Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B883690A7DE11EFA4F2F2A4762E951A.roa
File: 6B883690A7DE11EFA4F2F2A4762E951A.roa (raw, json)
Hash identifier: I1W7CG9pMs8xGqVlYhRwY4s4kB/2285jEMFsmObooOo=
Subject key identifier: E9:34:A8:57:AA:FE:4E:A1:CC:D7:6A:3D:ED:93:1B:AC:28:20:76:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D70F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B883690A7DE11EFA4F2F2A4762E951A.roa
Signing time: Thu 21 Nov 2024 07:58:40 +0000
ROA not before: Thu 21 Nov 2024 07:58:36 +0000
ROA not after: Sat 04 Jan 2025 07:58:36 +0000
asID: 42831
IP address blocks: 45.198.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55055 (0xd70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 21 07:58:36 2024 GMT
Not After : Jan 4 07:58:36 2025 GMT
Subject: CN=673ee830-65f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:c4:40:88:95:ea:c4:bd:42:b7:90:cd:77:
4e:80:fb:df:21:7f:4b:20:93:ec:c7:8b:c4:05:f8:
b4:11:dd:5c:57:27:34:46:57:c7:4a:41:cb:8b:d7:
3e:39:2a:25:65:44:41:ec:fe:02:fe:be:2c:c3:9f:
95:b3:e8:b5:73:b5:0d:fb:84:09:f3:34:de:70:a3:
ed:92:42:21:11:35:15:55:ed:f6:91:3c:66:c0:73:
d2:72:32:62:fb:cf:28:31:20:c3:18:97:f2:3f:3b:
65:ba:ad:a8:3a:1e:25:87:c9:a6:78:b7:88:d1:e0:
6f:fe:56:e4:b4:bc:62:45:e0:2a:ab:f1:1c:ff:97:
bc:e4:1e:36:6e:9a:c8:4b:5a:da:a9:1f:3a:88:c4:
c1:70:49:9f:2e:f0:9f:03:ed:aa:f6:c4:92:29:61:
d2:5b:e6:d6:f3:7d:7c:c3:c1:e2:ca:68:7c:e1:f9:
cc:59:93:21:99:38:67:24:c7:6b:12:f9:df:94:bb:
d7:7b:d2:65:0e:e5:67:87:98:c1:5f:59:06:52:23:
6b:20:6d:b0:ea:ae:0b:ce:1e:47:f8:e6:95:35:e5:
18:8e:97:e7:fe:3a:7d:61:63:fb:f8:cc:64:2a:56:
de:17:f8:aa:0c:b0:53:58:70:7b:dd:8d:86:85:c2:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:34:A8:57:AA:FE:4E:A1:CC:D7:6A:3D:ED:93:1B:AC:28:20:76:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B883690A7DE11EFA4F2F2A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.176.0/22
Signature Algorithm: sha256WithRSAEncryption
99:bb:27:29:f4:fb:15:42:d5:ce:e9:69:95:64:e8:09:1c:78:
4c:ab:50:d1:2b:6f:bb:8e:32:44:e8:53:e2:2f:79:fe:e5:71:
8f:13:de:2b:7d:cc:2d:36:33:3d:12:cf:47:86:29:05:33:44:
75:ef:0a:e9:8d:45:6c:73:8b:db:68:a7:69:0a:38:2a:37:37:
cd:dd:55:0c:71:8d:6c:1e:8c:6e:ff:9b:d8:db:cd:0f:3b:d3:
68:5f:a2:74:9a:95:9b:7a:90:ba:30:36:e0:dd:f8:ae:f8:32:
98:63:69:12:d2:02:c5:96:78:99:a6:a0:c9:48:52:33:3c:30:
35:3c:07:3a:26:8f:8e:ef:d9:32:7a:9e:f9:c4:d0:d7:77:89:
44:e5:5f:c9:95:66:ad:5a:b3:4c:ee:f3:f2:e6:21:09:47:85:
a9:d5:3c:59:6c:be:5c:5e:c9:58:37:84:66:34:e7:61:95:ba:
bd:6e:68:da:6d:de:50:98:80:fa:68:be:25:ce:de:b3:75:c1:
be:cd:20:42:86:8c:7e:ee:79:3e:3e:04:df:0b:19:60:4e:1c:
58:83:16:56:71:34:38:ee:e7:08:b5:ac:5a:53:a3:c9:ff:2f:
2c:73:49:21:ea:cd:ca:2e:d5:50:1a:df:9f:44:f0:bd:53:04:
01:64:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:33 2024 by rpki-client on console-fra.rpki-client.org