Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69FDA680976611EFB0B16945762E951A.roa
File: 69FDA680976611EFB0B16945762E951A.roa (raw, json)
Hash identifier: gxKHXvqwT9W2FS/MG34/3VdeYzcojNQL4RQnkaZBAmo=
Subject key identifier: E3:B7:64:D1:62:3E:93:40:BF:01:B1:CC:84:B4:39:DD:DF:F0:42:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CAFE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69FDA680976611EFB0B16945762E951A.roa
Signing time: Thu 31 Oct 2024 08:59:19 +0000
ROA not before: Thu 31 Oct 2024 08:59:15 +0000
ROA not after: Sun 01 Dec 2024 08:59:15 +0000
asID: 54600
IP address blocks: 45.203.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51966 (0xcafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 08:59:15 2024 GMT
Not After : Dec 1 08:59:15 2024 GMT
Subject: CN=672346e7-b728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:7f:9f:f1:16:51:e7:53:ad:24:fe:59:c4:
9e:3f:bf:00:ce:e8:83:a9:49:f4:49:b1:3c:39:53:
94:6f:2f:64:ac:4e:fa:9c:d8:bb:0a:2c:51:36:c8:
b6:4e:c6:e0:f7:3d:63:a7:ff:f6:65:7b:bc:e2:90:
f6:e7:98:e3:a8:78:95:74:7d:e3:54:a8:ab:3e:f3:
b5:ab:ed:9e:77:8e:f1:58:04:0b:f6:e0:00:71:26:
a1:f3:c5:cf:df:a2:d0:c6:cd:45:b7:db:f5:8f:3d:
08:ae:73:90:6f:e7:dd:61:c3:b4:f1:e6:e2:f6:64:
eb:15:a9:2a:85:fa:e2:bd:0a:8f:1c:77:b5:d8:e9:
c6:52:f3:ff:6f:35:79:a1:51:1e:b0:47:43:dd:c6:
eb:d7:92:93:c6:ec:fd:0d:f6:52:32:16:ed:20:36:
1b:45:cf:08:ae:73:aa:0f:45:9f:bd:32:ec:0d:18:
08:40:f9:c8:0b:08:ee:3a:20:3b:9e:fa:93:47:8d:
0d:ce:a9:4e:65:1f:84:79:08:ae:06:88:01:ec:e2:
ce:c2:21:62:df:37:5e:52:a2:51:94:7c:c7:ac:d4:
1a:cf:58:25:70:a0:91:7c:c1:e7:41:cd:d2:ac:b2:
0e:64:c4:44:17:98:73:ba:ec:dd:43:c5:4a:75:67:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B7:64:D1:62:3E:93:40:BF:01:B1:CC:84:B4:39:DD:DF:F0:42:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69FDA680976611EFB0B16945762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.224.0/20
Signature Algorithm: sha256WithRSAEncryption
99:87:65:7b:5f:eb:a1:d3:27:28:b6:1e:51:ee:21:78:42:0d:
b5:96:d7:0c:4a:0a:20:6a:4c:78:1d:1b:6b:ff:cb:c2:0b:64:
91:7e:03:eb:c9:2d:26:d2:f0:67:35:48:c0:a8:26:a0:06:39:
1f:46:86:4a:19:2e:71:1a:85:b3:f4:51:f1:00:e0:fb:48:b6:
9a:7d:aa:91:74:04:06:3b:cb:cc:16:e2:4a:de:21:90:ef:63:
3a:d8:50:a4:33:52:a4:82:e7:2b:d3:74:38:ed:f9:5c:ce:fb:
bb:58:f6:75:ed:c4:56:e9:a7:22:c3:da:58:5b:71:71:d9:ae:
99:25:78:8d:13:bb:3d:8e:5d:83:06:8c:b0:d0:77:e6:d8:13:
26:54:32:49:e3:81:fd:f2:26:1b:03:25:55:a5:ba:9a:3d:24:
fb:4f:a3:04:39:a5:87:d7:27:42:b5:1f:11:4a:43:a1:bd:06:
a0:95:18:48:f5:58:f3:9f:60:86:9b:fc:11:e4:e5:21:32:4d:
f0:5c:fd:94:82:95:7a:b3:62:f1:5a:a7:7f:51:50:92:d1:8b:
f3:9b:6f:ce:9b:92:c7:58:26:39:4c:5e:1d:3a:52:79:49:45:
37:90:52:7f:5e:86:33:7e:20:f3:2c:92:f7:d0:84:3d:8d:ef:
b0:18:fd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:33 2024 by rpki-client on console-fra.rpki-client.org