Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CCF602895DC11EF869F3E8F762E951A.roa
File: 6CCF602895DC11EF869F3E8F762E951A.roa (raw, json)
Hash identifier: fd+GXkNcNIN15rEjbKhLs11UayO3+vDf75qtayUh044=
Subject key identifier: A2:9A:99:A3:3C:B0:9D:77:9B:B3:25:03:84:B4:6C:88:66:EE:74:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C992
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CCF602895DC11EF869F3E8F762E951A.roa
Signing time: Tue 29 Oct 2024 09:59:02 +0000
ROA not before: Tue 29 Oct 2024 09:58:58 +0000
ROA not after: Mon 09 Dec 2024 09:58:58 +0000
asID: 138915
IP address blocks: 45.197.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51602 (0xc992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 29 09:58:58 2024 GMT
Not After : Dec 9 09:58:58 2024 GMT
Subject: CN=6720b1e6-ade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:dd:a0:3a:41:c6:6b:68:8e:8e:9a:32:20:
a7:56:91:c4:93:4c:a8:bc:d5:ae:50:59:1a:42:d0:
7d:cb:3e:b7:5d:b1:bc:17:2d:f3:d3:29:08:e5:c4:
6e:bc:33:bd:60:7e:86:3b:ae:85:07:d9:b8:53:56:
a9:87:46:b3:bb:1c:6f:c9:b0:72:e5:6a:54:98:a6:
33:35:95:72:c3:12:c7:7a:26:0e:66:30:63:68:40:
a5:89:97:21:9c:73:30:57:af:65:b2:18:e8:aa:cf:
f6:b3:14:ce:59:1f:c0:da:bb:98:21:f8:57:06:c2:
c1:fa:8b:d9:a3:29:15:2d:87:72:a8:de:73:a2:f6:
2e:c2:9f:77:31:df:9a:cd:6a:70:b8:63:fe:41:83:
be:54:f3:a7:a8:ff:82:c0:49:8b:04:a0:7b:42:af:
64:0d:a6:f3:6e:d9:28:e2:12:2c:a2:c4:e7:94:86:
6f:53:59:5b:e8:78:bf:0c:3a:44:f3:74:91:53:d2:
da:f5:b4:a1:90:0f:c7:97:f5:1e:b5:ce:80:c1:8d:
1e:96:4a:7a:8d:1c:3c:79:46:83:77:b3:c1:91:e8:
c4:d8:e4:3c:46:13:e9:22:9e:47:5a:01:13:12:6a:
84:32:d3:16:6f:75:90:b8:7a:19:01:13:51:f2:9b:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9A:99:A3:3C:B0:9D:77:9B:B3:25:03:84:B4:6C:88:66:EE:74:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CCF602895DC11EF869F3E8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.74.0/23
Signature Algorithm: sha256WithRSAEncryption
22:e5:1e:da:7d:dd:79:74:8a:2b:f7:8f:62:6f:f7:a8:cc:ea:
6b:00:26:84:fa:39:f2:3a:57:0e:af:6f:dd:9a:71:c1:b6:94:
d8:18:23:39:f8:f4:27:f7:d1:ef:e9:78:e6:9a:fc:6d:0d:dd:
03:5a:3d:ef:45:5a:fc:01:51:ce:f0:37:a6:b4:26:ed:09:d2:
da:68:e3:8e:cb:0a:71:53:20:e5:d1:0d:60:e2:b3:56:99:1e:
65:e6:25:10:d4:c7:d9:9f:95:ed:ab:ef:86:fe:60:fc:be:98:
1b:85:f9:ab:0e:37:f8:40:f6:92:04:4f:bb:90:11:a3:4c:95:
53:58:0c:5b:05:19:38:94:2a:96:de:af:17:ba:82:ad:66:7c:
d2:a3:af:b6:57:cf:7d:04:bb:ce:dc:5f:a8:94:1d:58:ff:94:
e0:70:b7:05:4a:2d:53:23:9f:1d:50:4d:c4:9b:e3:16:8e:86:
70:20:e8:db:9a:12:f4:12:fd:19:0d:70:8e:71:e6:91:99:52:
df:59:96:17:45:2d:1f:cd:f7:de:6c:fc:6f:95:ff:a5:88:eb:
22:aa:dd:f3:87:0c:32:31:ae:70:cd:7f:57:61:06:20:17:fe:
72:80:e0:15:21:1f:13:36:b6:92:bd:a2:01:91:70:d1:3e:53:
38:a6:a3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:34 2024 by rpki-client on console-fra.rpki-client.org