Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79787A10E46311EE9B854E8D775412E6.roa
File: 79787A10E46311EE9B854E8D775412E6.roa (raw, json)
Hash identifier: MQrr6534wvvzgiEtqsW5WnJmYoXW/E5BaxSlxbWDjbo=
Subject key identifier: 9A:AD:84:F7:4B:42:E0:33:2D:DE:25:EB:AB:34:9B:30:82:9D:33:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7E96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79787A10E46311EE9B854E8D775412E6.roa
Signing time: Sun 17 Mar 2024 13:37:19 +0000
ROA not before: Sun 17 Mar 2024 13:37:15 +0000
ROA not after: Sat 15 Mar 2025 13:37:15 +0000
asID: 60609
IP address blocks: 45.200.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32406 (0x7e96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 17 13:37:15 2024 GMT
Not After : Mar 15 13:37:15 2025 GMT
Subject: CN=65f6f20e-dd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:be:0d:f8:0f:be:43:38:70:b1:06:45:4b:ed:
0a:e4:a5:44:db:9c:a1:bc:e0:1c:f9:68:af:c4:81:
74:d9:91:d1:3c:d0:8b:84:d9:c6:b9:06:51:e2:f0:
a0:51:13:df:52:17:21:51:cf:92:20:27:65:82:e1:
d7:ee:7b:a6:cb:ea:4c:fc:17:48:09:3e:86:66:cf:
7f:69:f2:57:3d:cc:e4:08:0d:a8:88:02:4e:d3:bf:
cf:87:8d:32:d9:15:be:b4:42:0a:17:54:2c:e4:ba:
32:fe:a2:27:5d:3d:3c:1d:af:bf:e1:96:ed:20:54:
1a:86:d4:70:52:b6:bb:dc:a3:8d:52:ed:f4:09:e4:
74:3f:de:e9:24:07:06:d8:cb:41:20:b1:22:b7:35:
53:b1:e6:6c:a5:60:05:06:14:83:fb:b6:f0:63:b0:
fc:c5:26:4f:10:bf:43:40:06:3c:e2:10:5b:b6:75:
18:ef:9a:71:b6:c1:12:a2:55:bc:30:88:f1:23:7c:
ea:bc:3e:0f:ff:5e:59:f6:53:13:db:40:72:89:08:
55:0f:13:ad:8b:88:07:07:5f:15:1a:c8:6d:8a:ca:
49:1f:72:75:f9:4f:75:fc:e7:ca:08:9c:39:8d:40:
4e:b6:f2:72:28:f3:2d:35:6e:f4:f7:1a:a6:7a:46:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AD:84:F7:4B:42:E0:33:2D:DE:25:EB:AB:34:9B:30:82:9D:33:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79787A10E46311EE9B854E8D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.137.0/24
Signature Algorithm: sha256WithRSAEncryption
26:70:5c:c5:5e:05:ba:25:62:2b:0f:03:4c:b7:4c:3a:58:9d:
17:94:51:50:1f:23:71:c0:0a:0e:42:b5:48:a1:89:2c:bb:53:
5a:15:c2:c7:39:54:95:92:ed:b1:4b:bc:5d:96:77:a6:b1:e4:
59:64:59:4a:84:5e:43:80:2f:16:1e:fc:a9:8e:98:fe:38:9b:
b7:f0:92:a4:31:bd:35:4b:47:0e:ab:70:8f:7b:c1:a0:0f:aa:
21:dc:1c:2e:72:02:ca:cb:e8:41:d5:9c:85:f5:89:98:9a:f0:
e3:4c:2e:db:7a:33:5b:ec:f7:9c:4a:1e:6c:2d:25:b3:ce:3a:
00:7e:6a:b8:41:94:48:b8:4c:0b:fd:cf:13:06:4a:6d:8f:0e:
5a:bc:3b:28:9a:64:38:70:6b:57:ea:30:16:86:14:07:4a:2e:
5a:de:16:50:e2:c5:5e:eb:79:dc:1c:43:61:ca:d4:72:db:80:
00:2c:c4:b7:be:dd:08:38:cc:6e:6c:65:5d:f8:b6:fb:85:f1:
82:c2:7f:04:60:bf:3a:84:34:b6:62:40:10:0f:cf:b4:c7:68:
d5:6a:e1:33:84:a3:d2:60:f9:57:c8:dc:aa:51:d0:19:a7:86:
8b:8c:ec:fb:5a:fd:b8:91:14:2a:73:7f:46:78:67:ca:81:3f:
c8:c1:d1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:35 2024 by rpki-client on console-fra.rpki-client.org