Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78073F9E9AB211EFB7DB968F762E951A.roa
File: 78073F9E9AB211EFB7DB968F762E951A.roa (raw, json)
Hash identifier: lRB5VMRXld0jrTGnh6q6wd/uMra86W6RTQoQwuwgGso=
Subject key identifier: 98:8B:31:6F:D6:29:F6:BF:65:24:B3:E0:F5:92:9C:8D:05:84:FC:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CDD2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78073F9E9AB211EFB7DB968F762E951A.roa
Signing time: Mon 04 Nov 2024 13:41:18 +0000
ROA not before: Mon 04 Nov 2024 13:41:14 +0000
ROA not after: Tue 03 Dec 2024 13:41:14 +0000
asID: 139646
IP address blocks: 45.201.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52690 (0xcdd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 13:41:14 2024 GMT
Not After : Dec 3 13:41:14 2024 GMT
Subject: CN=6728cefe-7b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cc:d0:87:f8:e5:0a:57:0e:38:c0:20:cf:cb:
dc:b0:74:c4:b5:93:8c:e0:48:2f:71:6d:74:79:c2:
b4:d2:7e:7f:50:0a:2b:75:53:cc:88:fd:95:f4:43:
29:a0:b0:31:2c:c6:8e:e7:19:48:23:fd:86:c4:f2:
fb:a1:5e:e5:c4:5a:91:c7:32:f9:dc:17:64:53:da:
1f:76:51:c2:ca:91:33:f7:06:06:c3:dc:3f:8b:22:
c7:49:3d:d7:40:62:91:da:4d:28:c3:14:95:12:20:
35:b5:07:03:92:46:29:8d:df:c3:ff:e6:d7:57:8e:
33:b6:46:99:7c:b3:ad:ba:0d:c1:f5:95:f2:48:1c:
9f:c6:c5:04:91:62:9e:d7:e9:8d:8a:d5:04:44:1c:
9d:5c:53:b4:27:cd:2d:aa:7e:64:26:2c:5a:3e:22:
72:00:65:88:51:0c:3d:05:54:17:ab:82:83:80:fa:
4b:70:44:78:92:c2:f4:18:9b:fb:11:4f:d4:92:a6:
d5:84:30:c2:e5:73:2a:d8:c2:d6:8a:70:96:c8:9b:
38:51:f5:8a:a1:1f:32:77:e6:d4:37:d0:ff:d4:6c:
44:6f:f9:d6:9f:61:05:30:60:88:41:7e:b1:76:c1:
ac:5b:8e:7f:80:21:d8:4b:3c:de:a2:4c:99:1e:82:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8B:31:6F:D6:29:F6:BF:65:24:B3:E0:F5:92:9C:8D:05:84:FC:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78073F9E9AB211EFB7DB968F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.240.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:b5:17:62:ed:c3:8c:d9:f3:cf:56:6b:56:49:77:1d:e4:0e:
85:c5:56:eb:c9:4a:80:9d:77:f7:47:ca:73:9d:bc:73:92:e1:
27:c5:2a:18:74:70:1e:f8:10:d4:9c:9e:b6:47:e6:0a:f4:50:
ea:a4:63:df:ec:77:0a:5b:d9:1b:2c:ac:de:e6:cb:0f:42:ad:
50:37:c5:c5:72:1e:0f:51:75:6e:dd:c3:2c:c8:27:06:e7:6d:
0e:8a:c8:9d:43:c9:63:0b:ac:37:1c:f2:a0:30:82:eb:69:5a:
40:85:5e:6c:26:bc:21:20:41:94:e0:ed:17:ba:39:a4:ca:3c:
65:7e:db:c2:19:b1:07:eb:1b:6a:5b:09:12:4e:bc:b5:dd:9d:
65:be:87:a6:47:f1:3c:c5:69:88:62:8e:7c:26:ca:96:84:a3:
86:c5:4f:2b:b1:2c:56:2a:cc:05:bb:51:e7:b5:22:93:d6:4c:
e3:c8:09:7e:e8:e4:5e:1c:d8:86:c6:9c:cd:45:a6:d9:8f:46:
bf:aa:c5:39:e7:f6:18:0e:c6:58:e4:d3:b3:e9:df:5e:ee:eb:
b4:b2:51:1a:c1:54:24:29:15:3b:83:e6:2e:31:99:b6:1e:63:
28:5c:7a:90:87:16:fc:68:f3:4a:94:df:f1:ba:83:93:cb:c1:
75:df:3a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:35 2024 by rpki-client on console-fra.rpki-client.org