Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C29E6E2A70811EF9CFC2B62762E951A.roa
File: 6C29E6E2A70811EF9CFC2B62762E951A.roa (raw, json)
Hash identifier: rAPgndMYavv/YScGh5c/8oM9GGToH4nbyk1nUzdR3TE=
Subject key identifier: 65:C7:D5:1E:CC:A8:39:0F:3C:B2:29:16:07:66:BC:1F:03:37:B0:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C29E6E2A70811EF9CFC2B62762E951A.roa
Signing time: Wed 20 Nov 2024 06:26:49 +0000
ROA not before: Wed 20 Nov 2024 06:26:45 +0000
ROA not after: Fri 21 Feb 2025 06:26:45 +0000
asID: 14618
IP address blocks: 45.202.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54693 (0xd5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 06:26:45 2024 GMT
Not After : Feb 21 06:26:45 2025 GMT
Subject: CN=673d8129-df27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:89:af:78:58:9d:a3:de:fc:fd:75:1e:4b:
d0:0a:d4:ed:c6:ed:86:42:77:21:3f:2c:c9:90:e3:
21:36:5d:9c:13:25:b3:37:4a:c4:99:46:da:65:b9:
a8:fe:c9:7e:d9:11:bf:28:b6:c5:44:af:a2:18:8e:
4f:cd:63:13:63:1e:68:fd:6f:df:39:c0:01:69:07:
70:f1:c1:6e:42:85:b0:f3:b1:2e:2b:64:e2:c2:7b:
58:87:79:f5:c0:4c:64:5f:9f:4d:68:70:6f:97:c2:
29:a5:c0:dd:31:55:fc:a2:57:ec:76:3c:e0:ac:79:
de:4f:ad:be:1b:62:d4:29:83:72:83:5e:8a:7d:cf:
cc:d6:4f:f1:27:59:21:70:5c:d1:59:59:f9:16:f1:
8e:17:92:94:f3:41:00:4a:1f:81:ab:2d:05:0c:e6:
69:55:fe:fc:24:fa:89:d2:73:17:f9:60:c9:cc:aa:
04:69:b8:bc:9d:f6:90:ca:e7:1a:25:42:ac:bb:fc:
e6:2f:64:35:a5:8f:51:7e:b2:0b:fa:0d:5e:1b:68:
d3:14:88:58:65:74:cb:1c:87:ff:04:87:95:2a:ce:
1e:0f:99:68:ae:9b:d6:34:76:93:2a:1f:5d:68:62:
6e:77:f1:d0:76:04:05:ba:51:03:74:f9:ff:e4:b9:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C7:D5:1E:CC:A8:39:0F:3C:B2:29:16:07:66:BC:1F:03:37:B0:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C29E6E2A70811EF9CFC2B62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.113.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f1:36:38:72:fd:25:c5:3c:20:b2:c9:69:2c:7c:ec:13:34:
64:25:f1:bc:2c:1b:3c:63:f7:23:aa:b2:ae:8b:ec:65:10:c3:
d1:ba:19:94:95:43:e6:e0:f3:be:79:49:f5:a2:ce:dd:f0:b8:
a1:3f:c5:e5:e4:e4:0b:e9:91:36:36:87:86:5a:1f:55:19:84:
b5:27:85:7f:49:8c:26:7e:e3:fc:dc:d4:bb:e1:ce:bf:fe:6c:
24:db:48:6d:83:39:3f:69:fa:b9:23:7c:ef:d7:be:e8:b8:ce:
57:f8:ae:27:2c:95:3e:f4:20:ac:09:d5:e5:40:09:57:48:6b:
9d:75:b1:0a:f9:7c:94:ef:10:29:ca:b4:42:67:21:92:81:f6:
4c:2e:fb:59:4b:b3:6b:6b:76:74:25:bb:5f:8a:6e:68:88:d8:
1a:74:f8:ed:7b:b2:3d:4d:c5:ac:1b:72:06:fa:8d:4d:90:19:
f9:39:8f:46:3b:58:1a:04:c8:98:ed:02:2c:10:2e:19:77:62:
48:b3:c2:65:26:6c:a6:59:1d:19:06:bd:31:58:e4:0c:77:1e:
68:3b:ca:56:69:ef:be:56:59:40:78:51:26:7f:f1:80:92:c5:
27:5e:41:bb:4a:9a:8b:1d:cb:41:d1:0a:96:04:83:b2:5b:09:
51:b0:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:33 2024 by rpki-client on console-fra.rpki-client.org