5c:44:24:ad:07:
f1:f3:2f:21:0d:32:c2:3d:f2:42:30:c8:ef:29:78:
99:2f:42:0b:b8:22:33:21:e1:4d:b9:cf:a2:5e:ca:
fc:29:13:ba:6b:81:69:31:3e:c9:d4:88:a7:f3:78:
c2:04:68:ab:19:94:46:e0:1c:0a:fd:90:9d:97:dc:
9a:63:67:8e:9f:28:ee:ac:56:21:9b:37:3c:81:80:
1f:94:39:e1:f9:75:36:e9:e4:82:ed:55:63:62:6c:
02:ec:75:6b:b8:43:f9:32:3a:61:d2:db:04:69:fc:
b5:a8:fa:ca:0f:37:bf:63:17:84:b7:93:90:1a:6f:
53:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B6:3E:FB:CD:A2:D5:E0:C7:8A:DE:45:E7:B2:12:4B:C9:C1:51:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68BE5E227E3E11EFBC518EB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.125.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f5:9b:d1:a9:ee:42:d0:c0:8a:87:33:9c:78:f2:07:98:a0:
39:27:c1:9c:93:33:cf:b9:6b:e3:f6:e5:db:0f:ba:68:1b:b7:
01:24:ea:08:b1:0d:31:8d:0d:06:42:d3:2c:7e:66:69:2c:11:
17:8e:c1:6c:ec:ff:db:65:00:c5:8a:14:af:31:3e:ab:ad:c5:
ca:86:9d:cd:97:89:0b:10:c5:ea:c9:a1:9d:d1:37:b4:d2:b4:
fc:05:99:7c:28:53:bf:92:1b:83:58:0e:06:8e:0a:d5:69:b1:
7b:12:b7:7b:12:b9:44:eb:e4:bd:fb:a5:44:2a:95:62:08:8f:
31:4a:0d:54:b5:18:1c:2c:ae:40:54:37:19:72:0e:5f:a8:b3:
8c:ab:a0:88:3c:7b:d6:5b:94:c3:1a:81:15:51:fa:62:15:0a:
86:16:ca:a1:74:e9:d5:7c:ee:75:5a:ce:86:f0:0a:1a:11:dc:
2c:6b:17:5b:c5:dd:76:9e:c0:3e:2e:d0:4d:17:68:87:6d:63:
2d:b3:b4:0f:8d:40:26:16:87:9f:61:4a:b7:65:5f:cc:a9:03:
6b:c4:36:0b:37:5f:05:01:a9:39:7f:d8:3a:d0:33:43:9a:c9:
19:1e:01:27:d0:9e:c5:39:bd:90:77:59:29:81:eb:fd:ab:33:
92:f6:99:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:33 2024 by rpki-client on console-fra.rpki-client.org